Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer
File: _uDIJ84pYgIAbrTtK2WV3ODpfHs.cer (raw, json)
Hash identifier: Lq4klUH+QTnR51SiWBw+mbUk1oeJ4pLzuCl6/ngtkTk=
Subject key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E065
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:04:28 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 59015
IP: 43.224.240.0/22
IP: 43.247.100.0/22
IP: 103.43.240.0/22
IP: 103.234.128.0/22
IP: 119.38.224.0/19
IP: 2403:3d80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57445 (0xe065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:04:28 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:9b:44:4f:c4:aa:09:e8:c6:2c:b9:7c:39:
52:15:4a:86:2b:11:a5:f6:10:00:ff:16:ae:be:11:
8c:59:8e:d1:99:e6:c6:9c:27:9b:c0:23:51:d7:e4:
c5:d8:db:ac:21:93:4a:c7:df:d2:91:cc:4d:2b:48:
f9:6c:89:db:bc:39:5f:5e:42:69:60:0b:79:1d:a3:
27:22:ad:b3:67:e7:1c:bf:33:5b:38:5a:e3:64:6a:
f2:fa:ce:c0:d7:04:74:f6:8a:56:5b:a4:4d:99:84:
4c:6a:e6:e1:42:42:e4:23:8c:21:5d:66:63:35:4f:
d3:1e:a8:b5:b8:e4:15:50:5c:c3:fb:af:d2:f6:3d:
e4:88:6f:f9:cd:5e:d4:9e:5a:2c:4e:ad:f9:c9:13:
96:4f:78:3e:58:fb:8c:e8:11:7d:20:17:b9:0c:71:
6e:70:85:dd:5e:3c:bc:4f:9f:a7:c1:a0:f0:fc:a7:
17:a8:3d:9a:f2:f9:14:47:4e:7f:b6:88:61:cd:d0:
ff:e3:ec:1c:6d:2d:ae:b1:a2:ca:63:0c:88:06:60:
c0:2a:eb:94:36:05:f2:4d:14:b9:59:40:45:e4:4c:
13:3a:f5:c5:29:1a:8e:3e:81:ba:36:3c:74:59:3f:
d5:3a:0e:12:87:9e:0c:47:a3:a5:60:10:82:cc:5c:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59015
sbgp-ipAddrBlock: critical
IPv4:
43.224.240.0/22
43.247.100.0/22
103.43.240.0/22
103.234.128.0/22
119.38.224.0/19
IPv6:
2403:3d80::/32
Signature Algorithm: sha256WithRSAEncryption
03:0b:de:64:7a:01:fb:cc:98:f9:63:fe:93:f2:c8:13:99:a6:
e6:4f:61:f7:bd:8c:72:41:0a:10:4e:ab:0c:97:97:90:1c:85:
ee:db:17:21:c2:2f:19:24:fa:51:8c:32:53:59:67:3c:6c:66:
c4:c7:fe:6e:07:c6:3d:f9:74:08:0f:9e:d8:4b:c5:b9:9e:32:
1e:8a:47:f2:fb:ce:d0:51:62:6a:11:04:6c:54:4b:19:c0:d4:
8d:d7:3e:7b:67:04:39:3e:08:99:d7:ca:04:42:b7:49:86:a2:
1d:86:59:68:f8:4d:c4:3e:1c:8b:08:c8:75:8b:8f:da:3e:88:
93:ca:34:4a:55:a9:81:f2:9c:52:44:18:04:b5:22:83:c9:a6:
fb:45:62:15:6d:ff:67:cb:72:e8:bf:e8:00:80:d1:72:b5:da:
0d:73:e8:9a:13:2e:f8:c1:fe:65:11:bc:e7:3c:51:d9:11:2e:
d3:85:6f:b3:3c:57:1c:a1:66:9c:40:20:bd:14:c0:1d:d2:b8:
54:93:82:8f:6a:f9:cd:c2:77:d6:32:2e:3d:02:e1:92:c8:2c:
ba:10:a9:dc:b0:47:89:e8:0a:62:12:a0:32:95:b8:8d:f5:7d:
63:f3:09:c7:90:6d:c7:2c:4e:3e:23:d7:08:8e:55:78:b0:90:
0e:66:83:68
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAOBlMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA0MjhaFw0yNjEwMjMwMzAxMDNaMDMx
MTAvBgNVBAMTKEZFRTBDODI3Q0UyOTYyMDIwMDZFQjRFRDJCNjU5NURDRTBFOTdD
N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCZtET8SqCejGLLl8
OVIVSoYrEaX2EAD/Fq6+EYxZjtGZ5sacJ5vAI1HX5MXY26whk0rH39KRzE0rSPls
idu8OV9eQmlgC3kdoycirbNn5xy/M1s4WuNkavL6zsDXBHT2ilZbpE2ZhExq5uFC
QuQjjCFdZmM1T9MeqLW45BVQXMP7r9L2PeSIb/nNXtSeWixOrfnJE5ZPeD5Y+4zo
EX0gF7kMcW5whd1ePLxPn6fBoPD8pxeoPZry+RRHTn+2iGHN0P/j7BxtLa6xospj
DIgGYMAq65Q2BfJNFLlZQEXkTBM69cUpGo4+gbo2PHRZP9U6DhKHngxHo6VgEILM
XEOBAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQU/uDIJ84pYgIAbrTtK2WV3ODpfHsw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc2
Ny8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC83NjcvX3VESUo4NHBZZ0lBYnJUdEsyV1YzT0RwZkhzLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5ocwRgYIKwYBBQUHAQcBAf8ENzA1MCQE
AgABMB4DBAIr4PADBAIr92QDBAJnK/ADBAJn6oADBAV3JuAwDQQCAAIwBwMFACQD
PYAwDQYJKoZIhvcNAQELBQADggEBAAML3mR6AfvMmPlj/pPyyBOZpuZPYfe9jHJB
ChBOqwyXl5Ache7bFyHCLxkk+lGMMlNZZzxsZsTH/m4Hxj35dAgPnthLxbmeMh6K
R/L7ztBRYmoRBGxUSxnA1I3XPntnBDk+CJnXygRCt0mGoh2GWWj4TcQ+HIsIyHWL
j9o+iJPKNEpVqYHynFJEGAS1IoPJpvtFYhVt/2fLcui/6ACA0XK12g1z6JoTLvjB
/mURvOc8UdkRLtOFb7M8VxyhZpxAIL0UwB3SuFSTgo9q+c3Cd9YyLj0C4ZLILLoQ
qdywR4noCmISoDKVuI31fWPzCceQbccsTj4j1wiOVXiwkA5mg2g=
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:53:53 2025 by rpki-client