Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QEPgLf1LxL37CBKB3eUEVdOAWys.cer
File: QEPgLf1LxL37CBKB3eUEVdOAWys.cer (raw, json)
Hash identifier: gx+FB8Vlis/QVj4ju9bVCX2RoehADf4f382jzPQzEdM=
Subject key identifier: 40:43:E0:2D:FD:4B:C4:BD:FB:08:12:81:DD:E5:04:55:D3:80:5B:2B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E40E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 28 Oct 2025 05:53:28 +0000
Certificate not after: Tue 27 Oct 2026 09:37:25 +0000
Subordinate resources: AS: 24134
AS: 38346
AS: 55998
IP: 43.242.8.0 -- 43.242.23.255
IP: 43.254.84.0/22
IP: 43.254.92.0/22
IP: 103.30.236.0/22
IP: 103.37.208.0/20
IP: 103.235.200.0/22
IP: 103.254.176.0/22
IP: 117.121.32.0/19
IP: 117.121.128.0/18
IP: 119.80.32.0/20
IP: 122.102.64.0/20
IP: 163.53.36.0/22
IP: 202.43.144.0/20
IP: 202.152.176.0/20
IP: 210.73.192.0/21
IP: 211.157.0.0/19
IP: 2403:e300::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 09:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58382 (0xe40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 28 05:53:28 2025 GMT
Not After : Oct 27 09:37:25 2026 GMT
Subject: CN=4043E02DFD4BC4BDFB081281DDE50455D3805B2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:ea:00:4c:8e:d7:8a:eb:d9:75:30:c1:9e:
4d:24:aa:be:55:cf:37:d8:0d:dc:80:df:5a:c7:08:
db:6c:9a:7f:79:7a:5b:bd:65:09:2a:9f:31:5c:52:
5e:99:58:f2:18:7e:45:13:42:30:51:37:df:ae:43:
f3:dc:6c:a1:29:ae:57:60:94:8a:9c:af:0b:8b:b7:
0e:71:51:2b:56:07:7b:e0:24:19:92:42:1e:a6:8d:
3d:0f:7c:4c:df:72:c3:eb:a9:fb:bc:cd:c4:5a:68:
b2:fc:b5:7e:d4:96:03:cf:1b:32:cc:ae:83:e3:e6:
4e:0c:dc:46:f9:7f:c6:a4:a3:90:3a:70:c6:9e:56:
eb:30:5d:70:c4:d9:4d:36:1c:5f:cf:fd:ef:04:00:
0d:e1:04:7e:95:e3:56:1a:ac:97:26:0b:82:3f:ad:
40:00:5a:bc:09:4a:61:84:df:42:c3:a0:fe:a9:65:
b5:f6:a4:76:a8:99:7f:85:a1:21:0a:76:f4:f3:f9:
77:c7:e7:8d:d2:8f:2e:84:07:76:7e:7d:03:40:7c:
dc:55:b0:12:9d:72:3b:fa:36:a0:ba:28:4d:46:fd:
c2:05:1c:3b:ba:8f:4a:b8:ba:6a:02:c6:e9:e5:fc:
30:b7:14:92:32:18:26:17:82:50:32:a3:9b:2d:90:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:E0:2D:FD:4B:C4:BD:FB:08:12:81:DD:E5:04:55:D3:80:5B:2B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3404/QEPgLf1LxL37CBKB3eUEVdOAWys.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24134
38346
55998
sbgp-ipAddrBlock: critical
IPv4:
43.242.8.0-43.242.23.255
43.254.84.0/22
43.254.92.0/22
103.30.236.0/22
103.37.208.0/20
103.235.200.0/22
103.254.176.0/22
117.121.32.0/19
117.121.128.0/18
119.80.32.0/20
122.102.64.0/20
163.53.36.0/22
202.43.144.0/20
202.152.176.0/20
210.73.192.0/21
211.157.0.0/19
IPv6:
2403:e300::/32
Signature Algorithm: sha256WithRSAEncryption
8c:c9:f7:39:f8:11:6d:1b:24:44:fe:77:b6:c3:7e:ac:4b:0c:
d2:8b:ef:e1:92:ee:41:f7:2a:d1:37:cc:17:64:64:21:b7:fa:
a9:1b:58:67:3d:7d:4d:18:a9:71:d5:f4:fb:88:ff:30:65:1e:
ca:ba:71:17:1b:d2:ad:4e:ef:00:fd:0f:00:3b:a8:a8:d2:d2:
17:0a:b2:df:78:70:b4:58:2a:34:a7:e5:d6:c2:9c:b9:94:a9:
1e:5c:03:52:8b:ec:48:4e:6b:47:c6:0d:2c:59:71:df:e7:18:
0d:84:ee:1b:71:31:98:83:04:0e:da:41:40:7a:87:99:3d:fb:
1b:ff:24:9d:b4:e1:44:bc:16:0d:26:d5:8d:e6:31:69:40:a6:
11:2a:f8:ed:92:8b:08:9d:b3:ea:16:76:be:f6:aa:45:a1:81:
85:c9:6d:37:01:e4:3d:38:2d:0f:ab:66:ba:3a:50:1f:4e:a4:
32:b2:66:fd:95:b3:93:00:a7:60:4f:80:90:4e:96:1b:50:5a:
ea:0e:9c:18:d8:c8:a7:73:af:e8:f6:6f:30:3c:93:45:6c:f6:
d5:75:cd:48:4a:dd:e3:4b:78:87:9f:3c:6f:f3:28:be:92:59:
dd:a4:1c:ca:18:3a:8f:2f:c4:db:dd:f4:e0:88:93:f9:32:7c:
4c:8f:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:17:26 2025 by rpki-client