Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1Aagr27HSbr6GwP2X_fsggUMAHo.cer
File: 1Aagr27HSbr6GwP2X_fsggUMAHo.cer (raw, json)
Hash identifier: Tz1qdzTIEV2JWOghKcJ9AB05dShReiVNTz0GhDz7+GI=
Subject key identifier: D4:06:A0:AF:6E:C7:49:BA:FA:1B:03:F6:5F:F7:EC:82:05:0C:00:7A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E331
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/580/1Aagr27HSbr6GwP2X_fsggUMAHo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/580/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:13:50 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 59072
IP: 43.247.68.0/22
IP: 43.254.156.0/22
IP: 45.248.128.0/22
IP: 45.248.208.0 -- 45.248.235.255
IP: 45.248.240.0 -- 45.249.7.255
IP: 103.24.176.0/22
IP: 103.61.140.0/22
IP: 103.65.60.0 -- 103.65.75.255
IP: 103.198.156.0/22
IP: 103.207.188.0 -- 103.207.215.255
IP: 103.217.0.0/18
IP: 103.238.188.0/22
IP: 124.150.137.0/24
IP: 137.59.59.0/24
IP: 175.111.144.0 -- 175.111.175.255
IP: 202.153.7.0/24
IP: 202.158.242.0/24
IP: 202.171.232.0/24
IP: 202.172.7.0/24
IP: 202.173.6.0/24
IP: 203.16.63.0/24
IP: 203.17.249.0/24
IP: 203.19.1.0/24
IP: 203.100.60.0/24
IP: 203.142.219.0/24
IP: 203.174.6.0/24
IP: 203.191.2.0/24
IP: 203.191.7.0/24
IP: 203.201.181.0/24
IP: 2406:9380::/32
IP: 2406:9480::/32
IP: 2406:9d80::/32
IP: 2406:9e80::/32
IP: 2406:9f80::/32
IP: 2406:a080::/32
IP: 2406:a180::/32
IP: 2406:a280::/32
IP: 2406:a380::/32
IP: 2406:a480::/32
IP: 2406:a580::/32
IP: 2406:a680::/32
IP: 2406:a780::/32
IP: 2406:a880::/32
IP: 2406:a980::/32
IP: 2406:aa80::/32
IP: 2406:ab80::/32
IP: 2406:ac80::/32
IP: 2406:ad80::/32
IP: 2406:ae80::/32
IP: 2406:af80::/32
IP: 2406:b080::/32
IP: 2406:b880::/32
IP: 2406:b980::/32
IP: 2406:ba80::/32
IP: 2406:bb80::/32
IP: 2406:bc80::/32
IP: 2406:bd80::/32
IP: 2406:be80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58161 (0xe331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:13:50 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=D406A0AF6EC749BAFA1B03F65FF7EC82050C007A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:66:73:43:9c:1d:bb:fd:c8:4b:e7:d3:52:
29:70:33:7a:5b:7f:88:c7:48:75:ca:54:98:83:7a:
fd:58:6e:37:23:01:de:2f:02:21:c1:34:c7:b1:34:
e5:81:97:08:8a:6e:73:61:d3:86:47:f7:8e:7e:2a:
aa:c8:24:eb:ef:db:e0:b9:d3:91:3c:63:a9:b3:f6:
7c:81:8e:4c:88:7a:a1:ce:af:4f:a4:f4:63:a2:93:
ca:c0:6b:d3:61:c7:7d:77:49:b8:97:df:58:db:6d:
3e:c8:66:89:df:94:ed:64:ca:30:0c:fd:74:26:fe:
b0:63:9f:e0:02:fc:e2:b8:2e:b3:71:ac:5e:19:12:
02:ba:9d:6c:5b:49:a6:9d:28:38:4e:af:74:7d:e6:
06:74:6d:30:58:68:49:91:a8:bc:0e:26:9b:c1:29:
05:eb:83:7f:44:f4:b8:1d:94:e8:be:f7:67:77:14:
95:23:51:02:70:d8:1e:05:56:1d:7b:86:f1:d0:26:
80:8c:54:d9:60:66:b1:ad:d6:26:b6:42:a3:2f:be:
45:a6:fa:8e:6d:ed:cb:b1:31:fd:23:aa:6c:aa:9c:
e9:b9:c0:53:88:ad:1f:99:5c:7d:fe:43:19:c0:6a:
3a:c1:79:e3:e0:81:f4:3f:81:6e:29:83:13:aa:f2:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:06:A0:AF:6E:C7:49:BA:FA:1B:03:F6:5F:F7:EC:82:05:0C:00:7A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/580/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/580/1Aagr27HSbr6GwP2X_fsggUMAHo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59072
sbgp-ipAddrBlock: critical
IPv4:
43.247.68.0/22
43.254.156.0/22
45.248.128.0/22
45.248.208.0-45.248.235.255
45.248.240.0-45.249.7.255
103.24.176.0/22
103.61.140.0/22
103.65.60.0-103.65.75.255
103.198.156.0/22
103.207.188.0-103.207.215.255
103.217.0.0/18
103.238.188.0/22
124.150.137.0/24
137.59.59.0/24
175.111.144.0-175.111.175.255
202.153.7.0/24
202.158.242.0/24
202.171.232.0/24
202.172.7.0/24
202.173.6.0/24
203.16.63.0/24
203.17.249.0/24
203.19.1.0/24
203.100.60.0/24
203.142.219.0/24
203.174.6.0/24
203.191.2.0/24
203.191.7.0/24
203.201.181.0/24
IPv6:
2406:9380::/32
2406:9480::/32
2406:9d80::/32
2406:9e80::/32
2406:9f80::/32
2406:a080::/32
2406:a180::/32
2406:a280::/32
2406:a380::/32
2406:a480::/32
2406:a580::/32
2406:a680::/32
2406:a780::/32
2406:a880::/32
2406:a980::/32
2406:aa80::/32
2406:ab80::/32
2406:ac80::/32
2406:ad80::/32
2406:ae80::/32
2406:af80::/32
2406:b080::/32
2406:b880::/32
2406:b980::/32
2406:ba80::/32
2406:bb80::/32
2406:bc80::/32
2406:bd80::/32
2406:be80::/32
Signature Algorithm: sha256WithRSAEncryption
61:44:36:8b:21:6a:1b:e6:07:95:bf:94:29:f6:52:9a:4f:4a:
12:5b:da:7b:c6:68:37:49:3c:65:5d:16:7f:6a:43:b6:ae:18:
64:5d:d3:16:ba:29:04:8a:ac:46:c2:16:7a:0e:9e:16:b1:e5:
d1:1e:d2:71:96:ec:c5:fb:d9:bd:fb:d1:75:90:7c:19:b1:51:
5d:c4:e5:a9:1f:98:ed:fc:92:2d:0a:20:f9:c8:21:67:76:99:
eb:0f:89:fc:c4:44:10:a0:5c:a0:e4:45:a2:68:ec:ca:af:d3:
79:02:3c:20:91:28:e2:39:b7:2d:71:00:81:92:ae:7c:b6:f7:
0e:31:a1:92:0a:94:76:6b:9b:1a:bc:4e:bd:8c:74:dc:2d:6b:
90:7d:34:fc:14:75:c4:a1:f6:ca:00:e0:63:f9:fc:d3:a8:81:
ff:b8:5a:22:f6:f5:5f:96:88:9b:9d:af:90:71:b7:73:af:ff:
21:25:ae:81:c1:80:da:c0:d4:0c:28:c8:98:c1:b1:d5:7f:15:
07:97:e9:e7:83:ad:6e:18:f4:c7:fb:95:17:94:3c:49:04:3b:
bd:95:23:c9:72:d7:6e:43:d6:05:26:d0:64:35:15:9a:76:4f:
4e:fb:3c:3d:90:d3:5e:c5:4d:63:d9:55:22:b9:9c:6c:9e:18:
35:27:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:36:32 2025 by rpki-client