Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer
File: 2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer (raw, json)
Hash identifier: ORi9ai2enkNe/roOMnAv8qiROYaGIu1X2jca2wsoMFY=
Subject key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C333
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 25 Dec 2024 06:58:23 +0000
Certificate not after: Thu 25 Dec 2025 06:56:05 +0000
Subordinate resources: AS: 9812
AS: 23850
IP: 58.24.0.0/15
IP: 60.63.0.0/16
IP: 61.87.192.0/18
IP: 111.212.0.0/14
IP: 114.60.0.0/14
IP: 118.132.0.0/14
IP: 121.76.0.0/15
IP: 124.28.192.0/18
IP: 124.151.0.0/16
IP: 202.158.160.0/19
IP: 211.144.64.0/19
IP: 211.154.64.0/19
IP: 211.167.96.0/19
IP: 218.242.0.0/16
IP: 219.233.0.0/16
IP: 220.232.64.0/18
IP: 220.234.0.0/16
IP: 221.137.0.0/16
IP: 223.248.0.0/14
IP: 2400:6600::/32
IP: 2401:800::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49971 (0xc333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Dec 25 06:58:23 2024 GMT
Not After : Dec 25 06:56:05 2025 GMT
Subject: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:52:8f:5f:ff:34:8c:db:a9:1c:83:0f:8c:
93:e3:34:9d:17:3a:f1:6a:36:2c:42:e3:92:44:50:
ed:58:4c:22:7b:d7:2d:f9:e5:d6:f9:d2:69:4c:0a:
99:81:5b:5e:7c:b3:58:3c:6d:2d:e0:b8:1e:dd:1a:
93:04:b0:4b:78:74:1f:95:cf:86:d1:d1:3d:32:dc:
11:39:12:b9:6f:6e:70:18:fc:9e:a3:01:1f:44:a8:
ab:27:1a:18:bb:b1:41:d7:8f:06:71:37:7f:9f:7c:
80:78:1f:7b:ee:28:85:0e:a3:47:a1:3c:8c:00:43:
b6:e4:0b:58:2e:ce:22:33:6a:a9:f5:25:dc:14:d8:
04:7b:8a:e3:90:36:b1:e6:bc:c8:9f:90:b0:09:c9:
e0:a5:98:d1:d8:37:9e:4c:80:6f:b6:08:0c:04:fb:
e9:82:82:41:05:b6:bf:60:bb:26:b4:b0:41:d5:25:
2c:30:8b:e8:fd:db:71:69:e2:9e:e2:cc:38:07:83:
cc:ee:ce:bc:92:74:8a:9f:5d:b1:a5:f6:5b:fe:c9:
4a:ee:a5:8b:66:47:69:47:77:96:7a:61:88:59:a0:
e3:d2:7a:3f:7d:81:9f:6e:a2:00:36:2a:58:2c:ca:
79:1e:ae:b5:1e:60:f6:55:90:e9:f4:57:6a:b2:dd:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9812
23850
sbgp-ipAddrBlock: critical
IPv4:
58.24.0.0/15
60.63.0.0/16
61.87.192.0/18
111.212.0.0/14
114.60.0.0/14
118.132.0.0/14
121.76.0.0/15
124.28.192.0/18
124.151.0.0/16
202.158.160.0/19
211.144.64.0/19
211.154.64.0/19
211.167.96.0/19
218.242.0.0/16
219.233.0.0/16
220.232.64.0/18
220.234.0.0/16
221.137.0.0/16
223.248.0.0/14
IPv6:
2400:6600::/32
2401:800::/32
Signature Algorithm: sha256WithRSAEncryption
02:ef:18:9b:83:42:67:cb:d7:40:e0:47:6a:7d:0f:a8:90:48:
ea:01:b3:a1:57:0e:d8:88:93:4e:2a:d0:8e:0b:eb:6f:78:9b:
2c:5d:20:6f:a8:0f:a7:ed:ef:9e:de:16:e2:17:96:ae:00:da:
34:74:05:a8:ad:b7:bf:76:c9:82:c0:61:68:9d:7c:35:17:d0:
a2:3b:60:c9:10:f4:64:3c:fc:db:6d:7d:89:cc:20:52:36:60:
ad:6c:70:f1:a2:8e:d7:dd:a3:f6:bd:87:5e:5f:f3:a1:4e:20:
86:2e:15:29:34:64:01:0d:70:55:8a:03:69:f2:7c:9c:f5:a0:
fa:4f:2d:ea:c1:82:43:38:eb:fe:62:14:28:b1:6c:23:02:17:
66:72:52:1a:55:f4:03:9c:27:ba:43:47:ff:90:b8:4d:55:8a:
0a:0c:04:bd:f6:1c:f8:c6:b0:85:22:75:23:ed:59:41:45:ef:
31:75:35:35:0c:61:a9:2c:d3:8b:b0:4e:33:86:f4:63:d1:35:
90:df:cc:76:13:65:8e:af:7e:8e:a5:6d:83:0c:3c:b2:e7:94:
1d:3d:a2:2f:10:52:c3:6c:a5:b1:56:11:9b:c6:1d:e3:99:44:
8c:67:8a:61:c0:b9:dd:c0:6b:1a:3f:a3:55:18:f9:2e:d1:e1:
e0:25:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:09 2025 by rpki-client