Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
File: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer (raw, json)
Hash identifier: aRHLdsrwG81JMveOn2A0A3AhVbB9jvaXF4juYur3veU=
Subject key identifier: 0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E30D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:13:25 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 58832
IP: 43.247.176.0/20
IP: 43.254.136.0/22
IP: 101.239.0.0/16
IP: 103.227.136.0/22
IP: 103.237.248.0 -- 103.238.7.255
IP: 103.238.160.0/22
IP: 103.242.172.0/22
IP: 114.112.96.0 -- 114.112.107.255
IP: 150.242.232.0/22
IP: 150.242.248.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58125 (0xe30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:13:25 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:ad:0d:11:d1:7e:b6:99:0d:b7:9d:66:21:
9e:0e:f7:49:af:63:fd:2b:d7:51:50:89:10:44:9a:
bf:16:cd:26:e3:da:75:e4:12:4b:41:cb:b3:7b:e8:
7f:63:9e:9d:a7:af:7e:d7:4f:92:09:bc:0a:eb:68:
9b:32:9b:b9:63:b8:fe:3f:e3:d4:40:0a:9b:73:42:
31:89:97:a5:89:ec:0a:27:9b:fa:fb:6d:72:d4:3b:
6e:6d:64:75:46:51:ba:7b:d3:4a:c6:9e:dc:66:0e:
7a:27:c7:3c:84:1b:53:d2:74:e2:c4:2a:a0:d6:6c:
17:49:34:8e:c1:08:a4:d4:e8:f7:2e:46:ab:03:8e:
5c:73:ef:18:15:f9:32:53:24:66:20:32:7f:54:3f:
da:41:09:27:12:f8:43:02:b7:78:27:d3:e8:47:31:
cb:4e:9d:f3:cd:7f:62:d0:dd:2c:9a:af:35:85:f5:
9b:81:e8:76:6f:0b:4f:ec:62:d5:5a:74:47:d1:fa:
09:c5:07:c7:d0:e1:54:90:04:12:7e:13:d3:3c:9b:
c4:8a:59:0f:eb:c0:71:2b:9a:c3:9f:d3:3d:67:21:
93:73:4f:0f:6e:b2:a1:14:dc:83:33:d7:32:f6:2d:
b2:3a:28:1d:89:55:a3:57:b8:99:97:05:f9:8d:2a:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58832
sbgp-ipAddrBlock: critical
IPv4:
43.247.176.0/20
43.254.136.0/22
101.239.0.0/16
103.227.136.0/22
103.237.248.0-103.238.7.255
103.238.160.0/22
103.242.172.0/22
114.112.96.0-114.112.107.255
150.242.232.0/22
150.242.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:b9:f3:cf:e0:d2:75:20:6f:a5:30:88:51:9a:c5:6e:74:d2:
c2:9e:9d:f6:80:78:f0:04:9c:61:1d:f2:d6:56:37:5d:8d:e2:
e1:f7:8b:16:a9:32:69:c6:00:c2:54:ae:9b:01:4c:c9:a7:ce:
ec:cf:c9:d0:86:52:46:33:01:18:4e:02:da:1f:31:88:e5:45:
86:0d:27:7c:49:2a:83:c5:ff:5e:26:03:a4:44:10:8e:e6:dc:
2e:1e:f3:d7:4e:87:d5:43:62:02:bb:79:70:b9:82:f9:40:93:
5e:0e:20:90:fa:75:7f:af:6e:6d:82:89:35:0c:90:3f:d0:ff:
20:9d:83:44:8c:d1:13:a4:9a:88:3c:b1:5b:a6:01:4f:87:f6:
fd:7d:16:0c:a3:3a:cd:bc:0e:7f:a9:47:c5:5f:d7:6c:d6:f9:
95:45:98:86:38:c7:13:6f:bd:16:86:67:0c:26:3f:68:02:ad:
6b:43:50:5e:c4:52:cd:9e:b1:c0:b1:92:cf:d7:63:c6:07:ec:
66:ae:3a:c6:27:91:d8:8d:70:06:14:63:79:29:ca:76:e9:9c:
f1:6a:75:c7:4b:b6:f5:0f:a8:41:d6:ed:09:ed:22:02:08:f3:
16:ca:b9:d0:22:74:1a:e4:e3:48:3b:62:62:59:ae:60:1a:2e:
f1:43:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:01 2025 by rpki-client