Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer (raw, json)
Hash identifier: DQkgtGub9uYSFlgcATRDi5kErM+ZNrIK8/Qd/CaYXyM=
Subject key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CDBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:10:36 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 103.50.44.0 -- 103.50.75.255
IP: 103.50.108.0 -- 103.50.127.255
IP: 103.50.132.0 -- 103.50.143.255
IP: 103.50.172.0 -- 103.50.203.255
IP: 103.50.220.0 -- 103.50.251.255
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52669 (0xcdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:10:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:c9:5c:5c:b8:1f:1e:fd:08:25:00:8f:4a:
1a:bc:21:ab:4d:a8:11:f7:6f:e8:fc:21:b0:6f:8b:
70:08:2b:7a:07:45:69:1b:9e:78:bf:9c:8d:e1:3a:
d7:42:a6:02:45:34:bd:c6:2c:68:ee:b9:f5:65:a6:
37:22:e6:c6:49:78:0f:2f:10:7b:6f:9d:68:ea:17:
77:31:1a:be:1b:a6:d3:32:6f:4d:b4:91:de:02:8a:
9e:d5:48:a9:03:07:05:a4:9f:96:4f:1c:74:a4:f0:
74:85:cc:3b:77:6b:59:70:38:54:8f:6f:f7:1d:98:
d4:f7:c1:c8:f0:aa:a0:19:5b:67:82:8b:01:f8:5e:
98:93:8a:7d:f1:e2:6e:7b:f2:27:bf:77:45:bd:a6:
6d:11:f5:a0:ec:dd:70:b9:b8:0c:43:5b:87:b1:36:
52:00:52:6a:81:67:e0:57:37:bf:b8:77:24:3f:bd:
84:f1:03:55:7c:d9:1d:45:c6:d0:30:34:d5:13:4c:
f6:eb:0b:17:ac:b1:b6:63:84:53:c0:d0:4e:85:cc:
f2:2e:8d:ce:93:e8:31:49:19:b9:aa:da:66:a6:c8:
bc:c2:df:56:c7:e6:b0:79:b0:fc:60:ad:51:be:0b:
a8:01:d6:cc:f7:97:00:ef:c9:50:5f:b7:65:01:1a:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.44.0-103.50.75.255
103.50.108.0-103.50.127.255
103.50.132.0-103.50.143.255
103.50.172.0-103.50.203.255
103.50.220.0-103.50.251.255
Signature Algorithm: sha256WithRSAEncryption
42:ba:e4:73:e0:89:f7:4a:af:63:6f:41:70:1c:d5:fc:58:18:
e8:c5:ba:dd:d9:3b:a9:3c:36:75:94:10:65:10:57:87:79:ef:
1b:e2:2e:25:83:10:ec:f0:1e:09:4b:04:7c:66:c3:9e:da:e6:
c3:e2:12:c9:c3:81:04:3a:3d:6e:76:8e:6c:a5:70:c8:fb:81:
3a:f1:52:ec:0d:a9:32:06:fb:08:b3:96:1b:d4:a1:c9:db:55:
f7:f2:ec:40:ba:62:bb:00:b2:1a:c3:84:13:7e:69:de:01:43:
9c:4c:c2:e6:55:f5:fd:07:1e:e9:16:11:bb:d8:35:fd:34:64:
46:55:f5:20:ff:9a:87:67:25:f3:bf:12:a5:fd:21:9c:e8:a8:
cc:3c:f7:53:9d:b6:99:2d:b2:1d:5e:de:64:ee:c4:7a:27:f9:
95:a5:e0:e4:19:4a:96:d3:b9:0e:3d:d3:c0:af:ca:72:26:c9:
05:07:4b:33:74:9b:de:c4:cc:b1:fc:90:da:1d:e9:09:74:eb:
41:fe:e9:9f:cd:32:90:f1:61:32:02:cd:1c:0d:df:68:83:99:
c3:16:f0:f3:88:7a:3a:1e:ed:da:10:bd:37:0b:cd:e0:34:ac:
2e:b2:26:ff:4b:bf:7f:24:95:25:eb:84:cd:00:da:d9:d2:14:
cc:ad:b0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:11 2025 by rpki-client