Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer (raw, json)
Hash identifier: mpK1UERLmiHsw4AYq+S7/8BPZZiOpHMnUsL87viNcLw=
Subject key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D8FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:14:26 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 59048
IP: 43.224.56.0/22
IP: 43.228.132.0 -- 43.228.139.255
IP: 43.242.60.0 -- 43.242.67.255
IP: 45.124.80.0/22
IP: 45.253.24.0/22
IP: 45.253.32.0/22
IP: 103.192.212.0/22
IP: 103.222.32.0/22
IP: 103.222.40.0/22
IP: 103.222.164.0/22
IP: 103.222.172.0/22
IP: 103.223.140.0/22
IP: 103.223.188.0/22
IP: 103.224.228.0/22
IP: 103.255.88.0/22
IP: 103.255.200.0/22
IP: 2401:a140::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55546 (0xd8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:14:26 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:a3:03:d2:c1:28:c7:2b:2c:0f:37:d3:82:
4c:70:35:fe:6b:55:c1:15:b0:a6:ee:33:c4:38:a9:
69:c4:a5:fa:f3:4a:ca:9d:73:2d:6f:af:c2:82:8b:
17:1e:5e:28:92:26:d4:40:fa:25:b6:4a:1c:69:d8:
c6:e6:3a:ac:76:b4:c2:3e:a8:f9:b8:10:f3:97:76:
48:9a:08:56:3e:15:6e:94:82:22:5c:e0:f2:7e:cd:
0b:32:aa:a5:12:ab:8c:5f:8c:2c:a2:58:12:ba:91:
d8:43:77:d7:cc:f4:51:c5:27:54:92:fe:d7:16:6a:
08:8a:28:fe:d2:6e:6e:45:0d:c1:86:31:de:15:f1:
d6:89:46:04:b5:09:e2:56:4a:74:f7:e0:26:ee:51:
b6:2d:79:fa:13:40:e5:4d:5d:06:af:45:d0:4d:ad:
d7:20:14:9c:3d:f4:2f:95:84:02:a5:ca:fa:7f:95:
43:b7:a9:82:91:f8:c9:9a:ff:85:a9:02:8e:14:5e:
cc:e2:d2:60:2b:1b:d6:08:96:d7:02:a3:93:dd:d4:
cf:66:12:20:3d:a6:2c:87:27:ea:d9:45:9b:36:4e:
12:ba:ae:87:99:e6:99:c5:07:5c:ea:ab:bd:7a:86:
cb:b5:d3:80:8c:b2:d4:74:e5:66:55:4d:3a:60:02:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59048
sbgp-ipAddrBlock: critical
IPv4:
43.224.56.0/22
43.228.132.0-43.228.139.255
43.242.60.0-43.242.67.255
45.124.80.0/22
45.253.24.0/22
45.253.32.0/22
103.192.212.0/22
103.222.32.0/22
103.222.40.0/22
103.222.164.0/22
103.222.172.0/22
103.223.140.0/22
103.223.188.0/22
103.224.228.0/22
103.255.88.0/22
103.255.200.0/22
IPv6:
2401:a140::/32
Signature Algorithm: sha256WithRSAEncryption
55:fd:ba:43:f3:90:f8:3e:97:8a:7c:61:9c:04:49:69:f0:56:
8f:7f:1b:92:63:f0:f4:61:4c:1d:5a:e9:81:46:ed:ea:db:e6:
18:3c:13:35:a2:d1:9f:cd:ee:7a:98:c6:a1:00:34:21:f6:4f:
e0:10:50:d2:e9:28:46:7a:e2:7b:ce:6d:dc:f6:cc:8f:cd:fe:
41:fd:fb:a8:68:06:f3:64:80:9b:92:6d:c5:f3:37:70:c9:2b:
da:59:a5:0f:91:75:89:86:38:b4:4a:b2:b0:81:f8:9f:60:d5:
3f:53:e9:56:a8:0d:f6:ec:3f:77:ff:74:87:3a:af:21:d7:96:
2f:7a:f6:74:69:b7:c6:50:2e:a3:c6:0f:30:1f:d6:06:bb:7f:
fa:05:9e:e2:7b:c8:90:16:43:0e:d5:39:cb:c2:30:f0:6a:40:
73:ca:a0:32:ec:01:36:e1:13:57:44:aa:a1:e0:98:4b:8f:eb:
40:d7:6e:b5:a6:a8:f4:9c:79:2b:e1:cb:c9:16:42:59:b4:de:
0f:82:73:5c:e4:be:0e:34:ed:7a:bb:00:bf:1a:41:06:2c:7d:
80:75:5c:c9:97:04:64:7f:6f:ab:40:7d:59:d4:b7:8d:68:7e:
c2:7c:f7:b0:93:fd:f3:7d:83:10:6c:4c:c7:a1:fe:71:2a:c2:
c2:e4:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:59:20 2025 by rpki-client