$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer File: UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer (raw, json) Hash identifier: cqIm6BT5ucleEPOrcUtf7WeqaY+jnxLjvrPCzeb0uHo= Subject key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D007 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 17 Apr 2025 19:40:42 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: AS: 4751 IP: 103.90.192.0/22 IP: 203.175.192.0/18 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53255 (0xd007) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 17 19:40:42 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=51EAB28F238FD7407C2F663960489DD6D951DA74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:ef:3a:95:b8:85:c3:97:e6:16:8b:3d:8d: 7e:fa:e6:03:34:d8:98:3d:f7:7a:1f:23:59:cb:d0: d2:7e:97:61:d8:36:1b:a3:8e:42:79:7f:9d:07:20: 29:d9:ea:a1:23:16:72:91:4e:04:00:5e:40:25:88: e9:2d:b9:38:76:61:ed:b0:87:f8:5a:80:e2:5b:f3: 28:f1:f5:af:2b:ff:d5:74:97:ad:2a:2c:40:ab:d6: d5:5a:b1:d7:2c:bd:84:f3:d4:a1:ed:a7:18:28:8b: 9e:84:69:42:4f:e0:3f:72:6f:97:0c:ed:07:8c:2b: bf:19:3e:2d:5a:01:55:30:a1:44:a2:72:25:00:a0: 74:42:68:35:66:ee:f1:00:e6:4e:0c:a6:9d:b9:b9: 40:71:37:4d:fa:3c:21:6e:37:62:56:62:86:b2:69: b4:eb:20:f9:aa:0f:91:8d:0e:58:aa:be:e1:d0:86: a6:17:3b:e0:c6:aa:29:87:41:1d:f0:04:07:ed:83: 82:01:d4:ae:7a:a6:ee:57:c7:93:fd:7f:6e:1d:1f: 4b:95:59:4c:33:d3:da:bf:ae:06:83:ac:fc:e3:46: 0e:7c:b6:f5:77:e4:8d:cf:4e:b6:71:58:31:a2:11: 45:ed:12:f5:04:58:b6:f9:6a:b6:de:f7:8b:2a:ea: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 4751 sbgp-ipAddrBlock: critical IPv4: 103.90.192.0/22 203.175.192.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:4b:4b:d4:97:4b:ea:19:f5:a9:05:f9:75:cc:41:29:9e:c9: ee:df:fe:8c:95:ac:0c:08:62:c9:c4:87:b8:52:84:e2:e3:ad: 3b:4e:f1:dc:83:b8:24:5e:16:1c:bc:f5:99:e0:d7:40:c8:44: 2c:c4:db:43:d7:8c:35:61:e1:e4:75:41:b4:99:ec:e2:31:32: b7:ca:50:13:ec:0e:79:99:7d:35:b2:d8:64:50:81:f2:02:94: 3e:2d:e6:0f:57:0c:db:8d:3c:c8:bf:2b:cf:74:c4:e4:5a:a0: 23:bc:a1:7c:88:69:05:f2:a6:3e:57:b0:5d:f6:f8:e5:a1:95: b0:f8:82:bd:6d:66:71:2f:db:6a:00:af:d9:56:3d:5f:43:fe: 0d:5e:b1:b1:c5:ae:d0:ea:c4:74:2d:22:cb:9d:ae:28:7f:8c: 8a:db:53:7c:57:94:9c:83:2c:3c:f9:ae:df:a1:f9:7d:8a:f3: 06:d8:8d:20:c1:a5:a1:51:fb:da:26:85:83:f7:1b:98:3c:68: d2:8c:74:c4:5f:b9:84:8e:2d:58:8d:a9:1b:e8:f3:49:49:dc: bd:dc:f3:a7:58:71:2f:08:36:87:cd:b3:3d:10:f9:7e:03:8d: 52:a7:77:b6:15:40:f5:97:57:94:cc:cb:d1:6a:c8:9b:8a:c8: 2b:0e:32:da -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDANAHMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MTcxOTQwNDJaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDUxRUFCMjhGMjM4RkQ3NDA3QzJGNjYzOTYwNDg5REQ2RDk1MURB NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWO86lbiFw5fmFos9 jX765gM02Jg993ofI1nL0NJ+l2HYNhujjkJ5f50HICnZ6qEjFnKRTgQAXkAliOkt uTh2Ye2wh/hagOJb8yjx9a8r/9V0l60qLECr1tVasdcsvYTz1KHtpxgoi56EaUJP 4D9yb5cM7QeMK78ZPi1aAVUwoUSiciUAoHRCaDVm7vEA5k4Mpp25uUBxN036PCFu N2JWYoayabTrIPmqD5GNDliqvuHQhqYXO+DGqimHQR3wBAftg4IB1K56pu5Xx5P9 f24dH0uVWUwz09q/rgaDrPzjRg58tvV35I3PTrZxWDGiEUXtEvUEWLb5arbe94sq 6iVjAgMBAAGjggJ2MIICcjAdBgNVHQ4EFgQUUeqyjyOP10B8L2Y5YEid1tlR2nQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0 MDMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjQwMy9VZXF5anlPUDEwQjhMMlk1WUVpZDF0bFIyblEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhKPMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1rAAwQGy6/AMA0GCSqGSIb3DQEBCwUAA4IBAQBLS0vUl0vqGfWp Bfl1zEEpnsnu3/6MlawMCGLJxIe4UoTi4607TvHcg7gkXhYcvPWZ4NdAyEQsxNtD 14w1YeHkdUG0meziMTK3ylAT7A55mX01sthkUIHyApQ+LeYPVwzbjTzIvyvPdMTk WqAjvKF8iGkF8qY+V7Bd9vjloZWw+IK9bWZxL9tqAK/ZVj1fQ/4NXrGxxa7Q6sR0 LSLLna4of4yK21N8V5Scgyw8+a7fofl9ivMG2I0gwaWhUfvaJoWD9xuYPGjSjHTE X7mEji1Yjakb6PNJSdy93POnWHEvCDaHzbM9EPl+A41Sp3e2FUD1l1eUzMvRasib isgrDjLa -----END CERTIFICATE-----Generated at Sat Apr 26 08:21:28 2025 by rpki-client