Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer (raw, json)
Hash identifier: fr0eqNKfpvp93eVgJ+Kbch6XWdINfD7QO7VvgGq2lxU=
Subject key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D9D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:17:29 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 151291
IP: 49.128.4.0/22
IP: 103.31.236.0/22
IP: 103.244.116.0/22
IP: 223.29.252.0/22
IP: 2403:6380::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55762 (0xd9d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:17:29 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:82:1d:19:33:ce:c8:2a:a9:38:6a:9b:ee:
e8:1b:87:35:fe:af:2b:87:59:0f:4a:ba:18:16:b3:
ec:eb:3d:62:2f:0e:43:9e:5f:84:3c:c6:51:14:7e:
cc:9a:2b:4a:87:b3:74:46:50:27:f7:4e:c1:8c:c0:
2f:9a:86:32:c5:bc:c8:82:bb:c0:c6:49:f5:62:b1:
86:a0:37:29:34:dd:32:44:c2:ff:f2:ce:c2:a2:19:
fc:90:8e:6c:e2:17:01:4e:2e:32:42:0e:b4:ad:ba:
a6:50:df:5e:b2:bb:54:0a:7a:ae:aa:aa:2e:ed:6c:
17:cc:f8:d0:d6:06:49:84:2c:8d:0a:1c:9f:14:63:
a0:fd:54:f3:b6:d4:d0:06:70:56:bb:17:9c:1a:06:
42:a0:60:77:31:9c:6e:d1:49:69:e7:f7:ba:c4:2a:
70:fd:a3:90:41:37:27:f5:a6:2c:f8:95:bd:bd:19:
1f:f8:1c:ba:73:a1:fb:37:0c:29:64:5a:c5:05:33:
43:5c:40:c6:be:f9:5d:62:50:82:f1:03:71:68:d3:
e9:db:c1:81:ac:6b:75:ac:b0:b8:e0:95:fb:88:56:
bf:b0:82:38:f9:85:d1:c7:13:bb:03:8b:62:f3:ec:
45:98:ce:fd:14:54:89:12:69:32:bd:f5:60:7b:5b:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151291
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
103.31.236.0/22
103.244.116.0/22
223.29.252.0/22
IPv6:
2403:6380::/32
Signature Algorithm: sha256WithRSAEncryption
3e:81:2e:42:2f:56:fa:b6:0c:d7:8a:b3:7e:48:52:00:bf:34:
b0:22:5e:97:f0:bd:84:e6:6a:03:14:17:2c:08:06:18:1d:b1:
ba:2c:6e:81:29:d8:4c:cd:a2:84:ae:73:8f:73:e6:d9:98:56:
e7:2d:12:f0:fc:07:bd:16:4b:a2:95:a5:a7:8a:8e:67:08:b8:
76:6a:0d:d0:b8:30:4b:b1:83:18:de:bc:59:25:04:e0:c5:b6:
4e:08:f1:4e:b9:76:e9:b7:e1:d0:75:10:63:6f:34:cd:77:bd:
84:43:0d:05:cc:fa:37:25:d8:76:3a:cd:eb:fa:bd:f1:ca:bf:
6f:9f:5f:6e:8f:bf:2d:69:0c:4d:b7:d8:63:50:f5:a0:8f:91:
3e:21:db:97:ce:b7:5f:7b:a7:0f:a8:53:b8:29:97:94:26:e2:
d3:6c:88:a4:e6:0a:8d:02:ea:ae:97:df:8f:ca:2b:ed:e0:76:
2b:04:76:87:97:cc:cd:ab:c3:68:29:e0:44:c6:ae:75:f5:8a:
f2:a8:65:17:8d:3d:65:aa:bd:64:35:d9:dc:3b:98:24:95:85:
e8:d0:8b:80:09:23:d6:fc:96:98:fd:90:94:f4:4f:22:c0:94:
7e:03:b8:d8:cc:74:29:68:24:89:ff:e4:e7:76:99:59:9f:36:
b0:1d:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:10:35 2025 by rpki-client