Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
File: nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer (raw, json)
Hash identifier: XCa+e6SVSpDZE4K3+2WabEb2A7qj3U9lwgr1bAchA18=
Subject key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D037
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 21 Apr 2025 19:38:57 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 36.206.0.0/16
IP: 36.212.0.0 -- 36.221.255.255
IP: 110.100.0.0/16
IP: 110.116.0.0/16
IP: 110.199.0.0/16
IP: 110.218.0.0/15
IP: 122.94.0.0/16
IP: 123.77.0.0/16
IP: 222.45.0.0/16
IP: 222.49.128.0/17
IP: 222.59.128.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53303 (0xd037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 21 19:38:57 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:ad:1b:43:76:5d:77:9d:6c:3c:27:96:d9:
fb:42:1d:91:c9:d2:bc:ee:73:8e:09:97:59:99:b3:
20:75:1f:bb:19:ff:a8:22:12:f8:92:1b:37:f6:c6:
07:2f:f0:83:52:81:88:0e:ad:9c:7e:a1:60:0e:e9:
2f:1f:2f:6e:48:69:52:6f:a2:67:4f:3d:58:37:1f:
4f:59:4c:82:6d:74:4e:34:8e:c2:50:84:a9:2a:a7:
83:00:61:3d:e5:03:f9:b1:86:3f:04:4c:ce:69:33:
1d:31:6e:27:e1:01:be:88:c4:60:e6:00:2b:a3:b7:
09:f1:5e:9a:e5:87:ee:13:e6:b2:7b:b6:4c:9c:6c:
67:ee:9f:18:26:b8:05:9e:cc:b2:ff:ad:4f:9d:88:
78:8e:b7:bb:ef:9f:31:a5:88:96:3e:06:6c:34:46:
35:a4:e7:ca:eb:44:b3:51:10:57:32:6a:73:79:4e:
a7:ed:1e:7a:0c:b3:59:9b:c5:f8:1e:0d:dc:14:c3:
a3:87:63:5b:a9:8e:e8:c1:48:6a:a1:00:7d:82:67:
14:21:1d:01:d9:6c:47:a5:08:e4:6c:60:37:3e:cf:
01:0d:97:38:d8:37:af:98:9c:68:c9:e3:af:f2:7d:
9a:65:6a:21:61:40:a1:94:3a:c3:12:62:14:93:57:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.206.0.0/16
36.212.0.0-36.221.255.255
110.100.0.0/16
110.116.0.0/16
110.199.0.0/16
110.218.0.0/15
122.94.0.0/16
123.77.0.0/16
222.45.0.0/16
222.49.128.0/17
222.59.128.0/17
Signature Algorithm: sha256WithRSAEncryption
31:d8:74:48:7d:c1:e6:e9:ab:c8:fb:d4:36:78:11:dd:86:9b:
8d:a8:12:7e:32:b6:28:98:d4:d7:08:f0:19:9f:51:8f:51:c5:
aa:29:64:8d:af:e1:30:92:19:5e:29:41:fe:3d:c4:df:1e:ab:
b4:29:8e:57:ba:a8:14:55:67:f2:72:40:79:04:64:c1:1e:6f:
45:7c:c2:05:92:39:e0:4b:26:20:36:2d:c1:73:b1:51:16:fe:
24:53:34:4e:8f:e3:07:d6:92:93:cd:58:03:72:f9:2f:fb:dd:
98:de:47:03:2a:56:a6:01:6a:4a:ef:02:ac:32:83:b4:be:50:
28:ac:c7:11:3c:a7:57:76:43:ca:be:f8:e6:d8:75:14:22:39:
20:d4:24:ad:cd:56:b3:d8:17:c7:87:a3:14:09:70:65:e2:1c:
a2:06:43:01:d2:4a:67:00:7b:43:24:6c:0c:3e:3d:3d:4c:15:
21:7c:88:94:ea:ca:68:ad:09:b6:76:2d:30:9a:73:54:13:92:
76:6f:35:9d:59:49:9e:61:a6:da:a5:16:ce:33:4f:40:2a:ad:
99:2f:22:6b:0c:e4:2f:40:77:1b:40:30:cb:9e:c7:52:7d:5e:
60:af:aa:ea:f2:59:c2:8e:1e:13:47:51:c2:cb:69:b8:7f:64:
72:8a:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:58 2025 by rpki-client