Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
File: 27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer (raw, json)
Hash identifier: pO5TVxITaztPJL2jGQ4NEki3Pa1ddMeVxTWGI515G34=
Subject key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB9D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 10 Apr 2026 07:04:50 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 9808
AS: 24311
AS: 24400
AS: 24444 -- 24445
AS: 24547
AS: 38019
IP: 39.128.0.0/10
IP: 43.239.172.0/22
IP: 43.251.244.0/22
IP: 45.65.16.0/22
IP: 45.121.68.0 -- 45.121.75.255
IP: 45.121.172.0/22
IP: 45.122.96.0/21
IP: 45.123.152.0/22
IP: 45.124.36.0/22
IP: 45.125.24.0/22
IP: 45.253.72.0/22
IP: 61.14.240.0/21
IP: 103.21.176.0/22
IP: 103.35.104.0/22
IP: 103.61.156.0 -- 103.61.163.255
IP: 103.62.24.0/22
IP: 103.62.204.0 -- 103.62.211.255
IP: 103.192.0.0/22
IP: 103.192.144.0/22
IP: 103.193.140.0/22
IP: 103.203.164.0/22
IP: 103.205.108.0/22
IP: 103.205.116.0/22
IP: 103.210.164.0/22
IP: 103.222.196.0/22
IP: 111.0.0.0/10
IP: 117.128.0.0 -- 117.134.191.255
IP: 117.135.0.0 -- 117.191.255.255
IP: 120.192.0.0/10
IP: 175.176.188.0/22
IP: 211.103.0.0/17
IP: 211.136.0.0/13
IP: 218.200.0.0/13
IP: 221.130.0.0/15
IP: 221.176.0.0/13
IP: 223.64.0.0 -- 223.117.255.255
IP: 223.120.128.0/17
IP: 223.121.128.0/17
IP: 223.123.208.0 -- 223.127.255.255
IP: 2001:e80::/32
IP: 2409:8000::/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175005 (0x2ab9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 07:04:50 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:bd:92:18:c3:b9:71:b3:88:4c:6b:33:15:
a7:bf:d3:c9:d3:4a:e1:db:7c:5e:0f:b6:f5:e3:f2:
d9:09:ca:eb:10:88:f2:93:f9:8d:67:8d:2b:02:7e:
ea:4b:23:3f:50:a7:85:64:3e:8a:2d:0d:b2:36:d7:
2a:10:9b:87:3e:d4:97:5b:2e:07:b6:8c:ad:ef:c3:
54:a2:85:7d:ed:d6:43:f9:86:32:c5:c2:4c:06:39:
c2:e3:83:4c:b9:c7:30:ff:29:bf:ee:da:4a:e3:d6:
6b:10:d3:97:b8:d6:86:66:b2:14:f6:74:a1:5a:c8:
64:b1:08:1e:bd:35:28:20:a3:17:f3:99:20:ca:06:
91:32:23:03:0a:a3:6b:c5:fb:d6:1c:6f:aa:42:b3:
4a:29:57:95:bf:1b:74:f1:8d:f6:bc:f4:49:1f:e8:
cc:5f:de:73:29:26:da:32:ac:ad:97:d8:82:df:06:
47:3e:ee:47:64:56:73:10:46:83:d1:d7:7c:f6:19:
2a:f2:89:ee:1d:c2:75:9e:57:b0:c3:67:5d:85:87:
af:cd:d1:29:5b:f7:19:2e:f5:36:0a:65:96:5c:ee:
35:1d:5e:ff:f2:77:f0:53:0c:35:b3:1e:ab:35:f0:
9b:24:82:4d:6b:66:29:5d:cd:bd:ec:2f:2d:9c:e4:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9808
24311
24400
24444-24445
24547
38019
sbgp-ipAddrBlock: critical
IPv4:
39.128.0.0/10
43.239.172.0/22
43.251.244.0/22
45.65.16.0/22
45.121.68.0-45.121.75.255
45.121.172.0/22
45.122.96.0/21
45.123.152.0/22
45.124.36.0/22
45.125.24.0/22
45.253.72.0/22
61.14.240.0/21
103.21.176.0/22
103.35.104.0/22
103.61.156.0-103.61.163.255
103.62.24.0/22
103.62.204.0-103.62.211.255
103.192.0.0/22
103.192.144.0/22
103.193.140.0/22
103.203.164.0/22
103.205.108.0/22
103.205.116.0/22
103.210.164.0/22
103.222.196.0/22
111.0.0.0/10
117.128.0.0-117.134.191.255
117.135.0.0-117.191.255.255
120.192.0.0/10
175.176.188.0/22
211.103.0.0/17
211.136.0.0/13
218.200.0.0/13
221.130.0.0/15
221.176.0.0/13
223.64.0.0-223.117.255.255
223.120.128.0/17
223.121.128.0/17
223.123.208.0-223.127.255.255
IPv6:
2001:e80::/32
2409:8000::/20
Signature Algorithm: sha256WithRSAEncryption
a1:8f:42:88:b8:1d:8e:16:fa:21:06:95:cb:c6:93:44:61:0f:
4d:dc:c1:2b:a7:93:9f:7d:cb:92:c8:c8:f9:e3:55:d0:5b:df:
71:a2:2f:6b:57:4d:54:65:55:1b:03:ff:89:f0:4a:19:a9:75:
77:9f:95:a9:96:50:f7:0f:78:ee:fc:17:28:51:42:3c:43:c0:
0c:d2:50:91:2d:4a:de:d3:5d:11:53:44:65:63:84:ed:f9:e5:
9c:f8:18:21:eb:6b:12:24:98:bd:a6:e7:cf:20:72:a2:7d:86:
6f:80:3e:2f:22:25:00:3b:08:d6:dd:1b:e1:51:79:08:74:94:
27:c3:7b:52:3b:cd:a7:58:0d:24:24:95:b2:73:9e:ad:98:54:
61:bd:71:53:14:61:37:25:81:29:a1:eb:95:73:e2:d4:f5:e6:
b5:3e:a2:fe:9c:af:06:6d:9a:72:0c:bf:05:6c:7d:23:a6:e2:
2e:2e:81:d9:35:d3:ca:c0:af:b2:73:54:7a:de:62:68:df:7f:
c9:6c:c5:fd:3a:49:52:40:98:81:7e:b3:f4:53:43:7f:d5:51:
e8:58:f2:e0:56:a2:11:42:4b:83:ce:c6:5d:6f:c5:84:33:5f:
62:48:72:ea:aa:d2:7c:4b:17:4e:51:8e:15:39:87:c4:b4:c3:
a9:56:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:07:00 2026 by rpki-client