Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
File: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer (raw, json)
Hash identifier: ronn5ydGMvzYNCynhVjYQsFTbWKPqHYyDb1eQHe3nSc=
Subject key identifier: 0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DA18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:18:20 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 58832
IP: 43.247.176.0/20
IP: 43.254.136.0/22
IP: 101.239.0.0/16
IP: 103.227.136.0/22
IP: 103.237.248.0 -- 103.238.7.255
IP: 103.238.160.0/22
IP: 103.242.172.0/22
IP: 114.112.96.0 -- 114.112.107.255
IP: 150.242.232.0/22
IP: 150.242.248.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55832 (0xda18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:18:20 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:ad:0d:11:d1:7e:b6:99:0d:b7:9d:66:21:
9e:0e:f7:49:af:63:fd:2b:d7:51:50:89:10:44:9a:
bf:16:cd:26:e3:da:75:e4:12:4b:41:cb:b3:7b:e8:
7f:63:9e:9d:a7:af:7e:d7:4f:92:09:bc:0a:eb:68:
9b:32:9b:b9:63:b8:fe:3f:e3:d4:40:0a:9b:73:42:
31:89:97:a5:89:ec:0a:27:9b:fa:fb:6d:72:d4:3b:
6e:6d:64:75:46:51:ba:7b:d3:4a:c6:9e:dc:66:0e:
7a:27:c7:3c:84:1b:53:d2:74:e2:c4:2a:a0:d6:6c:
17:49:34:8e:c1:08:a4:d4:e8:f7:2e:46:ab:03:8e:
5c:73:ef:18:15:f9:32:53:24:66:20:32:7f:54:3f:
da:41:09:27:12:f8:43:02:b7:78:27:d3:e8:47:31:
cb:4e:9d:f3:cd:7f:62:d0:dd:2c:9a:af:35:85:f5:
9b:81:e8:76:6f:0b:4f:ec:62:d5:5a:74:47:d1:fa:
09:c5:07:c7:d0:e1:54:90:04:12:7e:13:d3:3c:9b:
c4:8a:59:0f:eb:c0:71:2b:9a:c3:9f:d3:3d:67:21:
93:73:4f:0f:6e:b2:a1:14:dc:83:33:d7:32:f6:2d:
b2:3a:28:1d:89:55:a3:57:b8:99:97:05:f9:8d:2a:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58832
sbgp-ipAddrBlock: critical
IPv4:
43.247.176.0/20
43.254.136.0/22
101.239.0.0/16
103.227.136.0/22
103.237.248.0-103.238.7.255
103.238.160.0/22
103.242.172.0/22
114.112.96.0-114.112.107.255
150.242.232.0/22
150.242.248.0/22
Signature Algorithm: sha256WithRSAEncryption
82:e8:df:0c:1e:4e:6f:1e:c0:ff:98:64:45:1c:c2:a2:e0:ec:
a4:ec:ec:45:bb:10:61:3d:5e:96:c3:c3:3f:f7:f1:b8:7f:f6:
81:7d:06:29:28:3d:91:cf:a8:91:6d:a0:4f:1d:9a:bf:06:96:
35:2b:e1:05:cc:86:e4:00:55:fa:f0:77:21:c2:4b:d1:a1:96:
03:5e:9d:fd:6f:5b:78:0f:02:e9:3e:ec:2d:19:39:8b:8b:01:
d4:91:5a:9a:6c:1d:cb:38:b6:0f:07:a7:b2:26:9c:24:62:e6:
d0:bf:34:ec:27:6f:6a:b2:8c:09:ac:90:63:cd:1e:2e:61:6c:
64:c2:b4:8a:77:37:7f:35:60:c2:d5:88:06:79:84:45:bc:40:
1a:9d:8d:25:96:ce:b0:73:20:11:33:c8:70:d7:a2:1c:43:8e:
03:43:58:17:49:63:91:9d:f5:ec:3a:68:8e:7e:7b:ed:10:dd:
b6:77:49:25:06:b0:3e:cb:d2:4d:c7:9e:63:e7:8d:44:6c:6e:
83:59:d7:ec:6e:a3:8a:79:42:54:e8:bd:70:e2:bc:27:19:c6:
ae:a3:13:41:d9:0e:a4:31:dc:d6:61:d4:6d:b1:6a:38:42:6f:
18:93:66:7a:cd:83:e5:39:1a:74:71:5e:ba:56:57:e0:0a:84:
09:03:4e:89
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDANoYMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE4MjBaFw0yNjA4MDMwODQ0NDBaMDMx
MTAvBgNVBAMTKDBGRDExQ0Q1OUY0RjVDQTY2MzVCMEY3RkFCNEVBMjNDOUQ0RUEy
RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk0q0NEdF+tpkNt51m
IZ4O90mvY/0r11FQiRBEmr8WzSbj2nXkEktBy7N76H9jnp2nr37XT5IJvArraJsy
m7ljuP4/49RACptzQjGJl6WJ7Aonm/r7bXLUO25tZHVGUbp700rGntxmDnonxzyE
G1PSdOLEKqDWbBdJNI7BCKTU6PcuRqsDjlxz7xgV+TJTJGYgMn9UP9pBCScS+EMC
t3gn0+hHMctOnfPNf2LQ3SyarzWF9ZuB6HZvC0/sYtVadEfR+gnFB8fQ4VSQBBJ+
E9M8m8SKWQ/rwHErmsOf0z1nIZNzTw9usqEU3IMz1zL2LbI6KB2JVaNXuJmXBfmN
KjvVAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUD9Ec1Z9PXKZjWw9/q06iPJ1Oou8w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY0
Ni8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC82NDYvRDlFYzFaOVBYS1pqV3c5X3EwNmlQSjFPb3U4Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5dAwZAYIKwYBBQUHAQcBAf8EVTBTMFEE
AgABMEsDBAQr97ADBAIr/ogDAwBl7wMEAmfjiDAMAwQDZ+34AwQDZ+4AAwQCZ+6g
AwQCZ/KsMAwDBAVycGADBAJycGgDBAKW8ugDBAKW8vgwDQYJKoZIhvcNAQELBQAD
ggEBAILo3wweTm8ewP+YZEUcwqLg7KTs7EW7EGE9XpbDwz/38bh/9oF9BikoPZHP
qJFtoE8dmr8GljUr4QXMhuQAVfrwdyHCS9GhlgNenf1vW3gPAuk+7C0ZOYuLAdSR
WppsHcs4tg8Hp7ImnCRi5tC/NOwnb2qyjAmskGPNHi5hbGTCtIp3N381YMLViAZ5
hEW8QBqdjSWWzrBzIBEzyHDXohxDjgNDWBdJY5Gd9ew6aI5+e+0Q3bZ3SSUGsD7L
0k3HnmPnjURsboNZ1+xuo4p5QlTovXDivCcZxq6jE0HZDqQx3NZh1G2xajhCbxiT
ZnrNg+U5GnRxXrpWV+AKhAkDTok=
-----END CERTIFICATE-----
Generated at Wed Aug 13 06:01:18 2025 by rpki-client