Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer
File: J7ObAY8a0GN-MHJ8KNkuIKY-71U.cer (raw, json)
Hash identifier: T6Lx6eD1LEKXDK2Yy5Gn0t0NwvA9mgs0b8M3eTuR7q4=
Subject key identifier: 27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E0D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:05:45 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 139128
IP: 43.241.248.0/22
IP: 103.37.176.0/22
IP: 103.156.28.0/23
IP: 115.182.0.0/16
IP: 120.54.0.0/16
IP: 2401:7d80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57561 (0xe0d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:05:45 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=27B39B018F1AD0637E30727C28D92E20A63EEF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:3b:19:dd:55:2c:63:c5:43:e2:5b:11:a1:
2f:04:9a:c8:a5:78:44:80:ed:2d:55:cc:d1:eb:7a:
c0:48:fe:e8:13:d6:5c:bb:78:ac:8c:68:a8:9d:cc:
e7:31:2d:59:d7:95:62:fe:09:11:f2:20:62:85:d1:
54:c6:5a:71:00:e9:e9:e5:fc:31:74:04:5a:03:6c:
a4:43:e6:47:fb:41:62:7d:33:60:ea:11:31:2e:dd:
04:40:45:44:87:cc:d5:8d:7c:aa:e9:51:24:a5:56:
b6:f5:25:fe:4d:1f:d5:be:fb:ce:11:86:80:7a:11:
6a:40:5c:d5:15:b2:eb:db:c8:24:a2:d3:56:5e:6a:
ab:66:52:45:2a:19:0a:a8:77:6d:7e:ba:3e:fb:cf:
5d:aa:0b:47:bc:77:9d:2c:c8:51:f2:b9:1c:4b:7c:
35:68:69:1e:ca:7d:64:41:5b:3c:30:5a:f4:3c:6d:
c6:79:27:ce:8e:1e:be:13:14:db:e2:21:a1:76:ff:
36:84:5f:3a:d6:10:c6:7d:4e:15:12:19:b1:ce:ee:
22:be:31:f3:ef:19:37:25:a9:e3:c2:b8:52:4a:de:
ef:ba:b9:d1:52:e0:14:05:20:d3:62:50:e8:44:e1:
79:cb:5d:45:d0:d4:ff:8b:fc:be:53:25:75:9e:92:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:9B:01:8F:1A:D0:63:7E:30:72:7C:28:D9:2E:20:A6:3E:EF:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/J7ObAY8a0GN-MHJ8KNkuIKY-71U.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139128
sbgp-ipAddrBlock: critical
IPv4:
43.241.248.0/22
103.37.176.0/22
103.156.28.0/23
115.182.0.0/16
120.54.0.0/16
IPv6:
2401:7d80::/32
Signature Algorithm: sha256WithRSAEncryption
98:a1:b9:71:cc:f8:67:ae:85:35:d1:b9:fa:24:ce:5e:16:df:
49:39:98:b1:18:e0:9d:3b:f1:29:85:58:2d:93:e2:8e:84:68:
09:13:2f:6c:b4:b7:d9:a7:39:8a:27:b9:0a:f2:25:b3:e1:93:
0b:3b:57:cc:6a:a0:63:45:70:dd:a4:41:ce:8d:79:3d:f5:41:
b7:bc:f3:60:19:88:6c:97:c6:fd:fc:75:96:1a:76:bf:bb:d0:
52:3b:4a:49:f1:3c:a1:90:25:28:ff:66:a6:12:f7:d3:53:a7:
1c:b7:ce:f5:f7:1c:3f:b2:5d:79:68:64:a2:2a:08:81:ba:8b:
23:f2:c7:b7:88:f8:72:57:fa:0d:42:a3:f0:30:cd:69:d2:2d:
e5:74:a6:2b:29:c9:27:e0:f1:de:d8:e5:bc:6a:5b:b8:87:a2:
0c:f2:61:95:24:ff:7b:95:57:7f:59:39:a7:6a:69:97:a7:9f:
97:40:c7:db:fe:e0:1e:67:d7:a2:c6:9c:e2:02:7a:14:72:dc:
bb:12:8e:2b:32:29:b6:1c:b6:43:c2:2d:b8:5c:72:e4:0c:14:
c2:b4:28:fd:c9:3e:72:c6:ef:75:82:26:bc:5a:64:54:ee:0d:
3c:77:34:0b:9c:1a:49:01:24:1c:6e:23:2f:e8:77:f0:79:ef:
00:10:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:37 2025 by rpki-client