Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer
File: T04zJwO54ZxdoBGkjEsnbpsp11w.cer (raw, json)
Hash identifier: 3CirQ6oFJABPBuRBtIR6gAZNUIH0rgk58aXQ7qzZ26M=
Subject key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D1C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 05 May 2025 19:40:04 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 45093
IP: 45.124.44.0/22
IP: 101.251.128.0/20
IP: 103.192.164.0/22
IP: 111.67.192.0/20
IP: 182.18.0.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 May 2025 20:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53702 (0xd1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 5 19:40:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:1c:7f:53:41:d3:5d:fb:89:ea:3a:8d:70:
e7:8c:32:46:b5:83:37:1f:ce:1e:b7:af:d2:63:96:
83:3b:1d:dc:cd:5d:98:bd:19:40:40:34:02:dd:a0:
5e:bc:04:9e:b0:8b:4e:1a:6e:1d:5f:e8:c8:99:6b:
d8:de:2a:51:f6:38:62:06:fa:2e:54:f2:92:5d:ad:
8d:6e:61:a3:05:e6:a4:56:33:f4:57:e6:90:c3:b0:
4a:5a:0c:29:8b:30:a9:4e:a8:ab:3b:c5:08:46:3c:
28:01:61:a6:76:56:63:fa:23:68:c3:a9:74:19:fc:
4f:f2:fb:2d:2b:35:54:0f:a2:52:b6:6b:fb:6b:c7:
aa:48:5a:5b:f8:de:0a:e1:3c:0b:b1:66:ed:19:e5:
84:53:d5:cd:96:a3:4a:e5:54:97:70:87:bf:9a:b2:
b7:ac:bc:59:28:1d:37:04:e4:fd:19:f1:ab:2e:3b:
ca:33:c6:94:ac:28:24:f9:3a:ce:1a:b5:b3:a0:c9:
b8:ab:bb:8b:8c:9c:d3:75:d2:6b:b1:e1:19:4a:18:
09:93:53:8a:d0:0b:88:4a:5e:81:49:31:ec:f4:20:
3e:d9:8d:e6:ae:c0:53:db:e9:d7:5c:a9:4b:c7:37:
39:de:2d:d2:31:a0:df:2e:87:51:e2:28:fe:e5:4c:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45093
sbgp-ipAddrBlock: critical
IPv4:
45.124.44.0/22
101.251.128.0/20
103.192.164.0/22
111.67.192.0/20
182.18.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0c:35:cc:90:ef:56:d1:81:a9:cb:0f:40:fb:e2:0b:6c:63:eb:
bb:86:31:9a:9c:72:a8:62:55:4f:e7:f2:67:90:58:17:d4:fb:
86:6b:e4:87:7c:3c:a6:51:c0:49:ae:58:f1:7a:4b:c8:8c:26:
c2:fe:97:8c:7e:a4:9f:fe:31:97:97:36:2a:86:1c:18:88:f4:
80:df:6e:01:15:66:d8:0b:00:a9:73:e9:c0:3f:95:68:9e:1d:
11:cc:89:3c:e5:80:5d:83:62:5e:ce:e3:f8:80:5f:63:97:70:
1f:ca:82:64:3c:29:61:22:ea:e6:4e:ba:65:cb:ab:14:7f:2d:
f7:8e:07:14:2d:e8:2e:83:6e:2d:54:4b:43:be:ad:7a:be:a4:
0e:0c:2e:e3:fe:ca:9b:0e:38:fc:0f:a2:ab:17:41:00:6c:df:
56:60:ea:2a:db:ca:fe:c5:50:9a:da:3e:c8:98:25:95:28:fc:
6b:87:d9:fc:6d:ed:d7:64:8d:41:d0:47:14:19:b9:46:16:f2:
64:d0:04:d1:41:a3:0d:f6:53:37:bf:d1:42:6a:d9:e7:38:5f:
d8:e1:83:d0:ea:ff:2a:dc:2a:09:b5:3d:d9:8d:e0:82:75:af:
c3:49:06:d2:c1:bb:4a:44:b5:77:f5:db:a9:95:10:08:df:93:
aa:cc:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 18:26:50 2025 by rpki-client