Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
File: jAllti4Iqf0W-3-aGF-tRDhUcWI.cer (raw, json)
Hash identifier: 5el6K91FTglC66eRo/o1nUFlGXqii/9x7UFLH0pcH+g=
Subject key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DAF6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 02 Oct 2026 06:50:50 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 7497
AS: 37944
AS: 37951
IP: 36.254.0.0/16
IP: 49.210.0.0/15
IP: 60.245.128.0/17
IP: 101.252.0.0/15
IP: 103.2.208.0/22
IP: 116.90.184.0/21
IP: 116.215.0.0/16
IP: 117.103.16.0/20
IP: 119.78.0.0/15
IP: 119.232.0.0 -- 119.233.127.255
IP: 124.16.0.0/15
IP: 150.242.4.0/22
IP: 202.90.224.0/21
IP: 202.127.0.0/21
IP: 202.127.16.0/20
IP: 202.127.144.0/20
IP: 210.72.0.0 -- 210.72.159.255
IP: 210.73.0.0/18
IP: 210.75.160.0/19
IP: 210.75.224.0/19
IP: 210.76.192.0/19
IP: 210.77.0.0/19
IP: 210.77.64.0/19
IP: 211.147.192.0/20
IP: 211.156.64.0/20
IP: 211.156.160.0/20
IP: 211.167.160.0/20
IP: 218.244.64.0/19
IP: 223.192.0.0/15
IP: 2001:cc0::/32
IP: 2400:dd00::/28
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 02:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187126 (0x2daf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 06:50:50 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:30:6e:ea:4d:8c:b2:bb:9b:c1:70:07:3b:
8f:ea:aa:ca:f4:93:34:85:ad:24:26:9c:8b:2e:41:
15:ba:32:2c:00:30:7f:01:ff:9e:bd:ed:a5:21:0e:
fc:a9:52:86:ca:69:1d:af:e7:21:f3:bc:3b:a0:11:
e9:98:f2:6d:d2:87:ea:32:42:67:af:6d:ed:00:69:
4b:d5:89:b8:23:d1:ab:63:dd:b6:83:37:a8:64:bc:
b2:17:94:50:00:c4:7c:d8:59:75:90:4a:ec:a1:5a:
0b:bd:12:6e:5a:69:fb:08:5d:35:9b:11:31:f8:c5:
dc:62:a8:25:f7:0e:b8:02:f7:dd:d6:5b:d6:61:de:
a8:d2:bb:3a:13:ee:ce:0b:e6:ea:21:1b:78:60:40:
25:81:42:48:f3:dd:0e:fe:fa:e5:c0:04:24:f8:ab:
4c:f6:4f:71:9b:14:ab:45:6c:de:48:a2:cc:2c:be:
e4:81:93:e5:bc:30:48:bb:cd:c4:1d:28:5e:77:17:
37:37:51:26:ac:5d:7b:61:ca:d1:08:88:18:73:46:
34:23:ff:81:10:ba:44:51:e8:1e:fe:3e:57:b2:3c:
0e:a4:d5:ca:84:18:f4:8f:15:fd:75:c9:e5:0a:87:
ce:5a:d4:65:14:a1:de:b4:c7:5c:31:02:75:44:e8:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7497
37944
37951
sbgp-ipAddrBlock: critical
IPv4:
36.254.0.0/16
49.210.0.0/15
60.245.128.0/17
101.252.0.0/15
103.2.208.0/22
116.90.184.0/21
116.215.0.0/16
117.103.16.0/20
119.78.0.0/15
119.232.0.0-119.233.127.255
124.16.0.0/15
150.242.4.0/22
202.90.224.0/21
202.127.0.0/21
202.127.16.0/20
202.127.144.0/20
210.72.0.0-210.72.159.255
210.73.0.0/18
210.75.160.0/19
210.75.224.0/19
210.76.192.0/19
210.77.0.0/19
210.77.64.0/19
211.147.192.0/20
211.156.64.0/20
211.156.160.0/20
211.167.160.0/20
218.244.64.0/19
223.192.0.0/15
IPv6:
2001:cc0::/32
2400:dd00::/28
Signature Algorithm: sha256WithRSAEncryption
a5:34:11:5d:e2:2a:91:83:65:72:cd:8a:3c:e2:8f:96:05:1f:
a3:3a:eb:21:11:10:d0:82:de:e4:3e:de:6e:81:09:a3:9e:96:
62:7f:2f:fd:33:32:94:2a:cc:0e:7d:8c:69:c2:af:b8:4e:af:
3e:e4:e6:c6:2d:eb:01:ed:02:36:21:f8:e6:b0:5e:e1:dd:f4:
cc:2c:43:5c:fe:22:cf:16:5c:68:85:f1:ed:4e:27:fe:ac:8e:
f6:d6:8d:e9:c8:98:0e:38:07:a4:1d:72:d8:4c:06:64:df:e9:
73:5e:66:7b:52:63:d5:20:ac:c1:53:55:2b:14:a8:5c:87:71:
5e:92:29:14:cf:c7:01:d0:1b:41:56:dc:f5:f5:c5:21:78:53:
ec:1e:81:48:da:6a:41:2f:3d:26:9c:e9:91:e8:c1:ac:4b:0f:
e2:da:ff:a7:87:61:17:db:08:d1:74:ef:fe:79:31:18:ad:75:
eb:64:79:a7:f9:d7:42:9f:98:6a:17:c1:4a:d8:6f:6d:1e:1f:
c2:58:58:76:33:3d:b5:01:7e:31:2d:14:00:da:52:d1:25:90:
b0:cd:2f:04:eb:ca:f3:90:29:66:52:51:62:e6:1c:37:d8:66:
e2:07:48:d6:28:8d:4e:5b:39:7d:16:4d:11:e2:9f:b1:af:05:
f1:d3:6e:2d
-----BEGIN CERTIFICATE-----
MIIGyjCCBbKgAwIBAgIDAtr2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAwMjA2NTA1MFoXDTI3MTIzMDAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyg4QzA5NjVCNjJFMDhBOUZEMTZG
QjdGOUExODVGQUQ0NDM4NTQ3MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2LYwbupNjLK7m8FwBzuP6qrK9JM0ha0kJpyLLkEVujIsADB/Af+eve2l
IQ78qVKGymkdr+ch87w7oBHpmPJt0ofqMkJnr23tAGlL1Ym4I9GrY922gzeoZLyy
F5RQAMR82Fl1kErsoVoLvRJuWmn7CF01mxEx+MXcYqgl9w64Avfd1lvWYd6o0rs6
E+7OC+bqIRt4YEAlgUJI890O/vrlwAQk+KtM9k9xmxSrRWzeSKLMLL7kgZPlvDBI
u83EHShedxc3N1EmrF17YcrRCIgYc0Y0I/+BELpEUege/j5XsjwOpNXKhBj0jxX9
dcnlCofOWtRlFKHetMdcMQJ1ROgDEwIDAQABo4IDuzCCA7cwHQYDVR0OBBYEFIwJ
ZbYuCKn9Fvt/mhhfrUQ4VHFiMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBAQYIKwYBBQUHAQsEgfQwgfEwQgYIKwYB
BQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3
Njg1MjIwNzYxNy8xLzBuBggrBgEFBQcwCoZicnN5bmM6Ly9ycGtpLXJwcy5jbm5p
Yy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzEvOEMwOTY1QjYyRTA4QTlG
RDE2RkI3RjlBMTg1RkFENDQzODU0NzE2Mi5tZnQwOwYIKwYBBQUHMA2GL2h0dHBz
Oi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3RpZmljYXRpb24ueG1sMCMGCCsG
AQUFBwEIAQH/BBQwEqAQMA4CAh1JAgMAlDgCAwCUPzCB6AYIKwYBBQUHAQcBAf8E
gdgwgdUwgbwEAgABMIG1AwMAJP4DAwEx0gMEBzz1gAMDAWX8AwQCZwLQAwQDdFq4
AwMAdNcDBAR1ZxADAwF3TjALAwMDd+gDBAd36QADAwF8EAMEApbyBAMEA8pa4AME
A8p/AAMEBMp/EAMEBMp/kDALAwMD0kgDBAXSSIADBAbSSQADBAXSS6ADBAXSS+AD
BAXSTMADBAXSTQADBAXSTUADBATTk8ADBATTnEADBATTnKADBATTp6ADBAXa9EAD
AwHfwDAUBAIAAjAOAwUAIAEMwAMFBCQA3QAwDQYJKoZIhvcNAQELBQADggEBAKU0
EV3iKpGDZXLNijzij5YFH6M66yERENCC3uQ+3m6BCaOelmJ/L/0zMpQqzA59jGnC
r7hOrz7k5sYt6wHtAjYh+OawXuHd9MwsQ1z+Is8WXGiF8e1OJ/6sjvbWjenImA44
B6QdcthMBmTf6XNeZntSY9UgrMFTVSsUqFyHcV6SKRTPxwHQG0FW3PX1xSF4U+we
gUjaakEvPSac6ZHowaxLD+La/6eHYRfbCNF07/55MRitdetkeaf510KfmGoXwUrY
b20eH8JYWHYzPbUBfjEtFADaUtElkLDNLwTryvOQKWZSUWLmHDfYZuIHSNYojU5b
OX0WTRHin7GvBfHTbi0=
-----END CERTIFICATE-----
Generated at Wed Oct 14 05:58:44 2026 by rpki-client