Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer (raw, json)
Hash identifier: iu7yta6suEzwww3w1sZrl7wU4SglAiGG9kq6uDeNGe0=
Subject key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D894
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:13:19 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 45110
IP: 43.254.228.0 -- 43.254.243.255
IP: 43.254.248.0/22
IP: 43.255.0.0/22
IP: 45.125.76.0/22
IP: 45.125.84.0 -- 45.125.103.255
IP: 103.23.160.0/22
IP: 103.103.188.0/22
IP: 103.193.212.0 -- 103.193.239.255
IP: 103.200.220.0 -- 103.201.3.255
IP: 103.201.192.0 -- 103.201.219.255
IP: 103.229.216.0/21
IP: 103.229.228.0/22
IP: 103.229.236.0 -- 103.229.243.255
IP: 111.118.200.0/21
IP: 113.21.232.0/21
IP: 114.31.64.0/21
IP: 114.141.80.0/21
IP: 119.161.120.0/21
IP: 120.136.16.0/21
IP: 202.47.104.0/21
IP: 202.57.192.0/20
IP: 202.65.96.0/22
IP: 203.114.244.0/22
IP: 2401:f7c0::/32
IP: 2403:9b00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 10:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55444 (0xd894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:13:19 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:2c:cf:1d:e3:6b:44:6f:78:c6:23:43:04:
ad:eb:e0:99:00:0b:61:37:4e:83:2e:04:8a:e2:ea:
b5:47:fb:a8:1c:9d:a3:aa:a5:a7:3d:93:5a:a5:01:
ca:62:f2:94:2b:f9:ae:ee:4b:23:62:06:d3:54:b6:
6e:3b:46:3c:4f:98:88:d8:31:d6:a8:35:d2:5e:2e:
8f:42:43:9f:8f:fb:67:11:df:32:38:26:ac:28:ca:
55:e8:05:01:55:e7:a8:8d:b2:12:08:47:72:91:34:
a7:cf:91:1c:9f:60:1c:c6:d9:0a:28:6a:74:7d:9b:
81:b4:29:b0:4a:cc:b9:45:02:49:42:4b:11:68:4e:
db:39:2c:57:a4:c1:bb:86:ff:b5:93:d0:56:7e:23:
ba:b9:c8:14:e5:6e:1e:c7:a1:04:26:93:e7:eb:5f:
54:2c:bc:ae:c7:54:81:9a:0d:20:21:55:d1:2f:79:
39:7e:27:96:a8:73:c6:6a:d6:68:42:4c:36:d2:81:
41:21:48:a8:5f:dd:bc:fe:be:14:95:a8:33:a5:a4:
2f:1c:6a:43:b1:9f:54:75:d4:b0:d9:f8:d8:86:bb:
4c:56:5c:92:19:76:69:e6:48:96:1a:c9:8f:84:9d:
16:8b:6a:a1:72:d1:0b:f6:c1:f9:79:1c:2a:a7:f3:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45110
sbgp-ipAddrBlock: critical
IPv4:
43.254.228.0-43.254.243.255
43.254.248.0/22
43.255.0.0/22
45.125.76.0/22
45.125.84.0-45.125.103.255
103.23.160.0/22
103.103.188.0/22
103.193.212.0-103.193.239.255
103.200.220.0-103.201.3.255
103.201.192.0-103.201.219.255
103.229.216.0/21
103.229.228.0/22
103.229.236.0-103.229.243.255
111.118.200.0/21
113.21.232.0/21
114.31.64.0/21
114.141.80.0/21
119.161.120.0/21
120.136.16.0/21
202.47.104.0/21
202.57.192.0/20
202.65.96.0/22
203.114.244.0/22
IPv6:
2401:f7c0::/32
2403:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
05:9c:71:1c:73:71:9b:6c:09:78:16:67:e3:7a:6e:90:a4:af:
5c:dc:f5:d0:22:34:03:34:6c:52:15:91:64:a9:7a:f4:bb:7c:
b0:34:0e:b8:65:fe:ec:dd:c1:b6:48:d3:5a:2b:8c:35:b4:5d:
4c:66:74:8e:e2:84:36:cd:8b:21:51:8c:d4:71:4a:b5:0d:59:
c9:69:a1:98:55:f9:3f:2b:92:fa:de:6d:6a:b0:d0:7f:08:d2:
04:c0:08:c7:fb:e1:37:5b:ff:fa:a0:87:7f:a5:28:35:43:66:
e4:9d:f1:d3:b3:43:f9:03:be:ef:b8:0a:c7:88:72:9a:ce:fb:
c7:86:28:cb:6a:6c:a5:40:2c:ba:03:94:28:21:eb:f2:e6:20:
ca:3c:79:d9:ed:0d:3a:0c:74:2e:f2:a9:1f:42:8b:a6:ce:3e:
20:33:e1:30:e7:d4:d9:2c:9a:fa:a8:aa:aa:d7:eb:3d:47:bf:
a9:41:37:80:97:9b:52:7a:6c:43:8c:db:f7:dc:98:94:01:1c:
90:ac:91:3b:70:76:91:5e:00:dd:ae:f6:c4:8e:bc:95:54:3a:
52:d8:c4:a2:7b:62:7f:55:ea:03:f4:3f:d2:8d:69:2e:5f:0b:
75:7c:60:b4:67:85:94:ad:5e:43:25:55:e4:5e:3a:6b:ca:23:
51:ad:9f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:36:46 2025 by rpki-client