Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer (raw, json)
Hash identifier: 0IxoLVH0H21chPjh0PDHeOrgrkrkOmicAiVOXsiz3H0=
Subject key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E18F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:07:53 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 59048
IP: 43.224.56.0/22
IP: 43.228.132.0 -- 43.228.139.255
IP: 43.242.60.0 -- 43.242.67.255
IP: 45.124.80.0/22
IP: 45.253.24.0/22
IP: 45.253.32.0/22
IP: 103.192.212.0/22
IP: 103.222.32.0/22
IP: 103.222.40.0/22
IP: 103.222.164.0/22
IP: 103.222.172.0/22
IP: 103.223.140.0/22
IP: 103.223.188.0/22
IP: 103.224.228.0/22
IP: 103.255.88.0/22
IP: 103.255.200.0/22
IP: 2401:a140::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57743 (0xe18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:07:53 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:a3:03:d2:c1:28:c7:2b:2c:0f:37:d3:82:
4c:70:35:fe:6b:55:c1:15:b0:a6:ee:33:c4:38:a9:
69:c4:a5:fa:f3:4a:ca:9d:73:2d:6f:af:c2:82:8b:
17:1e:5e:28:92:26:d4:40:fa:25:b6:4a:1c:69:d8:
c6:e6:3a:ac:76:b4:c2:3e:a8:f9:b8:10:f3:97:76:
48:9a:08:56:3e:15:6e:94:82:22:5c:e0:f2:7e:cd:
0b:32:aa:a5:12:ab:8c:5f:8c:2c:a2:58:12:ba:91:
d8:43:77:d7:cc:f4:51:c5:27:54:92:fe:d7:16:6a:
08:8a:28:fe:d2:6e:6e:45:0d:c1:86:31:de:15:f1:
d6:89:46:04:b5:09:e2:56:4a:74:f7:e0:26:ee:51:
b6:2d:79:fa:13:40:e5:4d:5d:06:af:45:d0:4d:ad:
d7:20:14:9c:3d:f4:2f:95:84:02:a5:ca:fa:7f:95:
43:b7:a9:82:91:f8:c9:9a:ff:85:a9:02:8e:14:5e:
cc:e2:d2:60:2b:1b:d6:08:96:d7:02:a3:93:dd:d4:
cf:66:12:20:3d:a6:2c:87:27:ea:d9:45:9b:36:4e:
12:ba:ae:87:99:e6:99:c5:07:5c:ea:ab:bd:7a:86:
cb:b5:d3:80:8c:b2:d4:74:e5:66:55:4d:3a:60:02:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59048
sbgp-ipAddrBlock: critical
IPv4:
43.224.56.0/22
43.228.132.0-43.228.139.255
43.242.60.0-43.242.67.255
45.124.80.0/22
45.253.24.0/22
45.253.32.0/22
103.192.212.0/22
103.222.32.0/22
103.222.40.0/22
103.222.164.0/22
103.222.172.0/22
103.223.140.0/22
103.223.188.0/22
103.224.228.0/22
103.255.88.0/22
103.255.200.0/22
IPv6:
2401:a140::/32
Signature Algorithm: sha256WithRSAEncryption
a7:05:ca:27:37:7d:8a:65:7f:ef:ec:aa:a2:77:a8:94:e0:60:
c2:dd:47:a8:16:8f:6d:2f:88:b6:7e:b8:9a:3e:13:8b:fd:14:
d1:56:fb:ea:d3:05:45:0f:81:08:d9:ef:bc:17:24:0b:a8:4f:
58:fd:f9:58:d2:62:ff:18:53:c8:b3:80:0f:63:36:97:eb:6f:
88:8b:a4:e3:89:d9:ba:a6:e3:34:3e:fe:62:9d:96:d0:76:da:
e7:33:83:34:b4:19:2e:20:a6:8f:33:75:60:03:8d:c5:44:29:
e4:5e:d0:17:69:62:2c:86:23:28:a5:3e:ba:93:e9:99:dd:18:
56:d0:b8:14:28:53:e4:49:0d:37:be:69:b8:aa:78:a4:f3:e8:
1d:92:e8:4b:ae:d2:e3:90:1a:4a:b0:70:89:04:da:26:0a:87:
c6:76:0e:a5:b8:c3:a2:5a:5a:c0:53:d4:8f:8a:89:2e:b5:27:
c9:b6:18:b3:92:e2:62:b6:a2:52:44:45:18:1e:36:04:7f:90:
8a:e1:5c:17:94:d4:8d:c5:26:7d:71:7e:eb:8c:65:8e:31:32:
9d:e1:26:ee:e4:54:c1:0b:11:4f:42:8d:07:48:c7:55:93:41:
16:ba:ca:ba:52:37:cc:a6:3b:ef:67:78:0d:a0:86:d0:c7:d0:
ef:af:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:26:38 2025 by rpki-client