Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
File: 5W2kwnXzzMktCGICoe2neD8MPQ0.cer (raw, json)
Hash identifier: zwGvOMl2aGNpEy4ceNsBgFb0B/0tUd1yU3PlCwiV65k=
Subject key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E2DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:12:43 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 58854
IP: 27.0.132.0/22
IP: 43.242.72.0/22
IP: 45.119.60.0/22
IP: 45.126.120.0/22
IP: 103.27.4.0/22
IP: 103.59.112.0/22
IP: 103.64.156.0/22
IP: 103.64.212.0/22
IP: 103.73.136.0/21
IP: 103.81.8.0/22
IP: 103.81.16.0/21
IP: 103.105.60.0/22
IP: 103.236.252.0/22
IP: 150.242.96.0/22
IP: 211.155.96.0/19
IP: 2400:60c0::/32
IP: 2400:73c0::/32
IP: 2400:74c0::/32
IP: 2402:2bc0::/32
IP: 2402:d980::/32
IP: 2407:7d00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 18:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58075 (0xe2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:12:43 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:7b:ed:1d:6d:aa:33:9a:67:6b:9c:da:3a:
bb:aa:e9:0e:c7:65:89:73:bb:fa:a9:19:f2:f2:ff:
37:40:7f:77:3e:c0:de:3b:ac:3b:aa:b6:49:ca:73:
93:7a:26:d1:21:75:6a:00:a8:b0:06:28:ff:f5:a4:
c7:a1:0d:65:cf:62:ed:06:0b:73:e0:9b:85:a1:1b:
e1:0d:c9:66:22:99:15:0a:cd:a0:5c:af:bb:79:ba:
18:1e:92:fa:45:d9:ca:93:4f:c5:e6:6e:4d:3c:12:
df:4f:a5:44:de:44:bd:da:16:06:60:8d:1f:4d:8c:
11:39:e6:4d:97:56:8d:75:70:b7:e8:d4:13:f7:0c:
f3:e0:83:fb:ab:e4:5a:55:0a:d8:e0:3c:4d:7a:5e:
d4:09:43:d1:af:64:7e:da:e5:d9:53:8d:f6:e9:59:
f8:17:d4:f6:61:6c:1b:5a:59:e5:c9:e1:dc:56:89:
71:9e:74:6c:7d:f7:85:9f:de:d5:de:c8:f3:41:8c:
dc:5b:1a:43:bc:00:ba:6d:1a:6c:2b:ee:7d:cb:9c:
c6:ca:84:df:18:47:30:87:07:45:ed:cd:57:06:60:
e2:27:6d:d5:ba:72:f7:59:90:cb:de:86:3f:ed:9a:
41:12:3a:4a:c7:1f:7e:dd:7b:d7:41:9a:23:1b:ff:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58854
sbgp-ipAddrBlock: critical
IPv4:
27.0.132.0/22
43.242.72.0/22
45.119.60.0/22
45.126.120.0/22
103.27.4.0/22
103.59.112.0/22
103.64.156.0/22
103.64.212.0/22
103.73.136.0/21
103.81.8.0/22
103.81.16.0/21
103.105.60.0/22
103.236.252.0/22
150.242.96.0/22
211.155.96.0/19
IPv6:
2400:60c0::/32
2400:73c0::/32
2400:74c0::/32
2402:2bc0::/32
2402:d980::/32
2407:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
5a:cc:26:02:07:5b:1d:ea:2e:4b:0a:e6:a4:3d:92:3e:c6:db:
38:8b:e8:b0:32:b8:b7:fd:13:3e:e5:30:2d:f9:60:30:44:64:
33:a7:23:bd:c3:c5:ba:aa:5d:75:e5:8f:2a:5d:d6:8d:bd:ed:
c8:d1:16:d6:e7:5e:19:c1:ca:0f:04:98:31:5f:e0:73:41:6a:
75:68:4d:2a:a2:c1:44:4f:5c:03:9d:98:0d:17:a2:ba:7c:fb:
e6:8f:7e:e8:19:12:ca:0d:8c:88:54:9c:b0:a3:12:2b:31:fd:
5c:77:e8:df:e5:93:77:0c:60:cc:13:fd:3b:53:4d:0e:cd:33:
da:2e:76:6f:88:71:bc:e0:f7:aa:b5:0b:b2:91:3e:39:f4:81:
fd:60:a5:e2:cc:63:d2:17:8e:25:59:f1:f5:c6:ec:8a:e2:24:
1c:28:bc:24:db:47:c5:8f:d1:b9:72:55:7d:25:fa:09:ed:85:
d8:6f:c7:e1:0d:dc:08:9f:bf:e8:20:4c:96:dc:e2:ae:5b:9e:
78:9c:e2:57:08:e0:64:f7:72:eb:22:2d:a9:5d:0f:db:25:bc:
1a:fa:e7:8b:e5:13:f5:35:0f:b9:c4:3f:e6:9a:20:f7:3e:84:
49:1c:7a:c9:33:54:f3:a2:f4:b6:44:9d:b4:0e:04:90:e6:00:
4e:6c:f1:56
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIDAOLbMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEyNDNaFw0yNjEwMjMwMzAxMDNaMDMx
MTAvBgNVBAMTKEU1NkRBNEMyNzVGM0NDQzkyRDA4NjIwMkExRURBNzc4M0YwQzNE
MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVnvtHW2qM5pna5za
Oruq6Q7HZYlzu/qpGfLy/zdAf3c+wN47rDuqtknKc5N6JtEhdWoAqLAGKP/1pMeh
DWXPYu0GC3Pgm4WhG+ENyWYimRUKzaBcr7t5uhgekvpF2cqTT8Xmbk08Et9PpUTe
RL3aFgZgjR9NjBE55k2XVo11cLfo1BP3DPPgg/ur5FpVCtjgPE16XtQJQ9GvZH7a
5dlTjfbpWfgX1PZhbBtaWeXJ4dxWiXGedGx994Wf3tXeyPNBjNxbGkO8ALptGmwr
7n3LnMbKhN8YRzCHB0XtzVcGYOInbdW6cvdZkMvehj/tmkESOkrHH37de9dBmiMb
/+r/AgMBAAGjggL4MIIC9DAdBgNVHQ4EFgQU5W2kwnXzzMktCGICoe2neD8MPQ0w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYy
MS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC82MjEvNVcya3duWHp6TWt0Q0dJQ29lMm5lRDhNUFEwLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5eYwgacGCCsGAQUFBwEHAQH/BIGXMIGU
MGAEAgABMFoDBAIbAIQDBAIr8kgDBAItdzwDBAItfngDBAJnGwQDBAJnO3ADBAJn
QJwDBAJnQNQDBANnSYgDBAJnUQgDBANnURADBAJnaTwDBAJn7PwDBAKW8mADBAXT
m2AwMAQCAAIwKgMFACQAYMADBQAkAHPAAwUAJAB0wAMFACQCK8ADBQAkAtmAAwUA
JAd9ADANBgkqhkiG9w0BAQsFAAOCAQEAWswmAgdbHeouSwrmpD2SPsbbOIvosDK4
t/0TPuUwLflgMERkM6cjvcPFuqpddeWPKl3Wjb3tyNEW1udeGcHKDwSYMV/gc0Fq
dWhNKqLBRE9cA52YDReiunz75o9+6BkSyg2MiFScsKMSKzH9XHfo3+WTdwxgzBP9
O1NNDs0z2i52b4hxvOD3qrULspE+OfSB/WCl4sxj0heOJVnx9cbsiuIkHCi8JNtH
xY/RuXJVfSX6Ce2F2G/H4Q3cCJ+/6CBMltzirlueeJziVwjgZPdy6yItqV0P2yW8
Gvrni+UT9TUPucQ/5pog9z6ESRx6yTNU86L0tkSdtA4EkOYATmzxVg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:49:29 2025 by rpki-client