Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
File: 1xHsDTeBWKRHb-bqfXClSpUZWhE.cer (raw, json)
Hash identifier: JHZlCbyukL6jilFdTHhZ5jGcXtDKwcSvmVrV4CFiQDA=
Subject key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6D0E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 30 Oct 2025 06:43:38 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 40.72.0.0/15
IP: 40.125.128.0/17
IP: 40.126.64.0/18
IP: 40.162.0.0/16
IP: 47.92.0.0 -- 47.127.255.255
IP: 52.80.0.0/14
IP: 52.130.0.0/15
IP: 54.222.0.0/15
IP: 68.79.0.0/18
IP: 69.230.192.0/18
IP: 69.231.128.0/18
IP: 69.234.192.0/18
IP: 69.235.128.0/18
IP: 71.131.192.0 -- 71.132.63.255
IP: 71.136.64.0/18
IP: 71.137.0.0/18
IP: 138.252.72.0/23
IP: 138.252.78.0/23
IP: 138.252.118.0/23
IP: 139.9.0.0/16
IP: 139.129.0.0/16
IP: 139.148.0.0/16
IP: 139.155.0.0/16
IP: 139.159.0.0/16
IP: 139.176.0.0/16
IP: 139.183.0.0/16
IP: 139.186.0.0/16
IP: 139.196.0.0/14
IP: 139.217.0.0/16
IP: 139.219.0.0 -- 139.221.255.255
IP: 139.224.0.0/16
IP: 140.143.0.0/16
IP: 140.179.0.0/16
IP: 140.205.0.0/16
IP: 140.210.0.0/16
IP: 143.64.0.0/16
IP: 152.104.128.0/17
IP: 157.10.34.0 -- 157.10.37.255
IP: 157.10.112.0/23
IP: 157.10.130.0/23
IP: 157.10.218.0 -- 157.10.221.255
IP: 157.10.246.0/23
IP: 157.15.74.0/23
IP: 157.15.94.0/23
IP: 157.15.100.0 -- 157.15.105.255
IP: 157.20.136.0/23
IP: 157.20.194.0/23
IP: 157.20.246.0/23
IP: 157.66.42.0/23
IP: 157.66.70.0/23
IP: 157.66.88.0/21
IP: 157.66.164.0/23
IP: 157.66.244.0/23
IP: 158.60.0.0/16
IP: 158.140.252.0/22
IP: 159.27.0.0/16
IP: 160.19.76.0/23
IP: 160.19.82.0/23
IP: 160.20.16.0/22
IP: 160.20.130.0/23
IP: 160.22.58.0/23
IP: 160.22.82.0/23
IP: 160.22.148.0/23
IP: 160.22.188.0/23
IP: 160.22.224.0/23
IP: 160.22.230.0/23
IP: 160.22.244.0/22
IP: 160.25.10.0 -- 160.25.13.255
IP: 160.25.194.0/23
IP: 160.30.40.0/23
IP: 160.30.150.0/23
IP: 160.30.194.0 -- 160.30.199.255
IP: 160.30.230.0/23
IP: 160.187.223.0/24
IP: 160.187.252.0/22
IP: 160.191.0.0/23
IP: 160.191.104.0/23
IP: 160.191.110.0/23
IP: 160.250.14.0 -- 160.250.19.255
IP: 160.250.84.0/23
IP: 160.250.90.0/23
IP: 160.250.102.0 -- 160.250.105.255
IP: 160.250.160.0/23
IP: 160.250.170.0/23
IP: 160.250.214.0/23
IP: 160.250.252.0/23
IP: 161.189.0.0/16
IP: 161.207.0.0/16
IP: 161.248.20.0/23
IP: 161.248.42.0/23
IP: 161.248.84.0/23
IP: 161.248.92.0/23
IP: 161.248.108.0 -- 161.248.113.255
IP: 165.101.4.0/23
IP: 165.101.66.0/23
IP: 165.101.70.0/23
IP: 165.101.144.0/23
IP: 165.101.170.0/23
IP: 165.101.208.0/23
IP: 165.101.244.0/23
IP: 167.189.0.0/16
IP: 167.220.244.0/22
IP: 168.160.0.0/16
IP: 170.179.0.0/16
IP: 192.51.172.0/23
IP: 192.55.46.0/23
IP: 192.55.68.0/22
IP: 192.102.204.0/22
IP: 198.175.100.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27918 (0x6d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 30 06:43:38 2025 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:1d:78:af:13:1a:bf:c7:cb:47:5f:8d:f7:
22:f6:3a:87:d5:56:55:30:cf:3d:cb:91:56:19:a3:
e6:19:32:c4:14:4b:76:9d:a3:5c:f5:f2:89:08:fb:
50:5c:8a:cb:2e:bb:f9:58:be:7b:05:a7:4f:d9:b3:
cb:39:e7:fa:ea:ee:d0:23:3d:02:b6:0c:24:fe:e6:
4d:53:6f:cb:bc:16:02:c2:ca:dd:37:f6:89:7c:9d:
99:33:cc:a9:30:4c:75:0a:12:6b:62:46:23:da:09:
1c:2f:6d:de:70:51:cb:41:46:4d:5f:d8:a6:aa:23:
6a:df:4f:00:92:3e:33:81:4f:1e:82:53:33:10:c8:
2f:6a:0e:98:07:05:85:7b:f6:12:35:db:75:a5:45:
43:25:c3:0d:39:42:93:21:4a:17:4e:f1:fb:80:16:
73:ec:f6:a1:c5:f6:4a:6b:73:b3:c3:5c:dc:01:b0:
68:12:45:65:7e:55:7e:fb:ba:7b:45:ae:9a:56:10:
2a:bd:1f:66:58:e1:da:22:53:78:ed:af:78:eb:92:
48:3e:82:9e:6f:a7:17:5e:96:f6:11:31:5e:06:d7:
60:54:15:4b:a8:ee:b9:e8:c8:39:65:54:62:7e:cd:
28:95:1d:3d:10:9b:7e:3a:b8:86:49:5f:e8:20:f8:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.0.0/15
40.125.128.0/17
40.126.64.0/18
40.162.0.0/16
47.92.0.0-47.127.255.255
52.80.0.0/14
52.130.0.0/15
54.222.0.0/15
68.79.0.0/18
69.230.192.0/18
69.231.128.0/18
69.234.192.0/18
69.235.128.0/18
71.131.192.0-71.132.63.255
71.136.64.0/18
71.137.0.0/18
138.252.72.0/23
138.252.78.0/23
138.252.118.0/23
139.9.0.0/16
139.129.0.0/16
139.148.0.0/16
139.155.0.0/16
139.159.0.0/16
139.176.0.0/16
139.183.0.0/16
139.186.0.0/16
139.196.0.0/14
139.217.0.0/16
139.219.0.0-139.221.255.255
139.224.0.0/16
140.143.0.0/16
140.179.0.0/16
140.205.0.0/16
140.210.0.0/16
143.64.0.0/16
152.104.128.0/17
157.10.34.0-157.10.37.255
157.10.112.0/23
157.10.130.0/23
157.10.218.0-157.10.221.255
157.10.246.0/23
157.15.74.0/23
157.15.94.0/23
157.15.100.0-157.15.105.255
157.20.136.0/23
157.20.194.0/23
157.20.246.0/23
157.66.42.0/23
157.66.70.0/23
157.66.88.0/21
157.66.164.0/23
157.66.244.0/23
158.60.0.0/16
158.140.252.0/22
159.27.0.0/16
160.19.76.0/23
160.19.82.0/23
160.20.16.0/22
160.20.130.0/23
160.22.58.0/23
160.22.82.0/23
160.22.148.0/23
160.22.188.0/23
160.22.224.0/23
160.22.230.0/23
160.22.244.0/22
160.25.10.0-160.25.13.255
160.25.194.0/23
160.30.40.0/23
160.30.150.0/23
160.30.194.0-160.30.199.255
160.30.230.0/23
160.187.223.0/24
160.187.252.0/22
160.191.0.0/23
160.191.104.0/23
160.191.110.0/23
160.250.14.0-160.250.19.255
160.250.84.0/23
160.250.90.0/23
160.250.102.0-160.250.105.255
160.250.160.0/23
160.250.170.0/23
160.250.214.0/23
160.250.252.0/23
161.189.0.0/16
161.207.0.0/16
161.248.20.0/23
161.248.42.0/23
161.248.84.0/23
161.248.92.0/23
161.248.108.0-161.248.113.255
165.101.4.0/23
165.101.66.0/23
165.101.70.0/23
165.101.144.0/23
165.101.170.0/23
165.101.208.0/23
165.101.244.0/23
167.189.0.0/16
167.220.244.0/22
168.160.0.0/16
170.179.0.0/16
192.51.172.0/23
192.55.46.0/23
192.55.68.0/22
192.102.204.0/22
198.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
24:6b:55:92:93:cf:a7:63:1d:c3:a5:c5:12:00:f9:c2:ee:2a:
df:b4:ca:e1:c5:38:2b:b0:45:ee:59:48:ef:eb:41:c8:8a:07:
9b:68:fd:02:00:ba:ff:d9:dd:91:37:48:2c:91:6c:0a:44:47:
aa:25:b5:0a:82:90:bf:1f:0a:6f:43:90:a1:10:a8:2a:13:98:
2e:b0:63:80:4c:2b:1e:13:d0:49:99:a0:0d:84:02:c4:f3:40:
18:d1:21:dc:e5:e5:62:f2:e6:28:1f:9e:ae:6b:9d:bb:fc:36:
d8:7f:e3:4a:44:7a:6e:5e:7b:6f:8b:57:33:ed:e6:7e:8b:37:
3b:60:9f:3b:1b:02:53:29:69:b7:81:37:0d:19:ec:4b:09:97:
3e:eb:89:66:43:3e:38:e2:0f:2c:6d:97:aa:90:87:b3:ad:e1:
39:da:b5:b6:9a:8e:a8:ba:7e:d0:4f:34:c6:6e:56:df:49:c6:
39:30:1c:59:05:6a:11:b4:2c:48:8d:9f:2d:e3:bc:f7:70:1c:
05:8e:2a:36:2d:7b:83:a0:d5:e7:58:16:44:f2:1a:d3:e5:43:
a5:4b:ab:23:f6:24:b8:ae:82:a8:47:ba:c9:31:5c:77:d9:ea:
d5:88:33:9b:a5:22:45:dc:b9:86:85:c8:df:b2:e9:28:de:51:
0e:81:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:23 2025 by rpki-client