Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
File: 1xHsDTeBWKRHb-bqfXClSpUZWhE.cer (raw, json)
Hash identifier: 8UP9QlnH4ggoTyDnr2v11EoQm83WtHX7yR7Wb8S70sg=
Subject key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 68C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 24 Jul 2025 08:26:40 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 40.72.0.0/15
IP: 40.125.128.0/17
IP: 40.126.64.0/18
IP: 40.162.0.0/16
IP: 47.92.0.0 -- 47.127.255.255
IP: 52.80.0.0/14
IP: 52.130.0.0/15
IP: 54.222.0.0/15
IP: 68.79.0.0/18
IP: 69.230.192.0/18
IP: 69.231.128.0/18
IP: 69.234.192.0/18
IP: 69.235.128.0/18
IP: 71.131.192.0 -- 71.132.63.255
IP: 71.136.64.0/18
IP: 71.137.0.0/18
IP: 139.9.0.0/16
IP: 139.129.0.0/16
IP: 139.148.0.0/16
IP: 139.155.0.0/16
IP: 139.159.0.0/16
IP: 139.176.0.0/16
IP: 139.183.0.0/16
IP: 139.186.0.0/16
IP: 139.196.0.0/14
IP: 139.217.0.0/16
IP: 139.219.0.0 -- 139.221.255.255
IP: 139.224.0.0/16
IP: 140.143.0.0/16
IP: 140.179.0.0/16
IP: 140.205.0.0/16
IP: 140.210.0.0/16
IP: 143.64.0.0/16
IP: 152.104.128.0/17
IP: 157.10.34.0 -- 157.10.37.255
IP: 157.10.112.0/23
IP: 157.10.130.0/23
IP: 157.10.218.0 -- 157.10.221.255
IP: 157.10.246.0/23
IP: 157.15.74.0/23
IP: 157.15.94.0/23
IP: 157.15.100.0 -- 157.15.105.255
IP: 157.20.136.0/23
IP: 157.20.194.0/23
IP: 157.20.246.0/23
IP: 157.66.42.0/23
IP: 157.66.70.0/23
IP: 157.66.88.0/21
IP: 157.66.164.0/23
IP: 157.66.244.0/23
IP: 158.60.0.0/16
IP: 158.140.252.0/22
IP: 159.27.0.0/16
IP: 160.19.76.0/23
IP: 160.19.82.0/23
IP: 160.20.16.0/22
IP: 160.20.130.0/23
IP: 160.22.58.0/23
IP: 160.22.82.0/23
IP: 160.22.148.0/23
IP: 160.22.188.0/23
IP: 160.22.224.0/23
IP: 160.22.230.0/23
IP: 160.22.244.0/22
IP: 160.25.10.0 -- 160.25.13.255
IP: 160.25.194.0/23
IP: 160.30.40.0/23
IP: 160.30.150.0/23
IP: 160.30.194.0 -- 160.30.199.255
IP: 160.30.230.0/23
IP: 160.187.223.0/24
IP: 160.187.252.0/22
IP: 160.191.0.0/23
IP: 160.191.104.0/23
IP: 160.191.110.0/23
IP: 160.250.14.0 -- 160.250.19.255
IP: 160.250.84.0/23
IP: 160.250.90.0/23
IP: 160.250.102.0 -- 160.250.105.255
IP: 160.250.160.0/23
IP: 160.250.170.0/23
IP: 160.250.214.0/23
IP: 160.250.252.0/23
IP: 161.189.0.0/16
IP: 161.207.0.0/16
IP: 161.248.20.0/23
IP: 161.248.42.0/23
IP: 161.248.84.0/23
IP: 161.248.92.0/23
IP: 161.248.108.0 -- 161.248.113.255
IP: 165.101.4.0/23
IP: 165.101.66.0/23
IP: 165.101.70.0/23
IP: 165.101.144.0/23
IP: 165.101.170.0/23
IP: 165.101.208.0/23
IP: 165.101.244.0/23
IP: 167.189.0.0/16
IP: 167.220.244.0/22
IP: 168.160.0.0/16
IP: 170.179.0.0/16
IP: 192.51.172.0/23
IP: 192.55.46.0/23
IP: 192.55.68.0/22
IP: 192.102.204.0/22
IP: 198.175.100.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26817 (0x68c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 24 08:26:40 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:1d:78:af:13:1a:bf:c7:cb:47:5f:8d:f7:
22:f6:3a:87:d5:56:55:30:cf:3d:cb:91:56:19:a3:
e6:19:32:c4:14:4b:76:9d:a3:5c:f5:f2:89:08:fb:
50:5c:8a:cb:2e:bb:f9:58:be:7b:05:a7:4f:d9:b3:
cb:39:e7:fa:ea:ee:d0:23:3d:02:b6:0c:24:fe:e6:
4d:53:6f:cb:bc:16:02:c2:ca:dd:37:f6:89:7c:9d:
99:33:cc:a9:30:4c:75:0a:12:6b:62:46:23:da:09:
1c:2f:6d:de:70:51:cb:41:46:4d:5f:d8:a6:aa:23:
6a:df:4f:00:92:3e:33:81:4f:1e:82:53:33:10:c8:
2f:6a:0e:98:07:05:85:7b:f6:12:35:db:75:a5:45:
43:25:c3:0d:39:42:93:21:4a:17:4e:f1:fb:80:16:
73:ec:f6:a1:c5:f6:4a:6b:73:b3:c3:5c:dc:01:b0:
68:12:45:65:7e:55:7e:fb:ba:7b:45:ae:9a:56:10:
2a:bd:1f:66:58:e1:da:22:53:78:ed:af:78:eb:92:
48:3e:82:9e:6f:a7:17:5e:96:f6:11:31:5e:06:d7:
60:54:15:4b:a8:ee:b9:e8:c8:39:65:54:62:7e:cd:
28:95:1d:3d:10:9b:7e:3a:b8:86:49:5f:e8:20:f8:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.0.0/15
40.125.128.0/17
40.126.64.0/18
40.162.0.0/16
47.92.0.0-47.127.255.255
52.80.0.0/14
52.130.0.0/15
54.222.0.0/15
68.79.0.0/18
69.230.192.0/18
69.231.128.0/18
69.234.192.0/18
69.235.128.0/18
71.131.192.0-71.132.63.255
71.136.64.0/18
71.137.0.0/18
139.9.0.0/16
139.129.0.0/16
139.148.0.0/16
139.155.0.0/16
139.159.0.0/16
139.176.0.0/16
139.183.0.0/16
139.186.0.0/16
139.196.0.0/14
139.217.0.0/16
139.219.0.0-139.221.255.255
139.224.0.0/16
140.143.0.0/16
140.179.0.0/16
140.205.0.0/16
140.210.0.0/16
143.64.0.0/16
152.104.128.0/17
157.10.34.0-157.10.37.255
157.10.112.0/23
157.10.130.0/23
157.10.218.0-157.10.221.255
157.10.246.0/23
157.15.74.0/23
157.15.94.0/23
157.15.100.0-157.15.105.255
157.20.136.0/23
157.20.194.0/23
157.20.246.0/23
157.66.42.0/23
157.66.70.0/23
157.66.88.0/21
157.66.164.0/23
157.66.244.0/23
158.60.0.0/16
158.140.252.0/22
159.27.0.0/16
160.19.76.0/23
160.19.82.0/23
160.20.16.0/22
160.20.130.0/23
160.22.58.0/23
160.22.82.0/23
160.22.148.0/23
160.22.188.0/23
160.22.224.0/23
160.22.230.0/23
160.22.244.0/22
160.25.10.0-160.25.13.255
160.25.194.0/23
160.30.40.0/23
160.30.150.0/23
160.30.194.0-160.30.199.255
160.30.230.0/23
160.187.223.0/24
160.187.252.0/22
160.191.0.0/23
160.191.104.0/23
160.191.110.0/23
160.250.14.0-160.250.19.255
160.250.84.0/23
160.250.90.0/23
160.250.102.0-160.250.105.255
160.250.160.0/23
160.250.170.0/23
160.250.214.0/23
160.250.252.0/23
161.189.0.0/16
161.207.0.0/16
161.248.20.0/23
161.248.42.0/23
161.248.84.0/23
161.248.92.0/23
161.248.108.0-161.248.113.255
165.101.4.0/23
165.101.66.0/23
165.101.70.0/23
165.101.144.0/23
165.101.170.0/23
165.101.208.0/23
165.101.244.0/23
167.189.0.0/16
167.220.244.0/22
168.160.0.0/16
170.179.0.0/16
192.51.172.0/23
192.55.46.0/23
192.55.68.0/22
192.102.204.0/22
198.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
80:e3:27:d4:74:45:1c:ba:2a:10:95:65:51:06:9a:ad:fe:c4:
1a:85:c2:dc:26:8f:36:f6:20:1a:da:71:9f:95:fa:d2:2b:38:
de:00:9e:59:70:6f:49:df:bb:98:4f:1e:20:18:4e:94:16:22:
9b:9d:e1:a8:74:4b:f5:a0:93:84:a9:dc:9d:83:de:ef:25:84:
14:f9:d4:be:65:2f:8e:2f:74:a6:8b:93:14:e1:1f:e6:90:cf:
78:57:ca:0d:22:93:8b:77:af:72:76:bf:d2:8b:01:71:c5:e6:
1d:96:83:be:a9:b1:0d:08:ea:63:40:4e:1c:12:1d:e4:53:f6:
15:18:df:9c:37:5b:2e:5d:b4:08:dd:0d:b1:85:fd:0d:c4:b7:
76:83:49:3c:a3:e9:40:eb:c2:f1:1f:db:fc:66:76:39:f3:0f:
24:09:dd:71:c0:ff:36:92:89:1f:74:6a:3e:6e:65:bc:14:0d:
fe:c3:6e:7b:51:20:16:b8:31:88:c6:57:6a:30:1f:a0:44:bd:
65:45:d0:59:04:b4:56:63:2d:f7:08:c9:14:38:7f:b3:02:9d:
a1:9e:40:24:51:51:51:5b:ee:69:1f:37:b9:11:4a:bd:c2:f5:
0a:50:5d:a1:77:a1:7c:c2:6d:69:04:19:5b:d2:30:99:56:0c:
bd:55:eb:5d
-----BEGIN CERTIFICATE-----
MIIIXjCCB0agAwIBAgICaMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNzI0MDgyNjQwWhcNMjUwOTMwMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTE2MkUzRDAwMDAxMTAvBgNVBAUTKEQ3MTFFQzBEMzc4MTU4QTQ0NzZG
RTZFQTdENzBBNTRBOTUxOTVBMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwch14rxMav8fLR1+N9yL2OofVVlUwzz3LkVYZo+YZMsQUS3ado1z18okI
+1Bcissuu/lYvnsFp0/Zs8s55/rq7tAjPQK2DCT+5k1Tb8u8FgLCyt039ol8nZkz
zKkwTHUKEmtiRiPaCRwvbd5wUctBRk1f2KaqI2rfTwCSPjOBTx6CUzMQyC9qDpgH
BYV79hI123WlRUMlww05QpMhShdO8fuAFnPs9qHF9kprc7PDXNwBsGgSRWV+VX77
untFrppWECq9H2ZY4doiU3jtr3jrkkg+gp5vpxdelvYRMV4G12BUFUuo7rnoyDll
VGJ+zSiVHT0Qm346uIZJX+gg+G3hAgMBAAGjggVQMIIFTDAdBgNVHQ4EFgQU1xHs
DTeBWKRHb+bqfXClSpUZWhEwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwd
bg4wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIw
MUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3
ZGJnNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwgc4GCCsGAQUFBwELBIHBMIG+MDQGCCsGAQUF
BzAFhihyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMFMG
CCsGAQUFBzAKhkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAw
MDAvMXhIc0RUZUJXS1JIYi1icWZYQ2xTcFVaV2hFLm1mdDAxBggrBgEFBQcwDYYl
aHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDCCAtUGCCsGAQUF
BwEHAQH/BIICxDCCAsAwggK8BAIAATCCArQDAwEoSAMEByh9gAMEBih+QAMDACii
MAoDAwIvXAMDBy8AAwMCNFADAwE0ggMDATbeAwQGRE8AAwQGRebAAwQGReeAAwQG
RerAAwQGReuAMAwDBAZHg8ADBAZHhAADBAZHiEADBAZHiQADAwCLCQMDAIuBAwMA
i5QDAwCLmwMDAIufAwMAi7ADAwCLtwMDAIu6AwMCi8QDAwCL2TAKAwMAi9sDAwGL
3AMDAIvgAwMAjI8DAwCMswMDAIzNAwMAjNIDAwCPQAMEB5hogDAMAwQBnQoiAwQB
nQokAwQBnQpwAwQBnQqCMAwDBAGdCtoDBAGdCtwDBAGdCvYDBAGdD0oDBAGdD14w
DAMEAp0PZAMEAZ0PaAMEAZ0UiAMEAZ0UwgMEAZ0U9gMEAZ1CKgMEAZ1CRgMEA51C
WAMEAZ1CpAMEAZ1C9AMDAJ48AwQCnoz8AwMAnxsDBAGgE0wDBAGgE1IDBAKgFBAD
BAGgFIIDBAGgFjoDBAGgFlIDBAGgFpQDBAGgFrwDBAGgFuADBAGgFuYDBAKgFvQw
DAMEAaAZCgMEAaAZDAMEAaAZwgMEAaAeKAMEAaAeljAMAwQBoB7CAwQDoB7AAwQB
oB7mAwQAoLvfAwQCoLv8AwQBoL8AAwQBoL9oAwQBoL9uMAwDBAGg+g4DBAKg+hAD
BAGg+lQDBAGg+lowDAMEAaD6ZgMEAaD6aAMEAaD6oAMEAaD6qgMEAaD61gMEAaD6
/AMDAKG9AwMAoc8DBAGh+BQDBAGh+CoDBAGh+FQDBAGh+FwwDAMEAqH4bAMEAaH4
cAMEAaVlBAMEAaVlQgMEAaVlRgMEAaVlkAMEAaVlqgMEAaVl0AMEAaVl9AMDAKe9
AwQCp9z0AwMAqKADAwCqswMEAcAzrAMEAcA3LgMEAsA3RAMEAsBmzAMEAsavZDAN
BgkqhkiG9w0BAQsFAAOCAQEAgOMn1HRFHLoqEJVlUQaarf7EGoXC3CaPNvYgGtpx
n5X60is43gCeWXBvSd+7mE8eIBhOlBYim53hqHRL9aCThKncnYPe7yWEFPnUvmUv
ji90pouTFOEf5pDPeFfKDSKTi3evcna/0osBccXmHZaDvqmxDQjqY0BOHBId5FP2
FRjfnDdbLl20CN0NsYX9DcS3doNJPKPpQOvC8R/b/GZ2OfMPJAndccD/NpKJH3Rq
Pm5lvBQN/sNue1EgFrgxiMZXajAfoES9ZUXQWQS0VmMt9wjJFDh/swKdoZ5AJFFR
UVvuaR83uRFKvcL1ClBdoXehfMJtaQQZW9IwmVYMvVXrXQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:31:56 2025 by rpki-client