Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
File: SUSbRsrs510cVYBhOU20ArbQCb4.cer (raw, json)
Hash identifier: psBhScGq4iQxeNY0RgnUznTBZcrIvhLGPUW/tVsupOo=
Subject key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D8CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:13:55 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 59033
AS: 63689
IP: 103.90.51.0/24
IP: 103.90.56.0/23
IP: 103.204.72.0/22
IP: 202.160.140.0/22
IP: 2402:1440::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 12 Aug 2025 08:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55502 (0xd8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:13:55 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=49449B46CAECE75D1C558061394DB402B6D009BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:1b:95:87:18:5f:b5:2b:f5:99:a8:36:9d:
2d:db:09:25:4a:27:ac:41:1f:77:5b:2f:01:34:35:
d7:d5:54:da:ad:d9:80:7e:1a:7b:1f:a6:a5:04:bd:
be:11:6b:a7:f9:2a:b7:44:b2:b2:25:a1:8d:48:d2:
65:f2:30:ba:dd:2d:be:76:1b:1e:c7:c9:8b:82:06:
d6:14:48:0f:66:4f:70:20:3c:d7:98:d8:bd:f7:76:
ab:fc:c1:77:be:c7:f4:02:c4:ec:15:5a:77:93:2c:
69:65:0d:c5:c1:d1:f2:29:b9:0d:59:3d:13:ee:48:
29:ea:28:80:a9:18:65:28:b0:c8:1f:80:52:76:0d:
94:38:41:a7:44:5c:5a:87:5c:ac:2e:3c:42:26:1a:
a2:6e:81:4a:27:de:95:08:ae:fa:54:79:a1:59:3e:
30:a8:f3:5e:1c:dc:02:81:da:70:d7:ec:14:2f:3c:
f1:b1:af:e9:00:dc:7d:b7:08:9f:f1:e2:c5:ae:de:
36:ff:cd:b7:28:bf:3b:3f:f0:a3:e8:fe:bd:3b:9d:
57:67:d0:02:08:03:26:bc:5e:92:12:56:eb:91:3f:
aa:c2:7d:d6:c0:2d:6c:65:66:e2:4c:18:50:48:76:
df:a2:84:eb:f8:fe:69:e2:85:64:e8:8a:44:1f:2d:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59033
63689
sbgp-ipAddrBlock: critical
IPv4:
103.90.51.0/24
103.90.56.0/23
103.204.72.0/22
202.160.140.0/22
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
73:69:37:a2:0b:8d:31:08:2f:13:3e:b0:64:ca:80:88:df:87:
c9:80:ef:45:96:a7:30:04:69:fa:61:83:42:02:36:8d:87:ee:
cb:ff:b3:b5:49:9d:97:98:0d:47:b3:40:08:24:37:ce:09:2d:
62:00:71:88:10:91:22:7e:4b:56:e2:01:a8:b9:d7:23:cf:c2:
37:a2:92:b3:74:77:af:89:93:90:b4:23:62:60:6e:92:6c:94:
77:fe:0c:cc:a8:bb:84:b8:c7:a1:58:de:af:84:89:34:5c:5c:
34:61:0e:d4:eb:71:fd:1b:ed:b2:83:8c:88:6b:ba:6a:fa:82:
fc:dd:42:8c:6a:45:f7:3b:d4:6c:c1:11:e4:dd:c2:0e:bc:b9:
9f:b7:99:87:fc:86:67:08:6f:89:c7:26:60:ce:be:25:ed:9e:
c2:7e:68:8b:50:d1:e6:64:41:03:45:df:14:d1:0f:4f:7e:f3:
2f:56:dd:0a:5b:b7:40:dd:02:33:81:77:b5:6b:fb:a7:a0:1a:
29:2a:cb:8a:9b:97:55:01:69:85:04:da:a5:37:04:90:31:40:
45:f0:da:3e:ba:c4:64:56:29:11:c6:81:d1:64:fb:48:38:aa:
ca:3b:59:b6:ea:74:19:ca:6f:fa:a7:6c:16:1e:ca:b0:8a:d9:
45:77:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 06:36:15 2025 by rpki-client