Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
File: 3Vi43ud7iv5uKRpbggWxMTFpeE8.cer (raw, json)
Hash identifier: jm4CyllnsuK8OJEnCmc4ERzWk01gucM1Ae6XZPSfIgk=
Subject key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:56:31 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 45112
IP: 103.108.164.0/22
IP: 2402:6bc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48263 (0xbc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:56:31 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:af:0f:bd:e6:83:80:03:bf:0c:81:cc:d3:
84:07:6f:bd:f0:e3:ca:ae:61:ad:f0:ca:68:82:cb:
a0:5d:8f:6e:b3:2d:38:67:3e:62:d9:9c:23:b0:ac:
27:f5:72:89:a0:8a:d8:2a:6b:2e:a5:ae:a6:d1:04:
b4:d4:ca:ae:1d:59:15:f8:30:19:c2:46:cc:49:71:
44:34:a6:9d:97:42:44:e8:80:02:46:cf:5e:9b:ae:
bd:b0:97:10:d7:80:8c:29:b7:60:48:93:ab:71:ac:
3a:1e:b9:2d:e5:61:f7:fa:1c:c0:f6:d8:35:a7:41:
36:55:f6:c6:95:5b:c1:aa:83:c8:e6:ec:71:dc:0d:
ee:0d:ad:b1:99:6b:64:59:b4:6e:84:62:0f:0a:19:
02:f3:62:fb:3a:49:54:0a:7a:06:59:80:f1:a5:bb:
c1:ac:0f:4b:68:21:be:09:5d:39:8b:7a:e7:af:8c:
ba:7a:03:bb:db:8e:fd:1a:7d:61:23:9e:99:db:ba:
2e:48:b8:08:9d:d4:54:b6:97:ee:35:f7:63:db:ee:
67:7a:fe:94:29:67:ab:63:21:c9:b7:7a:de:a8:a8:
b3:69:c1:0f:02:0a:49:a3:67:64:97:59:52:b4:fa:
ad:87:7b:88:3c:fa:a2:6a:2b:52:70:ff:d8:07:dc:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45112
sbgp-ipAddrBlock: critical
IPv4:
103.108.164.0/22
IPv6:
2402:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ca:e8:35:b5:cd:89:19:2e:9c:7a:75:34:00:4b:d3:39:52:
59:af:eb:29:f1:9c:54:0a:67:c5:61:0e:51:6d:3c:8f:71:0e:
ec:19:c1:0b:c1:94:76:dc:ab:34:b0:14:68:05:f6:c6:a2:ec:
ef:a5:05:b5:26:e6:9b:dc:b5:88:69:54:a1:3f:48:39:72:f9:
6f:e5:1e:4d:89:c3:47:75:08:94:53:9b:ed:c7:ea:7f:21:70:
c8:06:0f:3d:5a:e0:09:e0:14:fc:b6:d0:f1:5f:ce:cd:b8:c0:
b5:43:fc:d0:58:e2:df:a2:32:a9:37:62:94:64:f9:c6:b9:5f:
79:3d:8e:41:90:aa:52:81:11:7e:ee:fa:18:2f:b4:8e:02:06:
4e:81:44:10:b3:8b:02:df:81:84:fa:49:04:98:15:aa:30:0f:
1b:2e:d7:13:f3:95:f5:bf:5a:48:37:71:dc:e6:9e:1c:90:76:
f1:1e:2c:d8:d8:9c:35:7b:30:50:a5:b2:d6:c8:87:a4:0a:c1:
f3:6e:24:d7:5c:83:49:3a:cb:37:fe:9e:ba:c5:bb:48:8b:07:
47:45:02:74:9f:4e:48:fb:19:cb:88:59:8b:aa:10:2c:90:36:
41:81:b7:56:de:46:a9:37:b1:30:a8:31:9b:6e:a0:46:43:55:
e5:46:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:37:17 2025 by rpki-client