Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer
File: LKOQ4ngFUOROwDWYCC4ZlUdN8vs.cer (raw, json)
Hash identifier: jZZDGZfsTnM1WyVBX/wcCF+UjUE4xmAAI7ojxHNFOmU=
Subject key identifier: 2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 37EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:56:59 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 167.220.244.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14319 (0x37ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Sep 27 02:56:59 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2CA390E2780550E44EC03598082E1995474DF2FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:31:44:d7:fc:75:24:00:43:d0:24:b7:07:
58:20:8b:df:99:e0:ed:01:2b:b1:59:48:27:7a:01:
14:22:dd:0a:76:f5:1a:b5:be:d6:a7:9c:7b:fb:53:
35:09:74:2e:39:5e:2c:66:0b:d5:d5:9d:3b:f9:c8:
f0:55:93:15:b3:f2:cf:ed:2d:f3:d6:66:56:ee:0b:
82:29:76:a1:45:2a:b2:d3:d6:27:3c:c2:18:ac:f4:
0c:1c:0f:07:f2:1c:15:01:0b:42:fd:46:01:bc:18:
0f:b5:76:f4:8c:1d:fd:d4:72:1a:d2:8d:f5:f5:62:
7f:a1:d1:c4:25:69:dd:7f:e1:5e:28:67:bc:9f:2d:
5e:35:72:d3:12:8b:af:f8:38:2c:5c:e9:42:f2:08:
a4:d7:18:85:41:48:6f:f9:f4:c3:dd:b2:8b:71:e8:
73:c1:df:76:80:86:28:de:2e:fd:e6:9f:4a:30:9f:
a9:fb:57:48:9d:3c:31:fd:af:e4:da:74:db:6f:9f:
d0:71:76:4d:55:c5:e9:21:26:83:40:43:62:d2:55:
83:d6:62:53:f9:a8:50:54:a1:5b:6a:e4:56:78:b1:
de:43:47:6f:90:cd:3c:48:45:b1:81:32:10:78:ba:
14:f1:53:2e:58:06:bb:bc:9c:17:a6:1e:07:6a:eb:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A3:90:E2:78:05:50:E4:4E:C0:35:98:08:2E:19:95:47:4D:F2:FB
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/595/LKOQ4ngFUOROwDWYCC4ZlUdN8vs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
167.220.244.0/22
Signature Algorithm: sha256WithRSAEncryption
56:02:28:25:76:ee:24:d9:7d:9a:80:72:ff:3f:a1:1c:4a:c3:
ef:09:e2:09:d7:f2:a7:de:68:f9:8d:40:48:26:c0:8c:37:38:
88:f8:9d:6c:9f:6d:3c:38:35:36:c9:f5:18:e7:5a:31:f9:ef:
fd:ff:5b:28:2c:c5:b2:6b:5a:70:ba:77:dc:2c:18:ca:95:17:
06:ee:5d:50:48:1d:08:5a:19:08:a4:62:2e:8e:12:62:bf:3c:
21:c8:2d:3f:50:49:f8:09:29:32:43:7d:92:ce:be:3f:25:7d:
26:1d:b6:c0:a6:3f:2f:ef:97:55:4e:65:9f:48:ee:96:4b:e0:
0b:0b:96:a9:62:31:96:7b:e9:d6:f5:e3:c7:34:1e:b5:3a:33:
fb:b0:2b:de:f5:8c:b4:d5:4b:42:f2:98:74:9e:b8:2e:92:8e:
d8:07:37:b8:3d:a3:7d:48:f3:65:46:6c:c1:c0:d0:6a:a2:07:
69:1a:53:05:81:cb:85:ea:b4:2a:2c:ad:7f:5b:45:8c:fa:51:
c8:b2:bf:22:ec:8b:e9:56:75:8b:b9:8d:ce:20:67:31:82:30:
c4:96:08:de:1e:79:f7:80:ef:0b:37:9a:f8:46:67:83:bd:e2:
02:6e:3e:28:be:1c:9c:4e:9f:ab:9f:f1:9d:68:9a:ca:8f:df:
93:c9:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:44:35 2025 by rpki-client