Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/D0BCGu_TepwoYqhQBOR57yH1tgg.cer
File: D0BCGu_TepwoYqhQBOR57yH1tgg.cer (raw, json)
Hash identifier: WwB+UX0R7yAJFCh9otvYYOgH77BwfyiwmefZNjoRA/I=
Subject key identifier: 0F:40:42:1A:EF:D3:7A:9C:28:62:A8:50:04:E4:79:EF:21:F5:B6:08
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C1D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 04 Dec 2024 02:51:00 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 43.224.200.0/21
IP: 43.229.40.0/22
IP: 43.254.184.0/22
IP: 45.114.196.0/22
IP: 45.123.136.0/22
IP: 103.15.200.0/22
IP: 103.26.156.0/22
IP: 103.30.228.0/22
IP: 103.43.220.0 -- 103.43.227.255
IP: 103.54.160.0/22
IP: 103.199.164.0/22
IP: 103.200.64.0/21
IP: 103.228.176.0/22
IP: 137.59.88.0/22
IP: 150.242.116.0/22
IP: 210.7.56.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49617 (0xc1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Dec 4 02:51:00 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0F40421AEFD37A9C2862A85004E479EF21F5B608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:d4:59:16:78:16:25:ff:65:bf:5f:3a:fe:
de:11:72:69:c4:4d:a4:c7:17:02:a7:ab:0c:b0:7b:
57:75:48:17:14:e5:5d:75:3f:98:3b:8a:e1:0f:76:
8c:40:38:12:e1:fc:63:99:a2:58:4d:59:9d:c5:ce:
f8:f2:97:bc:83:08:d2:53:d8:d5:31:e5:77:e9:67:
e3:a1:40:00:89:9e:83:e5:b0:5f:ea:99:a3:17:46:
69:3a:55:2b:73:d7:ce:40:4c:c7:3f:e4:a6:be:21:
8a:fa:6d:55:85:ee:44:c9:a1:72:08:58:b3:7e:32:
2b:3c:4b:40:8f:42:08:f3:8c:13:3b:e6:c8:ca:bc:
a0:64:1f:a2:89:3b:6e:b3:e8:33:ab:1d:04:44:17:
53:12:d6:1c:5b:0d:6a:e6:21:70:74:02:96:51:0d:
6b:66:7b:09:cc:43:d6:6c:bf:df:73:f1:39:b8:8c:
61:ab:52:fc:85:38:09:6a:85:32:72:b7:09:e7:59:
14:34:f2:6e:ca:95:82:9d:b8:04:a6:01:4a:18:17:
c7:ad:30:44:ce:7d:3a:3f:99:2b:f2:18:ac:d2:c3:
5e:a7:95:f5:24:5d:17:42:b2:06:4c:05:4f:d5:1b:
f0:14:dd:91:95:81:af:c9:ca:9f:ba:25:15:ad:7a:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:42:1A:EF:D3:7A:9C:28:62:A8:50:04:E4:79:EF:21:F5:B6:08
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.200.0/21
43.229.40.0/22
43.254.184.0/22
45.114.196.0/22
45.123.136.0/22
103.15.200.0/22
103.26.156.0/22
103.30.228.0/22
103.43.220.0-103.43.227.255
103.54.160.0/22
103.199.164.0/22
103.200.64.0/21
103.228.176.0/22
137.59.88.0/22
150.242.116.0/22
210.7.56.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:d6:a2:5c:05:ba:d0:90:2d:3d:bb:be:09:a5:ba:72:f8:1a:
f2:e9:3d:66:b1:27:06:58:bb:c6:ac:25:6d:08:ef:4a:e5:58:
81:41:8a:ba:ff:2c:ef:69:8b:5d:7f:be:f5:c6:5a:8f:7b:b0:
99:08:4b:50:b0:df:9f:a9:62:b1:35:cc:c0:ea:8f:2f:80:06:
55:d6:5c:15:76:5e:d6:36:95:5e:5b:6d:69:1c:de:4c:14:13:
5e:6e:c6:3b:95:94:8e:f4:6b:4c:2f:80:8b:8f:8e:35:0d:16:
94:49:97:f2:24:ab:07:a6:10:de:05:9c:7f:8a:b7:e3:86:d0:
c2:15:31:f8:2a:82:60:cc:25:77:bf:14:c1:b7:db:bf:39:5c:
0a:32:76:a5:01:ae:d5:ad:51:ab:85:4c:c4:de:a3:52:12:28:
57:94:92:6b:00:07:b5:2f:7f:17:7f:5d:2d:5e:12:70:3d:80:
8f:78:4d:d7:ad:f3:18:c2:5a:cc:0a:f3:28:18:42:01:16:1e:
d5:eb:1b:25:bb:17:81:99:2b:4d:0d:e7:81:3b:e5:ad:ea:1f:
ea:93:c8:a5:57:aa:1a:7a:d6:2e:4b:7e:5f:ed:56:03:e8:41:
d7:14:e5:70:02:21:af:de:17:4e:b5:38:a2:e1:49:1f:fa:d1:
d8:29:c3:2f
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAMHRMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDEyMDQwMjUxMDBaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDBGNDA0MjFBRUZEMzdBOUMyODYyQTg1MDA0RTQ3OUVGMjFGNUI2
MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWtRZFngWJf9lv186
/t4RcmnETaTHFwKnqwywe1d1SBcU5V11P5g7iuEPdoxAOBLh/GOZolhNWZ3Fzvjy
l7yDCNJT2NUx5XfpZ+OhQACJnoPlsF/qmaMXRmk6VStz185ATMc/5Ka+IYr6bVWF
7kTJoXIIWLN+Mis8S0CPQgjzjBM75sjKvKBkH6KJO26z6DOrHQREF1MS1hxbDWrm
IXB0ApZRDWtmewnMQ9Zsv99z8Tm4jGGrUvyFOAlqhTJytwnnWRQ08m7KlYKduASm
AUoYF8etMETOfTo/mSvyGKzSw16nlfUkXRdCsgZMBU/VG/AU3ZGVga/Jyp+6JRWt
erB/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUD0BCGu/TepwoYqhQBOR57yH1tggw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEw
ODkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMTA4OS9EMEJDR3VfVGVwd29ZcWhRQk9SNTd5SDF0Z2cubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAyvgyAMEAivlKAMEAiv+uAME
Ai1yxAMEAi17iAMEAmcPyAMEAmcanAMEAmce5DAMAwQCZyvcAwQCZyvgAwQCZzag
AwQCZ8ekAwQDZ8hAAwQCZ+SwAwQCiTtYAwQClvJ0AwQD0gc4MA0GCSqGSIb3DQEB
CwUAA4IBAQCh1qJcBbrQkC09u74Jpbpy+Bry6T1msScGWLvGrCVtCO9K5ViBQYq6
/yzvaYtdf771xlqPe7CZCEtQsN+fqWKxNczA6o8vgAZV1lwVdl7WNpVeW21pHN5M
FBNebsY7lZSO9GtML4CLj441DRaUSZfyJKsHphDeBZx/irfjhtDCFTH4KoJgzCV3
vxTBt9u/OVwKMnalAa7VrVGrhUzE3qNSEihXlJJrAAe1L38Xf10tXhJwPYCPeE3X
rfMYwlrMCvMoGEIBFh7V6xsluxeBmStNDeeBO+Wt6h/qk8ilV6oaetYuS35f7VYD
6EHXFOVwAiGv3hdOtTii4Ukf+tHYKcMv
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:37:07 2025 by rpki-client