Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
File: dTJNO48dXrpXcOZh7havJKdQVU8.cer (raw, json)
Hash identifier: nt4libCXleGwtEFkjhq0AI6ukBDoRGmeUOA3Q5uI3ug=
Subject key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 02 Dec 2024 07:32:04 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 45.254.24.0/22
IP: 103.223.120.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49558 (0xc196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Dec 2 07:32:04 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:64:61:89:ca:41:cd:89:47:d9:ac:7f:ce:
12:5f:b2:83:49:ec:0d:46:f2:ce:26:a2:45:6e:cd:
d9:fa:e9:cf:fa:a4:3a:42:63:25:45:ef:26:92:37:
68:14:85:44:0c:e3:02:e7:fb:6b:a0:79:31:f2:17:
ac:b1:9f:03:69:30:db:a2:83:0e:25:c3:c4:34:da:
95:23:49:8f:55:10:5d:b2:8f:55:2a:78:cc:30:85:
b1:13:90:dc:e4:8c:8e:a2:19:7e:70:d8:aa:f5:84:
fa:23:c2:7f:72:f8:89:90:48:75:17:00:d4:59:5a:
ae:b7:11:87:a5:ca:03:d1:8b:d4:81:c3:23:ab:d4:
1a:4e:60:d0:75:76:3b:f5:a7:ff:1d:4f:61:cf:11:
e5:6f:47:ef:5d:66:db:3c:75:b7:f1:b3:09:2f:2e:
ac:ff:5c:a6:c0:f6:44:5b:85:85:6f:25:6a:41:e6:
66:85:a3:11:a4:ed:f7:51:88:02:c2:ed:a4:82:6f:
88:a6:46:30:55:75:cd:2c:73:ac:ea:7c:40:c5:bd:
e8:ff:e2:7f:a8:73:1e:9e:5f:f9:94:c1:57:1a:b5:
6c:e6:b9:23:24:12:93:e5:60:7f:82:45:15:f4:bd:
99:c7:d2:f2:ba:45:21:cc:a1:54:59:79:d9:81:88:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/22
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
00:18:63:6e:83:1e:4b:93:58:06:2b:e3:8b:12:86:f5:ff:18:
8f:89:2d:12:95:09:01:9a:9b:47:ed:a8:97:1d:58:41:00:ec:
b8:20:38:e8:ab:d5:e4:67:00:77:22:a0:22:79:3e:c9:c9:28:
2f:64:bf:f5:06:3c:27:0b:5b:2d:8b:9c:fc:53:8e:fd:fa:33:
e6:89:65:27:a4:29:43:5f:26:df:60:29:cb:6d:87:d5:e0:c7:
7b:27:a7:8b:9c:6f:83:53:c5:27:c0:d7:c1:1c:3c:51:f4:75:
54:bc:39:2f:56:b2:85:7e:7a:fd:2a:9a:e8:2e:3f:9a:b6:84:
ff:b9:1f:a4:ba:f4:97:5f:1a:e0:d7:5b:26:0f:ba:7c:6c:1c:
99:11:4b:fd:c1:fe:b0:5b:42:91:7f:a5:99:11:52:65:a5:ae:
0c:6a:ec:9a:8d:3d:cf:4a:83:89:a0:f9:33:b9:b6:30:b0:17:
62:98:8b:86:77:d9:ff:5a:6c:34:f6:47:3f:9d:82:dc:53:1e:
8a:18:cd:59:d4:5b:fa:17:80:12:aa:0d:ae:6e:2e:59:e0:5d:
65:8b:87:e4:4f:ad:a9:71:e9:15:6e:e8:a3:45:5e:e8:45:b7:
09:cc:85:f7:3a:bf:ba:51:fc:f0:4f:ab:0e:79:d6:8e:b0:ce:
13:9a:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:35:55 2025 by rpki-client