Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
File: 5W2kwnXzzMktCGICoe2neD8MPQ0.cer (raw, json)
Hash identifier: Xu6apvkrydceC+ceIkIYwIl+yNwLfIgz+vj3ywCLS0Y=
Subject key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CE47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:13:45 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 58854
IP: 27.0.132.0/22
IP: 43.242.72.0/22
IP: 45.119.60.0/22
IP: 45.126.120.0/22
IP: 103.27.4.0/22
IP: 103.59.112.0/22
IP: 103.64.156.0/22
IP: 103.64.212.0/22
IP: 103.73.136.0/21
IP: 103.81.8.0/22
IP: 103.81.16.0/21
IP: 103.105.60.0/22
IP: 103.236.252.0/22
IP: 150.242.96.0/22
IP: 211.155.96.0/19
IP: 2400:60c0::/32
IP: 2400:73c0::/32
IP: 2400:74c0::/32
IP: 2402:2bc0::/32
IP: 2402:d980::/32
IP: 2407:7d00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Apr 2025 22:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52807 (0xce47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:13:45 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:7b:ed:1d:6d:aa:33:9a:67:6b:9c:da:3a:
bb:aa:e9:0e:c7:65:89:73:bb:fa:a9:19:f2:f2:ff:
37:40:7f:77:3e:c0:de:3b:ac:3b:aa:b6:49:ca:73:
93:7a:26:d1:21:75:6a:00:a8:b0:06:28:ff:f5:a4:
c7:a1:0d:65:cf:62:ed:06:0b:73:e0:9b:85:a1:1b:
e1:0d:c9:66:22:99:15:0a:cd:a0:5c:af:bb:79:ba:
18:1e:92:fa:45:d9:ca:93:4f:c5:e6:6e:4d:3c:12:
df:4f:a5:44:de:44:bd:da:16:06:60:8d:1f:4d:8c:
11:39:e6:4d:97:56:8d:75:70:b7:e8:d4:13:f7:0c:
f3:e0:83:fb:ab:e4:5a:55:0a:d8:e0:3c:4d:7a:5e:
d4:09:43:d1:af:64:7e:da:e5:d9:53:8d:f6:e9:59:
f8:17:d4:f6:61:6c:1b:5a:59:e5:c9:e1:dc:56:89:
71:9e:74:6c:7d:f7:85:9f:de:d5:de:c8:f3:41:8c:
dc:5b:1a:43:bc:00:ba:6d:1a:6c:2b:ee:7d:cb:9c:
c6:ca:84:df:18:47:30:87:07:45:ed:cd:57:06:60:
e2:27:6d:d5:ba:72:f7:59:90:cb:de:86:3f:ed:9a:
41:12:3a:4a:c7:1f:7e:dd:7b:d7:41:9a:23:1b:ff:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58854
sbgp-ipAddrBlock: critical
IPv4:
27.0.132.0/22
43.242.72.0/22
45.119.60.0/22
45.126.120.0/22
103.27.4.0/22
103.59.112.0/22
103.64.156.0/22
103.64.212.0/22
103.73.136.0/21
103.81.8.0/22
103.81.16.0/21
103.105.60.0/22
103.236.252.0/22
150.242.96.0/22
211.155.96.0/19
IPv6:
2400:60c0::/32
2400:73c0::/32
2400:74c0::/32
2402:2bc0::/32
2402:d980::/32
2407:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
6e:1c:15:2f:66:74:c0:c7:ec:b0:e5:d2:f7:c7:ae:2b:01:05:
31:b3:8f:02:d4:91:ab:5a:51:0d:9e:21:b3:69:21:4f:c2:61:
c8:e9:54:fc:f3:3b:01:dd:f3:27:ba:6c:e1:46:01:98:26:da:
35:bd:3a:dd:11:18:9d:21:d8:a6:ed:d6:4f:4d:94:9e:82:b2:
ce:6c:fe:ae:b3:13:19:53:51:f1:6e:b6:64:66:a0:18:69:d3:
b0:f2:fc:b4:cb:b5:a7:c3:80:a2:e7:73:52:6e:15:d6:91:00:
3c:35:05:3c:14:e6:7d:ec:50:23:d1:60:f6:ed:5f:96:bd:08:
c1:4f:db:b7:7d:a9:59:15:e2:92:5b:fb:59:fd:60:7e:fc:54:
03:34:b0:eb:90:e3:72:1e:e1:17:9e:71:ae:96:e9:3e:66:45:
55:bd:9d:eb:68:06:73:5d:61:68:67:a4:fa:19:42:ca:d2:aa:
10:15:eb:7b:b1:27:1f:fb:b7:0d:25:af:27:21:cc:1a:73:3c:
43:df:7f:7e:4e:9d:2e:12:57:ab:74:78:bd:0e:90:b8:2e:11:
d3:49:80:fa:a5:04:2f:a5:86:17:7a:4b:a3:86:39:cb:d7:39:
ff:69:1a:38:b0:0f:f1:a0:e9:95:53:f2:b0:71:23:26:29:05:
cc:cc:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:29 2025 by rpki-client on console.sobornost.net