Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
File: 27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer (raw, json)
Hash identifier: KBqx4Rsp5oKB3pE4ZSxOp41b8WqjE3nJLNRtwUViPyA=
Subject key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C849
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 29 Jul 2026 01:52:07 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 9808
AS: 24059
AS: 24311
AS: 24400
AS: 24444 -- 24445
AS: 24547
AS: 38019
AS: 45120
AS: 56040 -- 56042
AS: 56044 -- 56048
AS: 132501
AS: 132510 -- 132511
AS: 132525
AS: 134810
AS: 135054
AS: 136755
AS: 138407
AS: 139080
AS: 140105
AS: 140895
AS: 141425
IP: 36.128.0.0/10
IP: 39.128.0.0/10
IP: 43.239.172.0/22
IP: 43.251.244.0/22
IP: 45.65.16.0/22
IP: 45.121.68.0 -- 45.121.75.255
IP: 45.121.172.0 -- 45.121.179.255
IP: 45.122.96.0/21
IP: 45.123.152.0/22
IP: 45.124.36.0/22
IP: 45.125.24.0/22
IP: 45.253.72.0/22
IP: 61.14.240.0/21
IP: 103.20.112.0/22
IP: 103.21.176.0/22
IP: 103.35.104.0/22
IP: 103.61.156.0 -- 103.61.163.255
IP: 103.62.24.0/22
IP: 103.62.204.0 -- 103.62.211.255
IP: 103.192.0.0/22
IP: 103.192.144.0/22
IP: 103.193.140.0/22
IP: 103.203.164.0/22
IP: 103.205.108.0/22
IP: 103.205.116.0/22
IP: 103.210.164.0/22
IP: 103.222.196.0/22
IP: 111.0.0.0/10
IP: 112.0.0.0/10
IP: 117.128.0.0 -- 117.134.191.255
IP: 117.135.0.0 -- 117.191.255.255
IP: 120.192.0.0/10
IP: 175.176.188.0/22
IP: 183.192.0.0/10
IP: 211.103.0.0/17
IP: 211.136.0.0/13
IP: 218.200.0.0/13
IP: 221.130.0.0/15
IP: 221.176.0.0/13
IP: 223.64.0.0 -- 223.117.255.255
IP: 223.120.128.0/17
IP: 223.121.128.0/17
IP: 223.123.208.0 -- 223.127.255.255
IP: 2001:e80::/32
IP: 2409:8000::/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182345 (0x2c849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 01:52:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:bd:92:18:c3:b9:71:b3:88:4c:6b:33:15:
a7:bf:d3:c9:d3:4a:e1:db:7c:5e:0f:b6:f5:e3:f2:
d9:09:ca:eb:10:88:f2:93:f9:8d:67:8d:2b:02:7e:
ea:4b:23:3f:50:a7:85:64:3e:8a:2d:0d:b2:36:d7:
2a:10:9b:87:3e:d4:97:5b:2e:07:b6:8c:ad:ef:c3:
54:a2:85:7d:ed:d6:43:f9:86:32:c5:c2:4c:06:39:
c2:e3:83:4c:b9:c7:30:ff:29:bf:ee:da:4a:e3:d6:
6b:10:d3:97:b8:d6:86:66:b2:14:f6:74:a1:5a:c8:
64:b1:08:1e:bd:35:28:20:a3:17:f3:99:20:ca:06:
91:32:23:03:0a:a3:6b:c5:fb:d6:1c:6f:aa:42:b3:
4a:29:57:95:bf:1b:74:f1:8d:f6:bc:f4:49:1f:e8:
cc:5f:de:73:29:26:da:32:ac:ad:97:d8:82:df:06:
47:3e:ee:47:64:56:73:10:46:83:d1:d7:7c:f6:19:
2a:f2:89:ee:1d:c2:75:9e:57:b0:c3:67:5d:85:87:
af:cd:d1:29:5b:f7:19:2e:f5:36:0a:65:96:5c:ee:
35:1d:5e:ff:f2:77:f0:53:0c:35:b3:1e:ab:35:f0:
9b:24:82:4d:6b:66:29:5d:cd:bd:ec:2f:2d:9c:e4:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9808
24059
24311
24400
24444-24445
24547
38019
45120
56040-56042
56044-56048
132501
132510-132511
132525
134810
135054
136755
138407
139080
140105
140895
141425
sbgp-ipAddrBlock: critical
IPv4:
36.128.0.0/10
39.128.0.0/10
43.239.172.0/22
43.251.244.0/22
45.65.16.0/22
45.121.68.0-45.121.75.255
45.121.172.0-45.121.179.255
45.122.96.0/21
45.123.152.0/22
45.124.36.0/22
45.125.24.0/22
45.253.72.0/22
61.14.240.0/21
103.20.112.0/22
103.21.176.0/22
103.35.104.0/22
103.61.156.0-103.61.163.255
103.62.24.0/22
103.62.204.0-103.62.211.255
103.192.0.0/22
103.192.144.0/22
103.193.140.0/22
103.203.164.0/22
103.205.108.0/22
103.205.116.0/22
103.210.164.0/22
103.222.196.0/22
111.0.0.0/10
112.0.0.0/10
117.128.0.0-117.134.191.255
117.135.0.0-117.191.255.255
120.192.0.0/10
175.176.188.0/22
183.192.0.0/10
211.103.0.0/17
211.136.0.0/13
218.200.0.0/13
221.130.0.0/15
221.176.0.0/13
223.64.0.0-223.117.255.255
223.120.128.0/17
223.121.128.0/17
223.123.208.0-223.127.255.255
IPv6:
2001:e80::/32
2409:8000::/20
Signature Algorithm: sha256WithRSAEncryption
1a:71:3d:b3:1f:a6:82:51:dd:f5:8b:29:25:4a:af:a3:19:e0:
b0:ac:f4:3d:48:c5:5f:c2:51:11:b2:e6:02:d3:e6:af:be:0d:
03:81:a0:b5:cd:0f:d4:29:13:81:a9:1c:22:0f:a8:09:72:fa:
78:b8:fb:cc:12:13:5b:fe:bb:4f:08:62:61:d7:5d:4e:2e:be:
7d:45:e2:11:14:16:4e:43:62:68:c5:94:af:06:e6:bd:94:b2:
c3:e6:7e:8d:8d:04:64:17:a5:e0:5a:4e:06:b4:af:83:76:a5:
7b:29:f9:7e:e4:80:2c:3b:80:8a:9b:58:ec:35:60:e2:db:12:
ed:58:1a:40:1a:25:ad:ff:a5:47:03:62:da:47:f4:e8:8b:c9:
58:d9:fa:db:f5:83:31:79:78:5a:eb:fa:d2:17:63:4d:7b:fd:
f3:2e:86:de:73:6d:d4:2c:ff:1b:23:73:0c:d9:f3:a3:00:f8:
53:d1:0a:e2:8d:49:5f:dd:c9:1d:4c:4e:4d:e2:a1:fa:b4:aa:
9d:54:2c:ff:e7:99:0b:03:dc:26:6a:09:e1:6b:d7:55:9a:6b:
ee:a7:52:5f:0c:7a:dd:16:02:85:1b:fb:0d:95:2e:d5:43:2f:
ef:22:ff:7b:b8:68:ed:b6:36:bd:42:04:20:f2:46:c2:db:ff:
7c:9f:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:26 2026 by rpki-client