Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
File: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer (raw, json)
Hash identifier: tk5RuoZ1WbbvxepC9k4Am64VLbgogEGDNuvpIY41w1Y=
Subject key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CE4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:13:54 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 43.250.116.0/22
IP: 103.108.192.0/22
IP: 103.139.0.0/22
IP: 103.235.184.0/22
IP: 150.242.224.0/22
IP: 218.247.64.0/19
IP: 219.234.0.0/19
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52815 (0xce4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:13:54 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:a5:2a:39:f7:16:70:ff:b7:6c:01:dc:24:
f8:ad:36:53:c9:f0:f1:95:d0:f8:a2:46:35:9f:5c:
f2:ce:e2:ba:9a:64:e6:10:ea:c7:46:70:fa:a7:1c:
05:28:a4:80:a6:cb:a8:24:6d:49:c4:48:3e:28:64:
24:90:86:10:59:63:e6:a8:6a:90:14:13:92:18:b9:
ab:8f:7a:c6:63:03:b9:63:90:95:f5:72:09:6b:9b:
6e:ee:59:91:ef:59:3b:3e:c0:ea:bb:dd:bd:34:ef:
3c:c2:4f:cf:12:4d:5b:df:69:71:6a:8d:32:a8:cd:
cb:07:ad:d9:7d:77:69:a8:5b:f8:3f:7b:ef:56:8a:
fb:1a:db:8c:6c:9e:51:9e:ea:27:51:4c:9d:f1:4a:
b0:7a:90:3c:16:cf:1e:80:a4:ad:40:7a:13:38:45:
89:4f:3a:5a:7e:da:d4:62:7f:3c:11:40:72:79:b2:
49:e6:2f:07:07:60:ae:db:1d:77:b8:22:ad:ff:90:
10:a6:38:be:56:98:e8:17:f6:a7:5e:4e:94:db:c7:
a1:2c:76:1f:13:c5:9c:b7:4f:f9:67:2b:a9:b9:b9:
e7:ba:c8:90:e1:ef:1f:b7:36:55:87:03:ce:00:e9:
42:4c:24:26:a0:4d:1a:16:9c:6f:5d:5e:13:d7:4f:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.108.192.0/22
103.139.0.0/22
103.235.184.0/22
150.242.224.0/22
218.247.64.0/19
219.234.0.0/19
Signature Algorithm: sha256WithRSAEncryption
66:31:b5:d7:97:6f:a4:16:3a:73:84:4d:ea:68:d1:83:0f:58:
f2:f5:b0:a9:ab:97:b2:ba:0d:8f:e5:58:bd:fd:0d:87:67:33:
9b:0b:3c:ab:9c:9c:e7:e1:1c:71:b0:94:62:04:83:7e:22:7e:
b4:f0:8e:3c:91:c7:2b:c9:76:04:cb:89:d0:9d:21:10:a0:62:
8c:18:d0:f1:88:ba:73:91:36:3b:94:79:cc:a1:cd:b5:ec:9e:
31:e5:ed:4e:8b:71:ea:49:b4:6e:a9:ce:75:6e:b6:9b:d9:7f:
61:ab:0e:94:31:29:53:03:c7:5d:8a:07:63:0e:f9:af:2e:2f:
8b:6b:96:12:8b:e2:c2:47:2d:99:ee:89:64:6f:e0:f1:05:a7:
20:69:60:be:60:6d:a1:4a:d9:c8:80:16:d0:b4:44:a2:67:f5:
9a:67:2c:f6:01:22:32:ac:86:74:3f:a4:87:0b:cb:5e:18:2b:
85:08:da:10:4b:ef:8c:72:c1:ec:a8:0a:3e:0b:b8:c3:24:b3:
e3:26:01:36:30:18:5c:ab:d2:b3:55:cf:e8:8e:0b:d6:69:19:
c8:d7:8b:4a:59:61:6d:83:d5:2e:38:b0:62:34:1a:64:9a:f5:
39:21:98:e9:e4:4f:bb:40:ed:40:c0:83:9c:c3:1f:3a:48:5f:
82:79:b3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:21:19 2025 by rpki-client