Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HsPdz0dl7wGHxupiZgyDpkGedEQ.cer
File: HsPdz0dl7wGHxupiZgyDpkGedEQ.cer (raw, json)
Hash identifier: UUJAq3L8gAM9BCU+54FxutBf6RwIiad4fjXi0Xy/E1k=
Subject key identifier: 1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E08B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:04:52 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 9395
IP: 43.247.208.0/22
IP: 49.221.0.0/16
IP: 103.23.56.0/22
IP: 103.24.184.0/22
IP: 115.172.0.0/19
IP: 115.172.96.0 -- 115.172.191.255
IP: 124.14.64.0 -- 124.14.191.255
IP: 124.14.224.0/19
IP: 124.15.128.0/18
IP: 124.254.0.0/18
IP: 175.188.128.0/17
IP: 175.190.0.0/17
IP: 180.88.0.0 -- 180.89.127.255
IP: 180.91.128.0/17
IP: 211.161.0.0 -- 211.161.59.255
IP: 211.161.64.0/19
IP: 211.161.112.0 -- 211.161.191.255
IP: 211.162.0.0/18
IP: 211.162.80.0 -- 211.162.111.255
IP: 211.162.128.0/18
IP: 211.162.196.0 -- 211.162.255.255
IP: 220.112.128.0/18
IP: 220.112.208.0/20
IP: 220.113.0.0 -- 220.113.149.255
IP: 220.113.168.0 -- 220.113.223.255
IP: 220.115.0.0/19
IP: 220.115.64.0 -- 220.115.247.255
IP: 223.210.0.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 18:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57483 (0xe08b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:04:52 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=1EC3DDCF4765EF0187C6EA62660C83A6419E7444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:8b:b4:3c:44:1f:6c:c8:6f:11:f7:3f:5a:
e8:98:b2:2f:95:61:3d:3a:38:0b:56:8b:2e:93:a2:
bf:75:ab:08:35:ec:c0:51:e3:7d:6a:43:d3:b6:49:
d1:df:5b:cd:e1:61:6f:8c:46:6c:5e:4e:74:81:ce:
15:35:d8:c9:77:5d:e1:48:10:f4:71:59:4d:3d:5d:
6d:59:10:a4:97:11:79:8a:59:3f:c0:cc:f7:0a:f3:
dc:6d:3c:6c:6f:bc:18:ba:c3:69:c1:a0:0a:55:eb:
ce:bb:bf:fe:ca:7c:2d:80:0f:60:ce:a0:be:1f:85:
85:6e:21:fb:fd:ce:18:46:1b:f6:13:cb:b2:5f:00:
7e:d4:c7:71:25:16:8d:c6:12:c9:b0:af:d9:6a:5e:
63:d1:80:31:94:ab:a7:0b:5a:b8:17:81:a1:97:9d:
87:fb:5b:ac:45:19:d2:9c:93:82:94:f0:a3:7a:33:
ac:9f:88:b9:da:bb:f8:74:92:4e:50:dc:29:aa:aa:
3b:37:dc:2f:14:7e:a2:25:1b:fd:5b:4d:63:39:62:
b2:12:a9:21:12:b3:60:ba:0a:b5:0b:3c:6b:82:3d:
89:6a:3f:48:e6:b8:e6:01:47:a9:15:b1:16:e6:38:
36:c0:fd:8e:db:db:95:fe:6e:93:5a:4d:ce:02:2d:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9395
sbgp-ipAddrBlock: critical
IPv4:
43.247.208.0/22
49.221.0.0/16
103.23.56.0/22
103.24.184.0/22
115.172.0.0/19
115.172.96.0-115.172.191.255
124.14.64.0-124.14.191.255
124.14.224.0/19
124.15.128.0/18
124.254.0.0/18
175.188.128.0/17
175.190.0.0/17
180.88.0.0-180.89.127.255
180.91.128.0/17
211.161.0.0-211.161.59.255
211.161.64.0/19
211.161.112.0-211.161.191.255
211.162.0.0/18
211.162.80.0-211.162.111.255
211.162.128.0/18
211.162.196.0-211.162.255.255
220.112.128.0/18
220.112.208.0/20
220.113.0.0-220.113.149.255
220.113.168.0-220.113.223.255
220.115.0.0/19
220.115.64.0-220.115.247.255
223.210.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b4:99:b8:64:62:f8:40:0f:bd:3e:f7:a2:b3:3f:09:06:22:2c:
d8:a8:5a:e5:59:51:c6:46:20:84:9e:0e:67:7b:5b:75:26:a0:
ce:2a:0e:10:e7:22:4d:05:21:5d:52:e6:ab:8b:39:20:23:e4:
f0:08:3b:f1:7f:5e:1e:2c:51:7f:66:5d:f8:24:bd:89:ac:b5:
a3:bc:9a:52:fb:7b:39:c8:bb:b1:ec:ae:e8:d4:bf:f7:dc:10:
cf:9e:99:cb:09:bd:77:92:5c:f4:8b:50:89:68:3c:ab:85:96:
13:64:7b:51:97:a0:bb:ef:7b:d3:99:57:40:05:5e:03:05:d0:
9f:82:67:8a:74:2b:ba:a8:14:87:bd:51:2b:eb:0e:5b:0e:18:
8d:8f:b4:89:e9:33:61:e6:1e:ff:9b:13:67:fb:72:1c:25:a3:
7e:69:17:f7:81:ea:19:8c:fd:ff:da:22:2e:10:f0:d2:9c:06:
6f:16:29:95:42:b6:f4:2c:9d:48:45:57:a7:23:a1:68:fe:10:
34:b4:b9:06:09:a4:03:af:fe:c8:a3:ba:fc:62:45:e0:17:a4:
de:d4:7b:a6:02:1b:bc:b8:a2:69:69:4c:91:db:92:12:cb:52:
fa:4a:a6:cc:c4:36:f6:72:1a:21:15:d1:32:c3:11:77:98:8e:
d2:12:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:24:08 2025 by rpki-client