Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/0b0pDan5aOcEvyQJEYgFk-f1rsY.cer
File: 0b0pDan5aOcEvyQJEYgFk-f1rsY.cer (raw, json)
Hash identifier: tMNF+1mYlrTe1gXZlJ38tt+Ds8ln2Jqe5+YoBnA9Rjw=
Subject key identifier: D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: EB01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 07 Feb 2026 19:57:48 +0000
Certificate not after: Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources: AS: 17962
IP: 36.36.0.0/16
IP: 103.12.184.0/22
IP: 111.221.128.0 -- 111.222.255.255
IP: 115.44.0.0/15
IP: 116.76.0.0/15
IP: 180.200.252.0/22
IP: 203.88.32.0/19
IP: 211.148.192.0/19
IP: 219.232.160.0/19
IP: 219.234.96.0/19
IP: 222.125.0.0/16
IP: 222.248.0.0/16
IP: 223.212.0.0/15
IP: 2400:ee00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 00:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60161 (0xeb01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 7 19:57:48 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D1BD290DA9F968E704BF240911880593E7F5AEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:7e:8f:4c:04:aa:a9:c3:dd:96:59:db:0c:
76:d1:21:0f:fe:8c:9a:25:63:93:01:4a:87:9b:06:
85:fa:03:69:ce:e1:06:df:94:1b:79:38:38:90:04:
59:59:45:42:04:a9:43:69:a9:4b:a4:29:d3:c7:47:
c4:cb:47:73:8d:da:99:b7:5e:95:5e:40:c7:59:e2:
fa:f3:89:bb:f8:74:67:86:3b:5b:c9:4c:a2:04:13:
7c:2f:4e:21:47:e9:6f:4e:de:92:c5:cd:ac:ff:35:
e3:a5:f4:13:c1:33:6f:3e:0a:a3:db:e0:ce:22:e4:
0b:25:b9:37:1c:53:84:8a:78:7d:08:29:aa:da:95:
f8:59:b8:1d:08:e3:d2:02:66:3d:88:dd:5b:88:ef:
73:72:44:e9:b7:ef:04:74:07:ac:04:dc:cd:3a:7c:
9a:eb:25:bd:26:ea:4b:b1:73:be:c7:3f:21:7d:8a:
ab:b8:c9:60:84:66:9c:9d:7a:90:f3:54:ca:95:0f:
c3:ce:8c:35:57:33:7b:06:56:3c:39:da:66:f3:c6:
ee:ce:32:8c:7a:c7:15:20:9b:d7:43:24:de:8b:a3:
f5:15:56:00:92:c3:c6:c8:ee:db:3d:18:dd:84:a4:
8f:38:13:61:69:12:2b:b1:2a:b9:38:f7:5d:72:70:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BD:29:0D:A9:F9:68:E7:04:BF:24:09:11:88:05:93:E7:F5:AE:C6
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/0b0pDan5aOcEvyQJEYgFk-f1rsY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17962
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
103.12.184.0/22
111.221.128.0-111.222.255.255
115.44.0.0/15
116.76.0.0/15
180.200.252.0/22
203.88.32.0/19
211.148.192.0/19
219.232.160.0/19
219.234.96.0/19
222.125.0.0/16
222.248.0.0/16
223.212.0.0/15
IPv6:
2400:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
4a:15:c1:0e:64:5e:36:df:27:af:ed:8c:07:21:bd:f1:61:df:
22:9b:ef:7c:c6:51:03:29:83:8f:ef:4e:68:14:97:88:f2:4f:
1b:1b:cb:96:16:15:f4:8f:09:7f:71:a9:3d:50:59:30:63:6c:
46:e1:2b:93:9f:56:0a:5c:f0:52:db:5f:7a:f2:06:be:77:a9:
d7:a0:f2:f9:10:e8:04:fa:83:80:5f:e6:93:88:1b:9c:d3:39:
6a:87:77:7c:f3:9f:7a:49:85:78:54:42:9e:5a:6c:9d:54:f1:
05:89:f5:04:7e:ae:a2:98:e8:39:b2:de:2d:ef:52:43:be:c3:
d7:51:07:10:eb:aa:47:f4:ac:61:82:4e:02:5c:76:2b:fc:a3:
8f:d6:0b:e6:06:d4:96:3c:b9:b9:f4:30:17:a0:17:ba:bd:5d:
11:d4:49:4b:ca:8d:4a:16:5b:9b:e6:ab:58:f6:ab:da:dc:7c:
16:e5:fa:89:c2:0a:b4:ed:78:3e:49:3f:80:ae:84:74:cc:87:
6a:11:18:04:c9:d7:35:f9:27:36:41:3b:bd:06:ec:08:40:8c:
fd:2d:84:96:e5:26:e8:93:c2:78:d4:c0:57:25:d3:57:7a:d0:
5a:71:52:52:23:3a:06:69:8b:a5:20:99:5c:f3:47:5a:16:59:
89:44:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:26 2026 by rpki-client