Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gL0CjXa7PVXmZBaamvDfKpjHUFU.cer
File: gL0CjXa7PVXmZBaamvDfKpjHUFU.cer (raw, json)
Hash identifier: moWrLPTCdk8Wa/tMG+TNq/N2ruYA/RwTCZOgsL3Spcs=
Subject key identifier: 80:BD:02:8D:76:BB:3D:55:E6:64:16:9A:9A:F0:DF:2A:98:C7:50:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D384
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/gL0CjXa7PVXmZBaamvDfKpjHUFU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 26 May 2025 07:22:30 +0000
Certificate not after: Tue 26 May 2026 07:10:29 +0000
Subordinate resources: AS: 146772
IP: 45.248.108.0/22
IP: 45.250.180.0 -- 45.250.187.255
IP: 45.251.0.0/22
IP: 103.191.242.0/23
IP: 103.216.252.0/22
IP: 103.219.84.0 -- 103.219.91.255
IP: 103.219.100.0/22
IP: 2405:80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Jun 2025 23:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54148 (0xd384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 26 07:22:30 2025 GMT
Not After : May 26 07:10:29 2026 GMT
Subject: CN=80BD028D76BB3D55E664169A9AF0DF2A98C75055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:64:35:3d:51:b5:d7:98:bd:c6:75:7e:ae:
24:a9:4d:6f:93:63:93:b9:87:02:f9:1d:f6:0e:39:
1d:62:c0:ce:73:a2:14:8d:19:c8:d4:eb:21:6a:4c:
cf:69:26:26:06:c3:2b:95:0b:8b:ea:a3:58:97:d0:
0c:a6:c8:49:7a:19:96:2f:9f:dc:02:4e:3b:e7:5b:
93:1c:74:c4:59:f6:85:47:8e:95:eb:27:f1:21:25:
15:2a:b5:27:56:74:f0:20:28:bd:e6:a8:5a:bd:1f:
b8:d2:a5:17:69:6c:56:85:16:f2:84:89:f5:b6:20:
05:c3:7e:ce:d8:ae:dd:f3:14:d9:9b:7b:91:5a:37:
27:82:ab:76:f3:e4:4a:d7:be:98:e3:a6:76:9e:ad:
cb:ed:d6:d5:59:39:8b:76:e1:64:67:4e:45:69:6e:
1d:e7:85:3c:25:f3:69:3d:98:f5:67:58:37:49:37:
37:2b:57:95:8c:89:6b:9b:93:b6:01:63:cd:f8:20:
a2:9a:00:03:fe:0e:11:29:91:df:22:01:56:77:b2:
45:0d:78:17:10:18:d7:3f:c6:db:76:44:30:c0:40:
dd:b4:b3:1a:55:2e:99:a7:10:df:8f:28:f4:f2:98:
4b:04:99:9f:58:58:85:47:a3:67:ad:e6:87:16:6f:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:02:8D:76:BB:3D:55:E6:64:16:9A:9A:F0:DF:2A:98:C7:50:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/gL0CjXa7PVXmZBaamvDfKpjHUFU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146772
sbgp-ipAddrBlock: critical
IPv4:
45.248.108.0/22
45.250.180.0-45.250.187.255
45.251.0.0/22
103.191.242.0/23
103.216.252.0/22
103.219.84.0-103.219.91.255
103.219.100.0/22
IPv6:
2405:80::/32
Signature Algorithm: sha256WithRSAEncryption
a6:20:34:47:26:fd:a7:ba:cb:54:5d:59:e4:94:0f:40:53:fd:
1b:da:80:eb:49:41:07:3a:57:c9:c9:5b:11:95:ba:20:bc:5f:
f6:4a:d4:c7:e5:f7:bc:28:2e:7f:9c:4e:0f:4a:1d:a6:c4:10:
ef:0c:f7:9f:8c:9b:a0:a6:5a:dd:9c:f6:48:c4:d0:58:7e:40:
56:c7:7f:c4:59:b0:9b:22:0d:b4:06:0a:ce:73:b4:7b:32:97:
60:02:98:90:1b:34:d4:c8:7b:70:ac:ff:e2:3d:99:73:7b:a4:
49:f1:63:2f:ef:04:70:17:5a:1a:bb:c0:49:85:60:3b:d4:4f:
34:9d:8a:ad:05:21:1d:a7:96:27:07:88:b8:81:db:02:7b:80:
52:5f:47:f9:a2:13:0e:0b:8d:a1:76:12:b9:16:f6:7d:5e:f9:
71:2a:17:b8:8d:92:fc:87:f4:86:cc:44:54:9c:2e:83:a0:d8:
98:38:9b:a5:60:76:16:6d:15:9a:ef:ce:34:79:03:39:f1:ff:
37:52:2c:e1:bb:d5:9b:79:44:2e:2f:34:23:f5:e9:b4:12:ce:
c9:98:3e:bf:89:16:e4:90:4b:99:8b:55:d1:40:6a:5b:91:f9:
72:85:6f:37:29:f6:d2:f5:56:de:b7:04:da:d5:9b:c2:b2:57:
60:2a:17:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:35:44 2025 by rpki-client