Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer
File: JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer (raw, json)
Hash identifier: AZ/mo8Lz8H08KRSRI9wfwxPbhIlojqIKZHle1EiC5uE=
Subject key identifier: 24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:10:00 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 58840
IP: 110.236.0.0/15
IP: 113.18.0.0/16
IP: 182.157.0.0/16
IP: 2407:c400::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 09:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57905 (0xe231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:10:00 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=240ED9E7AD0A83829D8F1A990C9FF94D6A106ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:5e:00:a0:19:90:67:88:03:7f:49:fd:df:
90:57:76:f6:f5:a5:65:28:50:a4:45:96:c7:c6:70:
7c:3a:02:37:34:e7:27:53:97:c1:df:57:e4:ca:7f:
1c:e1:75:11:4b:5d:3c:46:04:86:72:38:f3:7e:d9:
16:20:12:ab:a5:9d:3e:1a:44:cf:10:ee:d2:d8:64:
3a:bb:7a:83:61:ad:b9:31:fc:f1:ea:74:71:fc:bb:
ac:ef:c9:7b:21:c2:2f:7e:00:04:0d:55:ea:a9:40:
bd:a0:06:e1:3e:a4:db:f1:9c:5c:4b:a3:c7:8b:96:
90:69:17:8a:af:53:d0:0c:73:ee:32:ea:f6:d3:cf:
30:92:97:de:d7:cd:45:88:fa:e6:fc:cc:bb:28:5b:
fc:31:8f:6e:b6:9c:f4:a7:42:8e:4d:6f:fd:f3:dc:
c6:df:3d:bd:35:7b:ff:00:93:76:06:4d:34:38:d5:
b7:28:71:80:c3:15:89:7f:b8:ae:7b:7d:f3:4f:76:
14:8f:20:de:17:e6:0a:6b:5f:72:96:e2:cf:16:2f:
c8:65:7c:2e:f7:77:cb:ad:81:5b:53:0f:6d:bc:16:
b8:a6:0f:2c:27:6a:22:10:22:02:c3:c0:f6:1a:39:
96:f7:1e:6b:ee:6b:38:c4:89:96:67:5c:be:6e:ea:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58840
sbgp-ipAddrBlock: critical
IPv4:
110.236.0.0/15
113.18.0.0/16
182.157.0.0/16
IPv6:
2407:c400::/32
Signature Algorithm: sha256WithRSAEncryption
14:94:38:fa:41:63:6c:4b:2d:fa:28:02:e6:2f:7d:85:ac:85:
fd:d3:f1:e1:5c:4c:ce:4d:b4:ff:d9:09:68:05:e0:dc:dd:34:
8f:75:aa:da:ac:da:e5:11:66:26:60:2b:8e:71:eb:9a:16:37:
33:f6:4c:e7:89:64:0b:cc:cb:3d:b5:3e:9d:dc:bd:a0:73:ba:
dc:c2:c1:2a:00:fd:81:03:2d:7f:fb:89:c2:68:f6:40:1c:9a:
f0:93:97:1e:3b:51:ba:1a:a5:df:9a:99:84:c3:64:b2:43:ea:
c7:6e:d0:9f:74:13:0e:62:17:c9:a6:08:a3:7d:d3:d6:94:14:
d3:2a:29:5b:ac:bc:91:65:a7:2b:6b:f5:d6:7b:a7:14:a8:4c:
af:ae:04:47:68:55:c7:c8:62:ed:1f:d0:c9:30:d2:22:bd:6c:
22:bd:c2:39:33:28:30:ed:e3:79:8b:60:a3:71:e9:0a:82:94:
f4:36:44:00:24:4b:38:47:e8:24:c4:3e:a7:4a:05:7e:55:ac:
97:a4:62:e5:ef:39:f9:72:16:d2:de:c1:18:fa:31:84:4e:c7:
38:c8:9c:65:d0:3a:5b:f5:82:77:68:1b:0f:6b:64:02:ee:1d:
57:97:77:93:6b:a3:07:83:cb:6a:3b:de:6a:2e:af:ff:12:41:
09:8f:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:24:39 2025 by rpki-client