Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HsPdz0dl7wGHxupiZgyDpkGedEQ.cer
File: HsPdz0dl7wGHxupiZgyDpkGedEQ.cer (raw, json)
Hash identifier: e7l/h0l+R3TCtRXjbxLlaAWbJBcJAZ3KAmBRGJkIPgk=
Subject key identifier: 1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D81A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:12:03 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 9395
IP: 43.247.208.0/22
IP: 49.221.0.0/16
IP: 103.23.56.0/22
IP: 103.24.184.0/22
IP: 115.172.0.0/19
IP: 115.172.96.0 -- 115.172.191.255
IP: 124.14.64.0 -- 124.14.191.255
IP: 124.14.224.0/19
IP: 124.15.128.0/18
IP: 124.254.0.0/18
IP: 175.188.128.0/17
IP: 175.190.0.0/17
IP: 180.88.0.0 -- 180.89.127.255
IP: 180.91.128.0/17
IP: 211.161.0.0 -- 211.161.59.255
IP: 211.161.64.0/19
IP: 211.161.112.0 -- 211.161.191.255
IP: 211.162.0.0/18
IP: 211.162.80.0 -- 211.162.111.255
IP: 211.162.128.0/18
IP: 211.162.196.0 -- 211.162.255.255
IP: 220.112.128.0/18
IP: 220.112.208.0/20
IP: 220.113.0.0 -- 220.113.149.255
IP: 220.113.168.0 -- 220.113.223.255
IP: 220.115.0.0/19
IP: 220.115.64.0 -- 220.115.247.255
IP: 223.210.0.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55322 (0xd81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:12:03 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=1EC3DDCF4765EF0187C6EA62660C83A6419E7444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:8b:b4:3c:44:1f:6c:c8:6f:11:f7:3f:5a:
e8:98:b2:2f:95:61:3d:3a:38:0b:56:8b:2e:93:a2:
bf:75:ab:08:35:ec:c0:51:e3:7d:6a:43:d3:b6:49:
d1:df:5b:cd:e1:61:6f:8c:46:6c:5e:4e:74:81:ce:
15:35:d8:c9:77:5d:e1:48:10:f4:71:59:4d:3d:5d:
6d:59:10:a4:97:11:79:8a:59:3f:c0:cc:f7:0a:f3:
dc:6d:3c:6c:6f:bc:18:ba:c3:69:c1:a0:0a:55:eb:
ce:bb:bf:fe:ca:7c:2d:80:0f:60:ce:a0:be:1f:85:
85:6e:21:fb:fd:ce:18:46:1b:f6:13:cb:b2:5f:00:
7e:d4:c7:71:25:16:8d:c6:12:c9:b0:af:d9:6a:5e:
63:d1:80:31:94:ab:a7:0b:5a:b8:17:81:a1:97:9d:
87:fb:5b:ac:45:19:d2:9c:93:82:94:f0:a3:7a:33:
ac:9f:88:b9:da:bb:f8:74:92:4e:50:dc:29:aa:aa:
3b:37:dc:2f:14:7e:a2:25:1b:fd:5b:4d:63:39:62:
b2:12:a9:21:12:b3:60:ba:0a:b5:0b:3c:6b:82:3d:
89:6a:3f:48:e6:b8:e6:01:47:a9:15:b1:16:e6:38:
36:c0:fd:8e:db:db:95:fe:6e:93:5a:4d:ce:02:2d:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9395
sbgp-ipAddrBlock: critical
IPv4:
43.247.208.0/22
49.221.0.0/16
103.23.56.0/22
103.24.184.0/22
115.172.0.0/19
115.172.96.0-115.172.191.255
124.14.64.0-124.14.191.255
124.14.224.0/19
124.15.128.0/18
124.254.0.0/18
175.188.128.0/17
175.190.0.0/17
180.88.0.0-180.89.127.255
180.91.128.0/17
211.161.0.0-211.161.59.255
211.161.64.0/19
211.161.112.0-211.161.191.255
211.162.0.0/18
211.162.80.0-211.162.111.255
211.162.128.0/18
211.162.196.0-211.162.255.255
220.112.128.0/18
220.112.208.0/20
220.113.0.0-220.113.149.255
220.113.168.0-220.113.223.255
220.115.0.0/19
220.115.64.0-220.115.247.255
223.210.0.0/17
Signature Algorithm: sha256WithRSAEncryption
43:25:14:0e:34:91:6b:a1:f7:a6:34:5c:21:7a:14:ed:81:78:
53:81:50:8f:9e:2d:2a:e0:fe:cb:8a:e8:60:33:46:28:c6:1d:
66:1a:b7:cc:75:a1:9d:7e:ae:70:9a:23:d1:c0:8f:14:cd:05:
c5:1d:2f:08:67:87:09:fb:ea:89:1e:ea:21:51:c5:7b:43:00:
30:20:46:d4:64:40:9b:3a:9f:38:3e:55:5f:ea:a2:d0:d1:ca:
f6:f1:45:57:66:e3:85:9c:e5:26:1a:05:b8:cf:17:2e:2d:29:
a4:bb:5f:28:aa:65:c2:55:09:72:dd:13:90:0a:64:8d:bf:af:
76:ca:68:6a:07:bb:86:15:30:9f:f4:13:bd:6e:8c:d1:a3:6e:
07:67:2b:98:bd:b6:cd:00:7c:d6:1f:ea:f1:53:e6:2a:ae:a7:
e0:d4:13:34:a5:88:ba:23:41:5d:c1:70:14:3e:fa:58:c6:54:
c6:e2:2d:52:c1:85:67:f0:a5:f5:02:2a:35:6b:45:14:0d:3f:
31:47:e1:65:02:ca:be:86:f4:ef:3d:0e:25:c4:4f:fa:80:5b:
e4:69:bc:b3:04:fc:2d:7d:77:a4:f2:1e:30:e8:48:75:a8:74:
99:43:19:ad:fb:f0:6b:f2:fd:c7:5f:0e:55:76:c1:7d:bb:8a:
ea:2f:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:32:18 2025 by rpki-client