Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DLBMxaazmxSN1xDvXG4_LZOAtFU.cer
File: DLBMxaazmxSN1xDvXG4_LZOAtFU.cer (raw, json)
Hash identifier: 1cqeA7OMNvwMd5lJFgoEqLiu63kQqIbyWQ0zmqk2hZ0=
Subject key identifier: 0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D99A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:16:19 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 55989
IP: 45.124.76.0/22
IP: 103.43.132.0/22
IP: 103.157.212.0/23
IP: 103.192.208.0/22
IP: 103.235.100.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55706 (0xd99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:16:19 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=0CB04CC5A6B39B148DD710EF5C6E3F2D9380B455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:c6:32:88:0d:3d:7f:d7:d6:ce:f9:ee:ab:
6b:dd:e0:96:44:da:62:2e:12:ed:08:42:b9:15:23:
d1:a0:3c:86:ee:62:ad:db:96:42:6c:b0:5b:38:05:
3c:93:77:02:53:1e:db:42:3f:73:71:db:be:2a:f1:
8c:71:92:b5:42:87:8a:e4:5c:eb:be:a8:75:7e:6b:
dc:d0:fd:fc:31:02:be:6f:98:19:f7:4b:a6:26:0c:
7f:05:42:19:02:9a:94:07:9b:5b:65:ed:15:f9:58:
b1:49:f6:4f:bd:e6:51:67:19:d1:00:58:e1:3a:1e:
58:5f:4c:b0:ec:e9:ac:c6:70:bb:52:4c:6b:f7:df:
04:3d:91:b8:48:94:b6:20:59:51:16:bb:68:71:04:
fd:14:2c:06:c2:52:ab:c2:0e:60:3d:54:e1:ca:88:
21:9f:ce:8e:af:dd:27:22:74:eb:d2:f4:76:fd:8b:
9e:ed:c6:36:a1:b5:f8:80:23:8b:ce:9d:13:a8:af:
ef:c5:60:1e:69:2d:c9:79:16:e3:ea:56:e8:bd:ae:
b3:42:37:34:33:30:4d:dd:6b:25:fd:2c:3e:ce:e4:
93:84:94:8f:ba:a8:df:3d:12:e8:3f:0a:b1:ad:52:
cf:6e:1c:2a:ea:1b:d9:12:ce:46:57:49:7f:00:c1:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55989
sbgp-ipAddrBlock: critical
IPv4:
45.124.76.0/22
103.43.132.0/22
103.157.212.0/23
103.192.208.0/22
103.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:d2:1f:35:2f:d2:a4:f7:05:14:ec:b2:2c:9e:30:de:49:62:
62:d4:6f:32:c0:15:5d:6d:23:e5:b7:52:a6:c0:f0:e0:d0:ea:
2e:8a:2d:33:3f:9d:17:c9:2e:c1:c8:94:42:40:c1:4c:db:4e:
a4:8c:f2:fa:31:53:2c:cc:5d:77:51:b0:dd:21:81:3a:43:ef:
ad:e9:2d:e6:a1:71:a2:26:42:5e:69:38:91:c3:39:1e:4c:0b:
d3:9b:fe:b2:06:68:16:13:07:f5:6b:a4:71:66:43:6a:b2:73:
78:70:a8:b1:bd:8e:98:f4:2a:9c:c2:4e:4f:ab:e3:88:18:8d:
f1:00:59:ff:3f:46:82:34:4e:9a:ee:ae:f3:6c:1a:a0:28:98:
b2:a4:9e:33:e4:a5:a5:91:34:fc:db:84:b3:3a:87:2f:ac:ec:
dc:13:4b:12:05:aa:ba:59:79:5e:3f:ad:76:29:91:ec:55:39:
c0:2d:42:e8:b1:a7:9f:ea:ab:eb:2c:8e:89:e6:1d:b9:8a:26:
0e:14:7e:fd:4a:c9:0e:2c:48:31:89:3b:32:78:0c:da:1e:1f:
d2:9f:dc:57:19:03:26:7c:4a:4d:d1:55:28:6e:e4:aa:c4:32:
3f:dc:48:71:9d:9c:3c:df:2d:3d:4f:7d:ab:28:13:fc:1d:c4:
df:cb:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:55:06 2025 by rpki-client