Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer
File: ORZcru1PFFhR0mI9_l6jpZ2sur0.cer (raw, json)
Hash identifier: o8dzpXYULFuyeJuFwzVGhxt2C2rO/olAwHz64vSlfgQ=
Subject key identifier: 39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:06:14 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 63570
IP: 36.255.128.0/22
IP: 103.209.136.0/22
IP: 2404:4dc0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57601 (0xe101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:06:14 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:60:51:a2:b7:0c:ed:6c:b0:ed:b9:c8:0f:
d1:ba:d3:b3:a4:b9:69:a5:0c:ab:45:b0:96:c1:8a:
3f:d7:c9:45:d6:7c:ae:7d:27:fe:9c:e8:a5:44:1a:
c1:d3:0a:98:45:a7:f3:5d:2e:ed:bf:7c:91:9b:24:
55:89:4a:10:37:cf:85:15:17:41:9c:21:1f:a9:f0:
0f:7c:e6:1d:ca:73:07:ed:cc:a5:86:c3:49:72:78:
76:36:c6:74:85:9a:ec:48:1e:d4:f1:4d:47:7c:6d:
35:63:bf:c4:c3:3f:1a:b8:e6:d1:ef:11:1d:31:c1:
7e:e2:2f:3d:65:4c:fa:e5:b2:d1:9d:8b:4b:0d:78:
36:76:dc:66:52:e1:5d:24:f4:67:45:17:e5:1a:e8:
47:4e:4b:cc:ee:05:15:90:04:a1:bd:16:cb:f3:29:
cf:d0:30:6d:c3:d4:3f:0b:f2:45:1f:ca:7c:27:f7:
f8:7c:54:9b:19:47:c4:a2:8a:c8:63:5f:b8:55:7a:
20:c6:5d:cc:b6:9b:23:b1:7d:72:b0:e3:87:0b:f4:
25:e7:15:10:4c:f1:f4:72:65:2e:33:99:df:e6:7d:
14:ec:7e:64:c8:22:5e:19:4d:11:f0:6c:67:c6:54:
8e:7e:df:36:2f:e2:f9:66:f5:92:83:4a:fa:27:82:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63570
sbgp-ipAddrBlock: critical
IPv4:
36.255.128.0/22
103.209.136.0/22
IPv6:
2404:4dc0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:f8:c1:0f:a4:39:d7:1e:d2:34:a0:25:22:bd:55:05:f7:a6:
e6:5a:99:1f:0d:be:43:11:56:51:82:b8:be:c0:a8:28:37:63:
b6:27:cf:b9:b2:cc:d0:cf:28:9a:5a:ab:ab:91:0a:d7:66:ba:
e7:7b:0b:34:6a:b7:2d:4d:52:b0:55:f9:ff:9b:c2:c1:b9:7e:
f2:c9:aa:96:52:87:67:72:15:4e:eb:c3:5d:51:6b:57:88:ed:
f9:d6:9c:ec:6d:c6:6f:72:a8:90:14:c9:a2:af:aa:f3:cd:f6:
b5:69:16:0a:d3:93:04:0b:1b:32:7f:55:26:3d:e5:6c:0c:2e:
78:ed:bf:ae:57:62:d0:3b:ef:5e:91:66:02:df:00:66:d0:12:
75:ad:2f:49:04:2c:2a:70:8e:ab:f8:cc:2e:de:2f:87:94:2a:
d1:b5:81:85:5c:28:ef:fb:f0:21:13:11:5b:75:bf:42:f9:a0:
f7:20:f1:32:27:9d:52:dd:a0:ed:f6:1f:93:e8:c5:b1:6e:f9:
d0:cf:ad:68:e8:ad:d7:01:eb:50:73:d0:f1:de:1e:0f:64:40:
ed:48:67:74:39:8e:fc:c0:cf:cf:30:8c:93:ae:35:15:d7:2a:
90:db:36:b9:56:fb:2a:9f:07:4e:11:88:78:a6:32:0c:d9:cb:
4c:91:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:28:11 2025 by rpki-client