Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
File: rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer (raw, json)
Hash identifier: /mRl288IRai8pxcOBIvjlU8BRlxaLnRWmBCd0IGyr7M=
Subject key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D2E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 16 May 2025 10:13:16 +0000
Certificate not after: Sat 16 May 2026 10:06:17 +0000
Subordinate resources: AS: 63658
IP: 43.242.196.0/22
IP: 43.254.192.0/22
IP: 45.113.200.0/22
IP: 45.117.8.0/22
IP: 45.120.100.0/22
IP: 45.248.8.0/22
IP: 103.8.220.0/22
IP: 103.19.232.0/22
IP: 103.53.124.0/22
IP: 103.60.164.0/22
IP: 103.216.152.0/22
IP: 2402:bf80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 May 2025 20:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53992 (0xd2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 16 10:13:16 2025 GMT
Not After : May 16 10:06:17 2026 GMT
Subject: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:31:aa:1e:f0:8a:da:7c:86:04:d2:cb:84:
9b:39:b2:25:58:fb:57:f2:45:f0:25:a4:2f:b4:72:
80:1c:86:9c:60:cc:7c:e1:ef:8b:5e:a8:af:27:07:
e2:51:46:b6:2b:1e:39:91:8e:46:7a:0e:23:70:56:
54:70:cb:bd:08:b1:57:57:57:36:cb:cc:90:a8:d1:
b9:b7:dd:8d:f8:fd:63:fa:a6:6f:b8:e1:48:d5:60:
e6:2d:d5:10:eb:fb:c1:a9:49:28:73:2a:ee:9d:b4:
96:89:ff:7c:3b:f4:87:2f:33:7f:71:17:ed:e3:ee:
47:cc:58:81:1a:05:f0:af:fd:ed:b3:4c:07:52:bf:
de:f1:a7:8c:51:54:0c:2a:cb:b9:8c:59:3b:9e:ab:
74:1a:4c:68:dd:bd:c1:38:17:18:13:18:3e:93:18:
be:4d:7f:ac:ff:ef:3d:dd:e6:68:73:61:b1:be:1e:
b6:ea:ae:37:88:ae:d7:84:e1:78:1a:a6:21:0b:ff:
7a:e1:0e:c6:0f:26:d2:e7:a9:f6:0d:c8:78:c8:84:
c2:dc:48:a6:fe:b3:4f:bd:61:d0:39:c2:8d:f4:70:
30:44:43:17:cf:e8:d7:0c:cc:58:34:55:1b:ef:03:
db:e9:68:8f:d0:f0:e1:67:49:40:45:1c:c4:e1:65:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63658
sbgp-ipAddrBlock: critical
IPv4:
43.242.196.0/22
43.254.192.0/22
45.113.200.0/22
45.117.8.0/22
45.120.100.0/22
45.248.8.0/22
103.8.220.0/22
103.19.232.0/22
103.53.124.0/22
103.60.164.0/22
103.216.152.0/22
IPv6:
2402:bf80::/32
Signature Algorithm: sha256WithRSAEncryption
11:3b:cb:5e:1c:fe:78:61:96:4e:08:d1:88:bf:15:e1:dc:18:
03:ef:61:eb:54:c3:d3:08:64:66:9a:5d:e4:42:69:ad:c3:00:
f9:a5:26:f5:e3:cd:1e:99:87:e7:49:f1:d2:5d:2a:12:0a:b9:
9e:c5:01:21:37:77:c9:3c:99:2e:f5:71:1d:fe:a2:33:fa:a7:
a7:07:4f:5c:db:aa:99:73:2b:9f:0f:c2:76:7e:4f:45:6d:b4:
73:3e:7b:fc:b3:d2:6f:26:e4:13:3a:7a:59:0a:7a:34:0e:60:
4e:9a:49:32:48:54:f2:60:d3:8b:ff:32:44:8a:e1:77:08:84:
9f:3a:a2:ac:b9:93:ab:f3:cb:fd:dd:97:7d:b1:c0:3c:df:c0:
3a:ed:ea:ec:69:cb:97:bf:a6:8f:22:5a:11:8c:04:2a:4f:f7:
3f:01:58:ab:b1:0c:58:21:d3:ae:b3:52:21:2f:d4:9e:34:8c:
a0:6b:6b:9a:1f:68:3d:50:3c:2c:b3:42:cf:46:e0:1b:59:08:
e3:98:e4:90:9a:ab:d8:68:be:9a:4c:d9:9d:97:9b:a3:7f:0b:
41:4d:95:66:82:26:e7:1e:36:a7:b9:13:80:61:13:15:45:04:
cf:34:23:71:dd:b1:bd:63:f7:a5:2d:6c:11:25:31:11:ac:6e:
56:9e:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:47:25 2025 by rpki-client