Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
File:                     SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer (raw, json)
Hash identifier:          Vu9FiTFsWTfE9TKeZEm5r2Xmbtstz4tENIJTVSw1euk=
Subject key identifier:   49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       D9DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sun 03 Aug 2025 09:17:33 +0000
Certificate not after:    Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources:    AS: 137794
                          IP: 103.138.134.0/23
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 07:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55770 (0xd9da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Aug  3 09:17:33 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:c7:2c:71:18:21:d9:cd:64:88:56:7a:58:
                    a4:3b:f4:71:5b:87:47:d5:89:62:d7:29:3b:b9:61:
                    89:6e:4a:9e:20:4e:21:cd:c3:4c:e7:e6:2f:aa:ed:
                    b1:8f:a1:c8:30:45:4f:50:16:ba:2c:ed:d2:8f:7f:
                    12:b1:4d:11:49:78:42:b9:65:95:72:c7:44:33:30:
                    a2:e7:ee:cc:d2:f3:aa:b1:f6:db:1c:da:19:9e:98:
                    c9:66:d8:0d:e3:1b:bb:cf:71:7b:f8:50:54:10:3e:
                    6b:18:7b:e7:2d:e3:06:cf:06:e1:b8:c8:0b:85:ce:
                    d0:b9:42:60:d6:2e:08:e0:6d:1e:23:fe:2f:1c:e8:
                    53:87:2d:96:21:e5:8c:d9:3c:ce:48:28:bf:d3:f7:
                    25:f4:70:aa:ea:bd:b0:db:2f:74:23:dd:a5:d2:8d:
                    45:8d:00:b6:ce:ab:e4:3c:66:49:11:c5:35:3b:5e:
                    62:77:61:62:0d:6b:3f:79:aa:3b:18:0e:1e:04:c6:
                    c1:7d:8d:05:88:25:64:f4:98:eb:1f:ae:2e:63:f3:
                    84:1a:c3:58:f9:76:f8:04:b0:f8:43:47:45:8d:56:
                    bd:e6:cf:bf:ec:35:0e:b1:73:c1:72:8f:2b:be:7f:
                    01:ec:2a:25:ea:2b:47:e3:29:65:2d:a5:50:dd:16:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137794

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:94:f3:0a:9e:3a:c0:a3:ef:2a:49:4c:91:24:d4:f4:b2:
         5b:8f:9a:c4:1d:fb:f4:4a:af:09:3e:66:7c:98:47:46:0b:bc:
         16:ea:77:7c:b8:00:c6:65:e8:e6:14:3c:47:31:b2:9f:dc:a6:
         bc:f6:56:d7:ad:bc:ef:8d:b3:38:8e:f4:b7:c6:eb:da:e7:34:
         27:dd:10:1b:c5:33:a3:6c:4c:09:34:8d:c2:11:56:98:12:90:
         cd:39:7f:da:ed:4c:12:5e:18:f6:60:50:c3:48:c5:ad:81:07:
         3a:71:2b:26:ec:5a:a2:a8:60:0c:f3:97:f2:a7:27:44:23:1d:
         99:28:bf:19:13:ea:e3:aa:90:a3:3b:94:bb:64:c6:62:5a:e2:
         bd:fe:e8:d6:2f:70:24:c1:80:11:cf:fb:b6:fb:78:67:4d:f6:
         7a:19:ed:24:c1:3e:ad:21:14:e2:4e:3a:51:f0:26:0e:78:7d:
         83:67:30:2d:20:97:0a:d4:ee:a6:7f:0e:11:18:02:7a:d4:75:
         74:ea:54:bc:64:68:92:67:1c:90:3c:ef:f4:eb:29:73:af:dc:
         d1:ab:12:59:c9:e0:4d:b6:e0:5d:81:e8:f4:cc:d3:fe:39:c5:
         e1:6c:0d:fa:28:38:07:43:68:21:a5:b8:bb:07:90:0f:05:f9:
         85:40:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:18 2025 by rpki-client