Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/rvnRXVUWBDHU9wnoqjo61bzM1uU.cer
File:                     rvnRXVUWBDHU9wnoqjo61bzM1uU.cer (raw, json)
Hash identifier:          PEoKkym+kIU12+zU6be1dprnG8YRcTA8SF84swbruho=
Subject key identifier:   AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       C0E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 26 Nov 2024 08:41:08 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    IP: 103.64.160.0 -- 103.64.207.255
                          IP: 103.64.224.0/20
                          IP: 103.213.144.0/20
                          IP: 103.223.144.0 -- 103.223.175.255
                          IP: 103.223.192.0/18
                          IP: 119.80.192.0 -- 119.80.203.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49378 (0xc0e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Nov 26 08:41:08 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=AEF9D15D55160431D4F709E8AA3A3AD5BCCCD6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:99:82:01:cb:36:e1:12:49:42:37:01:3e:
                    cb:06:40:84:1e:67:0f:08:5c:1a:72:e2:74:8d:85:
                    f3:52:27:06:26:75:76:f8:74:af:1a:1b:d1:cf:2b:
                    d0:6c:93:81:f3:a1:00:d9:05:ca:d2:bb:ff:40:5b:
                    03:53:5e:b0:7a:83:39:ef:7f:e3:57:d9:3b:7a:12:
                    9b:05:63:ec:cc:d4:c2:1f:13:fd:85:24:52:86:90:
                    a6:1e:b2:cb:09:b3:df:aa:0d:e7:50:7e:63:89:1b:
                    79:a3:26:ef:62:d6:26:90:0b:93:66:19:8a:bc:78:
                    34:63:9f:c4:da:26:5c:7d:33:59:1d:cc:c8:3f:e3:
                    4b:f6:99:c1:28:dc:cf:52:42:96:e2:b2:13:1e:19:
                    ce:26:61:f5:88:e9:95:c7:3f:81:2a:b6:8d:91:3e:
                    26:a5:d2:b6:94:a9:6b:22:95:a1:79:4f:4d:76:62:
                    d8:27:06:e9:6a:86:78:e6:e6:73:dd:7e:04:52:dd:
                    28:78:49:82:c1:ba:2f:9c:d7:25:73:02:e6:18:93:
                    db:5f:a7:df:8a:51:ff:5a:c9:64:c7:3a:ca:ba:9c:
                    c4:08:c8:e9:87:c5:8b:9e:4d:ad:16:61:e3:52:ef:
                    ca:ca:2f:89:d1:0e:49:32:87:03:98:a0:6f:54:1d:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:D1:5D:55:16:04:31:D4:F7:09:E8:AA:3A:3A:D5:BC:CC:D6:E5
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/rvnRXVUWBDHU9wnoqjo61bzM1uU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.160.0-103.64.207.255
                  103.64.224.0/20
                  103.213.144.0/20
                  103.223.144.0-103.223.175.255
                  103.223.192.0/18
                  119.80.192.0-119.80.203.255

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:c6:4a:b1:da:65:4d:b8:74:a5:38:5d:a2:d7:93:a0:48:
         92:0a:f7:d5:38:5d:79:c6:4f:9a:5c:f4:b7:7a:e8:5f:cd:24:
         c6:7f:34:9d:3a:01:86:1d:cc:b2:ab:61:65:fa:9b:37:04:76:
         20:c7:c0:5e:33:ac:1a:22:5a:d8:32:55:a6:ba:3e:9f:fe:8b:
         1a:ae:a9:e1:3d:40:68:d6:9d:a3:09:fb:cb:b3:cf:ec:f7:5c:
         dc:e3:68:3f:5b:8a:1f:e0:2a:70:d3:5c:c9:06:d5:3d:f7:dc:
         85:7b:3f:e7:74:15:7e:cb:11:6f:1f:13:64:a0:06:18:01:6c:
         54:a5:26:be:d2:3a:ad:ae:3f:3d:b2:d2:95:78:9c:27:0c:0d:
         50:55:ea:08:94:e3:c1:af:44:4d:c7:e0:5e:d4:da:2f:1a:7a:
         48:9f:cd:19:be:7e:59:26:2d:4c:4b:0e:ed:da:85:8e:a6:ad:
         ee:2b:8a:9a:e3:60:cf:42:da:68:13:be:19:9f:c7:a8:bc:fa:
         e6:02:87:07:7a:b6:2c:71:0c:32:e1:30:3c:05:f4:eb:a9:e9:
         e1:31:ef:cb:f6:ba:4f:55:ac:08:4e:07:15:79:96:b3:b8:55:
         73:d5:5b:5f:11:83:40:e2:94:33:88:ee:be:79:29:48:96:e2:
         7e:e6:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:17:00 2025 by rpki-client