Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
File: 0b0pDan5aOcEvyQJEYgFk-f1rsY.cer (raw, json)
Hash identifier: hJL3Tu9m/5xc6Lbk0gFbuMbcOTbA75UBaZ3XyyRyOOM=
Subject key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E399
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 09:11:20 +0000
Certificate not after: Fri 23 Oct 2026 09:04:31 +0000
Subordinate resources: AS: 17962
IP: 36.36.0.0/16
IP: 103.12.184.0/22
IP: 111.221.128.0 -- 111.222.255.255
IP: 115.44.0.0/15
IP: 116.76.0.0/15
IP: 180.200.252.0/22
IP: 203.88.32.0/19
IP: 211.148.192.0/19
IP: 219.232.160.0/19
IP: 219.234.96.0/19
IP: 222.125.0.0/16
IP: 222.248.0.0/16
IP: 223.212.0.0/15
IP: 2400:ee00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 09:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58265 (0xe399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 09:11:20 2025 GMT
Not After : Oct 23 09:04:31 2026 GMT
Subject: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:7e:8f:4c:04:aa:a9:c3:dd:96:59:db:0c:
76:d1:21:0f:fe:8c:9a:25:63:93:01:4a:87:9b:06:
85:fa:03:69:ce:e1:06:df:94:1b:79:38:38:90:04:
59:59:45:42:04:a9:43:69:a9:4b:a4:29:d3:c7:47:
c4:cb:47:73:8d:da:99:b7:5e:95:5e:40:c7:59:e2:
fa:f3:89:bb:f8:74:67:86:3b:5b:c9:4c:a2:04:13:
7c:2f:4e:21:47:e9:6f:4e:de:92:c5:cd:ac:ff:35:
e3:a5:f4:13:c1:33:6f:3e:0a:a3:db:e0:ce:22:e4:
0b:25:b9:37:1c:53:84:8a:78:7d:08:29:aa:da:95:
f8:59:b8:1d:08:e3:d2:02:66:3d:88:dd:5b:88:ef:
73:72:44:e9:b7:ef:04:74:07:ac:04:dc:cd:3a:7c:
9a:eb:25:bd:26:ea:4b:b1:73:be:c7:3f:21:7d:8a:
ab:b8:c9:60:84:66:9c:9d:7a:90:f3:54:ca:95:0f:
c3:ce:8c:35:57:33:7b:06:56:3c:39:da:66:f3:c6:
ee:ce:32:8c:7a:c7:15:20:9b:d7:43:24:de:8b:a3:
f5:15:56:00:92:c3:c6:c8:ee:db:3d:18:dd:84:a4:
8f:38:13:61:69:12:2b:b1:2a:b9:38:f7:5d:72:70:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17962
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
103.12.184.0/22
111.221.128.0-111.222.255.255
115.44.0.0/15
116.76.0.0/15
180.200.252.0/22
203.88.32.0/19
211.148.192.0/19
219.232.160.0/19
219.234.96.0/19
222.125.0.0/16
222.248.0.0/16
223.212.0.0/15
IPv6:
2400:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
b2:73:cd:67:5a:52:f5:d6:b1:6b:03:9b:37:f2:03:f5:d5:1b:
ca:99:d9:85:77:42:98:f8:17:0f:89:dd:0c:0e:a4:f1:c5:95:
dc:d0:36:da:f5:4b:cb:15:92:e4:fd:b3:2d:4c:55:29:c0:95:
51:9d:8c:65:41:96:aa:ba:33:12:de:89:58:04:d4:4b:05:70:
6b:18:2c:3b:fd:9f:bb:a0:91:cb:61:ee:c6:88:0b:11:50:24:
b3:61:78:90:e5:af:de:0a:68:0d:81:71:c5:f8:22:1b:10:54:
18:e4:15:4c:d0:8e:ad:33:b0:c9:b8:8f:48:ac:b0:3d:ce:09:
ca:26:ef:97:97:56:85:28:23:f0:9d:72:16:a7:95:b0:79:fe:
6f:77:03:a1:73:c7:53:96:f6:ab:5e:53:69:93:e9:24:ed:0b:
7d:1c:eb:03:40:dd:49:80:68:3c:77:d0:16:ed:06:fe:ab:2f:
12:e3:43:df:cf:bf:4a:60:2f:f2:bb:f3:83:f8:f5:2f:06:11:
a2:0a:be:95:65:28:48:54:5c:4b:46:44:4b:cd:36:e6:6d:cc:
5a:4b:99:14:7a:77:b6:64:15:9a:6a:a7:e7:8b:8e:6e:20:ad:
37:27:da:5c:5b:37:44:3f:29:f1:05:2e:3e:8b:96:91:64:45:
58:31:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:25:38 2025 by rpki-client