Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
File: ahHuR0JdFOuvL80k0gYrClK6BCw.cer (raw, json)
Hash identifier: E66sH7Scb8gL1T0PLnmokMuxZSLF6KIbh6t2v8C6bc0=
Subject key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C2ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 23 Dec 2024 08:11:42 +0000
Certificate not after: Sat 25 Oct 2025 08:26:02 +0000
Subordinate resources: AS: 151270
IP: 45.249.188.0/22
IP: 103.217.180.0/22
IP: 144.48.180.0 -- 144.48.187.255
IP: 2401:d0e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49901 (0xc2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Dec 23 08:11:42 2024 GMT
Not After : Oct 25 08:26:02 2025 GMT
Subject: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:b1:01:4f:cd:d9:f4:f2:d4:2e:0a:fc:7c:
ed:b1:68:23:7b:70:d9:b5:71:80:62:25:6e:2f:22:
18:72:0e:85:3e:06:3e:cf:43:e4:9e:1e:ac:29:d4:
d7:a4:49:00:7d:50:d7:11:64:05:67:7a:0d:f1:c2:
bb:46:6e:5c:d6:83:1e:0f:8e:19:d5:aa:e4:2b:14:
96:5a:a4:1c:70:a5:b0:49:ba:44:62:9a:2b:5a:9a:
be:d9:56:c3:06:67:08:f3:4f:29:a3:95:dc:7b:12:
e5:3b:91:c5:d2:1b:5e:fe:06:f9:a8:41:e0:12:c5:
82:c2:c4:70:5b:e0:62:79:2d:4e:fc:42:6a:3e:99:
21:2f:22:43:14:5d:5b:54:16:c3:ce:8e:ed:91:bf:
32:69:03:1b:a6:70:e9:bf:a0:93:8c:1f:f6:a6:a4:
55:cc:a6:d0:1c:40:88:47:29:c3:db:ab:f5:f4:89:
a5:97:d3:66:4c:f6:8e:68:68:a4:84:fb:b5:7c:d2:
72:0b:b4:29:68:b7:6f:4a:04:6f:1c:b3:d8:65:dc:
eb:86:41:65:a1:f3:3d:37:8b:20:a5:24:a0:d9:cb:
58:f9:22:63:8f:9d:ef:07:7d:b0:dd:32:da:47:80:
28:d7:3a:98:6e:dd:65:49:f0:4f:36:7d:f7:1e:8f:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151270
sbgp-ipAddrBlock: critical
IPv4:
45.249.188.0/22
103.217.180.0/22
144.48.180.0-144.48.187.255
IPv6:
2401:d0e0::/32
Signature Algorithm: sha256WithRSAEncryption
66:84:f3:b9:16:02:11:97:3d:bf:2f:28:5c:ac:b1:22:1a:f1:
b5:29:41:9e:b4:72:8a:02:13:5d:c3:c9:56:87:20:8a:81:84:
31:be:b1:dd:11:a7:2b:5e:91:66:77:5d:27:15:da:c4:fa:c1:
71:86:a4:ac:03:2f:ae:dd:47:69:5a:1f:c5:fb:36:5c:96:b9:
c3:68:6f:55:2a:1e:53:7a:b2:ec:c7:43:8c:cc:0f:b6:6d:24:
37:82:69:fc:a8:83:c9:25:8c:08:0e:fc:53:ca:b4:d7:a0:3a:
4b:56:79:d4:18:ad:b3:89:51:d1:d5:75:32:74:20:05:61:b6:
f3:77:f8:b9:9c:1f:6a:57:a1:90:bf:ec:1d:5b:b6:b2:ac:9f:
d3:5a:6f:d4:1f:85:d3:1a:aa:ad:d0:eb:92:f6:d1:3f:46:8a:
89:1f:72:08:40:40:a8:59:bd:57:88:fd:9f:b9:50:65:5d:e5:
8c:c2:41:79:92:ed:1a:38:42:9f:3c:1e:05:94:8d:0b:ff:d0:
3e:36:8b:a4:aa:e4:31:51:91:8a:47:bb:46:b0:52:25:b4:86:
4f:e0:4e:4d:2a:56:82:4b:2a:17:f7:54:3a:36:ab:c8:36:57:
e8:40:f9:dc:31:5b:e4:99:ca:f3:c9:0b:93:69:bc:34:d1:66:
ce:d3:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:31:44 2025 by rpki-client