Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/n_rAX7q4ai-Wvk0Rbe3Vacn9XEk.cer
File: n_rAX7q4ai-Wvk0Rbe3Vacn9XEk.cer (raw, json)
Hash identifier: acZbXVS7pAstPFUi+zRIHjoJ+ze+KGLx/iiuPXlCcs8=
Subject key identifier: 9F:FA:C0:5F:BA:B8:6A:2F:96:BE:4D:11:6D:ED:D5:69:C9:FD:5C:49
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CE83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/n_rAX7q4ai-Wvk0Rbe3Vacn9XEk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:15:00 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 38373
IP: 119.80.0.0/19
IP: 119.80.48.0 -- 119.80.191.255
IP: 119.80.204.0 -- 119.80.239.255
IP: 119.80.244.0 -- 119.80.255.255
IP: 2400:5580::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52867 (0xce83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:15:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9FFAC05FBAB86A2F96BE4D116DEDD569C9FD5C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:ad:27:30:a1:de:2a:ed:69:7c:73:97:fd:
91:33:0f:a7:cd:2d:ff:7e:3f:6b:65:ac:93:15:e2:
ce:5a:74:eb:90:e8:94:49:c3:14:db:76:da:ed:ba:
82:db:1a:bc:47:f0:ee:82:42:d4:55:66:cd:af:44:
b3:f4:e4:dd:f8:18:40:17:fa:fd:53:23:b6:d4:94:
c4:53:f9:6a:af:a7:e5:3b:93:1b:c9:56:02:50:19:
91:6f:29:a6:6e:9c:7f:f9:31:84:ff:95:22:f7:41:
43:3b:16:af:ad:2d:ef:af:31:65:c5:af:fa:af:32:
41:d1:44:cd:34:f3:46:64:e2:48:1b:b0:cf:4e:ef:
53:58:61:7a:fa:b0:53:31:41:21:0c:7f:c1:d5:5e:
1c:cf:82:00:84:e9:7d:0f:a2:bc:1e:98:2d:88:11:
d0:b3:79:3e:71:e1:bb:fc:4a:df:70:fc:74:db:ae:
b3:04:b9:c7:b7:7a:2a:60:64:b7:61:25:f4:f9:54:
2a:dc:9b:a8:76:3f:6f:ef:01:4a:31:8a:02:3c:91:
4c:82:46:2f:3b:76:9c:82:fe:4a:e6:58:0b:1c:ee:
00:bd:cb:44:06:7d:66:2d:bd:8a:0d:af:22:7e:ce:
c1:4e:9b:9b:d2:70:6d:c8:e3:73:d1:e6:8d:58:0e:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:C0:5F:BA:B8:6A:2F:96:BE:4D:11:6D:ED:D5:69:C9:FD:5C:49
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/n_rAX7q4ai-Wvk0Rbe3Vacn9XEk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38373
sbgp-ipAddrBlock: critical
IPv4:
119.80.0.0/19
119.80.48.0-119.80.191.255
119.80.204.0-119.80.239.255
119.80.244.0-119.80.255.255
IPv6:
2400:5580::/32
Signature Algorithm: sha256WithRSAEncryption
17:0e:af:3e:f5:25:c7:70:0c:43:ea:30:72:01:d1:66:14:42:
87:40:d6:42:b6:68:62:b8:09:b1:3f:8e:f0:e4:61:7c:7a:c3:
23:ee:17:ec:f9:6d:c6:a4:d6:36:92:81:51:40:49:34:d8:04:
10:1a:58:66:c3:07:30:a4:24:1b:ec:02:6b:e7:f8:6b:5b:9f:
3e:01:c9:c4:65:4a:6d:73:16:b2:71:fc:1a:d6:9d:4a:e5:10:
ac:2c:2f:db:99:68:6c:5e:78:9f:f8:56:0e:a0:df:e1:4b:2b:
d0:08:1f:44:8c:3f:83:2f:de:78:d3:ec:e3:07:8d:03:c2:92:
ed:44:3b:9d:ac:ee:1c:14:05:68:4f:fb:6c:54:f9:5c:a4:d0:
6b:99:94:9f:20:21:16:bb:78:16:1c:c6:58:bd:36:ad:94:38:
c1:e1:3a:6d:cc:47:e9:8d:9e:67:64:b9:d1:cd:ff:78:6d:a9:
74:1b:7f:63:9d:ad:47:6a:56:89:f4:0b:e2:c8:01:51:84:40:
ee:f0:5a:12:a9:a0:55:e2:ad:0b:99:4d:dd:60:d0:2e:49:0b:
7f:b5:aa:86:1d:27:52:cf:07:74:15:24:97:00:52:8f:22:df:
84:cc:f0:d0:bd:a7:10:2d:d7:5e:cb:88:31:76:62:44:a9:0b:
73:84:e5:24
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAM6DMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODE1MDBaFw0yNjA0MDMwODAwMDlaMDMx
MTAvBgNVBAMTKDlGRkFDMDVGQkFCODZBMkY5NkJFNEQxMTZERURENTY5QzlGRDVD
NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/60nMKHeKu1pfHOX
/ZEzD6fNLf9+P2tlrJMV4s5adOuQ6JRJwxTbdtrtuoLbGrxH8O6CQtRVZs2vRLP0
5N34GEAX+v1TI7bUlMRT+Wqvp+U7kxvJVgJQGZFvKaZunH/5MYT/lSL3QUM7Fq+t
Le+vMWXFr/qvMkHRRM0080Zk4kgbsM9O71NYYXr6sFMxQSEMf8HVXhzPggCE6X0P
orwemC2IEdCzeT5x4bv8St9w/HTbrrMEuce3eipgZLdhJfT5VCrcm6h2P2/vAUox
igI8kUyCRi87dpyC/krmWAsc7gC9y0QGfWYtvYoNryJ+zsFOm5vScG3I43PR5o1Y
Dor3AgMBAAGjggKnMIICozAdBgNVHQ4EFgQUn/rAX7q4ai+Wvk0Rbe3Vacn9XEkw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy
Mi8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zMjIvbl9yQVg3cTRhaS1XdmswUmJlM1ZhY245WEVrLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAleUwVwYIKwYBBQUHAQcBAf8ESDBGMDUE
AgABMC8DBAV3UAAwDAMEBHdQMAMEBndQgDAMAwQCd1DMAwQEd1DgMAsDBAJ3UPQD
AwB3UDANBAIAAjAHAwUAJABVgDANBgkqhkiG9w0BAQsFAAOCAQEAFw6vPvUlx3AM
Q+owcgHRZhRCh0DWQrZoYrgJsT+O8ORhfHrDI+4X7PltxqTWNpKBUUBJNNgEEBpY
ZsMHMKQkG+wCa+f4a1ufPgHJxGVKbXMWsnH8GtadSuUQrCwv25lobF54n/hWDqDf
4Usr0AgfRIw/gy/eeNPs4weNA8KS7UQ7nazuHBQFaE/7bFT5XKTQa5mUnyAhFrt4
FhzGWL02rZQ4weE6bcxH6Y2eZ2S50c3/eG2pdBt/Y52tR2pWifQL4sgBUYRA7vBa
EqmgVeKtC5lN3WDQLkkLf7Wqhh0nUs8HdBUklwBSjyLfhMzw0L2nEC3XXsuIMXZi
RKkLc4TlJA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:10 2025 by rpki-client