Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
File: g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer (raw, json)
Hash identifier: ZXN2tC6i7mQfUabgOrHTDD+qX6Fbm73WKKVi0ljusRU=
Subject key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DA2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:18:34 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 56282
AS: 58997 -- 58998
AS: 63569
IP: 14.102.180.0/22
IP: 45.252.120.0/22
IP: 45.252.128.0/22
IP: 45.252.140.0/22
IP: 45.252.148.0/22
IP: 45.252.164.0 -- 45.252.179.255
IP: 45.254.160.0/22
IP: 45.254.168.0/21
IP: 45.255.168.0/22
IP: 45.255.192.0/20
IP: 45.255.212.0/22
IP: 103.17.40.0/22
IP: 103.26.0.0/22
IP: 103.64.240.0 -- 103.65.7.255
IP: 103.65.76.0 -- 103.65.95.255
IP: 103.65.100.0 -- 103.65.115.255
IP: 103.221.144.0 -- 103.221.155.255
IP: 103.221.160.0 -- 103.221.179.255
IP: 103.222.152.0 -- 103.222.163.255
IP: 103.227.76.0 -- 103.227.83.255
IP: 103.231.64.0/21
IP: 103.235.220.0 -- 103.235.255.255
IP: 103.237.0.0/20
IP: 103.243.252.0/22
IP: 103.249.252.0/22
IP: 114.66.64.0/20
IP: 114.67.0.0/18
IP: 150.129.192.0/22
IP: 163.47.4.0/22
IP: 163.53.40.0/22
IP: 163.53.88.0 -- 163.53.139.255
IP: 202.20.126.0/24
IP: 202.27.12.0/24
IP: 202.27.14.0/24
IP: 202.36.226.0/24
IP: 202.44.97.0/24
IP: 202.52.33.0 -- 202.52.34.255
IP: 202.52.47.0/24
IP: 202.52.143.0/24
IP: 202.53.140.0/24
IP: 202.53.143.0/24
IP: 202.59.1.0/24
IP: 202.59.240.0/24
IP: 202.61.123.0/24
IP: 202.61.127.0/24
IP: 202.63.80.0/24
IP: 202.63.253.0/24
IP: 202.74.36.0/24
IP: 202.74.42.0/24
IP: 202.74.52.0/24
IP: 202.84.22.0/24
IP: 202.89.119.0/24
IP: 202.90.37.0/24
IP: 202.90.193.0/24
IP: 202.90.205.0/24
IP: 202.94.74.0/24
IP: 202.94.81.0/24
IP: 202.125.109.0/24
IP: 202.129.208.0/24
IP: 202.130.39.0/24
IP: 202.146.186.0/24
IP: 202.151.33.0/24
IP: 203.185.189.0/24
IP: 203.191.5.0/24
IP: 203.191.133.0/24
IP: 203.201.182.0/24
IP: 211.155.80.0/20
IP: 2406:4d00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 15:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55854 (0xda2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:18:34 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:1a:f1:ae:04:1c:ce:f2:d7:8f:55:ce:dd:
df:ad:a5:b1:cc:27:20:6a:13:70:b2:67:4a:3c:a9:
f4:90:cd:3a:9d:ec:5a:50:b3:e4:53:87:49:32:59:
32:15:7d:76:e8:fa:57:27:e3:12:61:2b:41:84:79:
0b:58:6f:7e:03:a0:a8:9c:22:fc:12:58:a1:0f:ce:
9c:0b:ee:a7:78:64:dc:d8:af:60:a8:cb:f1:af:77:
25:13:2b:95:f3:fb:7e:fd:7e:13:82:20:7b:5b:25:
6f:2f:4b:5e:3e:0f:56:9b:54:35:14:d0:bb:06:2e:
26:6d:53:8a:d2:83:5e:04:42:8c:bd:01:f6:e8:49:
86:30:3d:7a:ec:6c:09:66:fb:6d:69:6c:7c:9c:e4:
94:80:89:5f:82:3c:70:50:99:ab:dd:5d:8f:53:5e:
36:37:0c:d1:bb:57:ee:c9:e4:46:99:0f:08:dd:4e:
c8:02:08:51:3c:4c:58:2e:0a:c3:1f:7b:28:50:8a:
11:5a:a5:40:75:01:96:26:08:ca:46:c9:79:00:bb:
02:d3:7d:e5:c5:22:c5:86:7d:2e:82:38:50:cd:5c:
44:31:e8:eb:e4:32:99:3f:05:29:9c:49:9a:ad:a2:
82:1e:72:72:ef:ed:a0:72:85:75:50:d7:35:19:cc:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56282
58997-58998
63569
sbgp-ipAddrBlock: critical
IPv4:
14.102.180.0/22
45.252.120.0/22
45.252.128.0/22
45.252.140.0/22
45.252.148.0/22
45.252.164.0-45.252.179.255
45.254.160.0/22
45.254.168.0/21
45.255.168.0/22
45.255.192.0/20
45.255.212.0/22
103.17.40.0/22
103.26.0.0/22
103.64.240.0-103.65.7.255
103.65.76.0-103.65.95.255
103.65.100.0-103.65.115.255
103.221.144.0-103.221.155.255
103.221.160.0-103.221.179.255
103.222.152.0-103.222.163.255
103.227.76.0-103.227.83.255
103.231.64.0/21
103.235.220.0-103.235.255.255
103.237.0.0/20
103.243.252.0/22
103.249.252.0/22
114.66.64.0/20
114.67.0.0/18
150.129.192.0/22
163.47.4.0/22
163.53.40.0/22
163.53.88.0-163.53.139.255
202.20.126.0/24
202.27.12.0/24
202.27.14.0/24
202.36.226.0/24
202.44.97.0/24
202.52.33.0-202.52.34.255
202.52.47.0/24
202.52.143.0/24
202.53.140.0/24
202.53.143.0/24
202.59.1.0/24
202.59.240.0/24
202.61.123.0/24
202.61.127.0/24
202.63.80.0/24
202.63.253.0/24
202.74.36.0/24
202.74.42.0/24
202.74.52.0/24
202.84.22.0/24
202.89.119.0/24
202.90.37.0/24
202.90.193.0/24
202.90.205.0/24
202.94.74.0/24
202.94.81.0/24
202.125.109.0/24
202.129.208.0/24
202.130.39.0/24
202.146.186.0/24
202.151.33.0/24
203.185.189.0/24
203.191.5.0/24
203.191.133.0/24
203.201.182.0/24
211.155.80.0/20
IPv6:
2406:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
ab:c7:bd:40:f4:25:be:25:00:d4:0d:b6:85:ae:03:01:2f:ae:
82:47:1e:e2:4f:e8:2a:5b:18:a6:82:ed:be:3e:e9:b1:2c:e8:
48:63:74:af:21:42:5c:24:d9:ea:df:7a:ef:98:a1:c4:a2:ca:
95:2c:30:36:4b:ae:bc:16:9d:22:4d:48:2d:e8:e6:77:5d:0b:
69:d7:e2:e9:55:35:16:8f:6a:c6:e6:b4:c9:43:ed:ef:2f:d1:
fe:b0:90:a7:99:c5:90:a5:8b:20:98:79:07:d9:d2:b8:2b:5d:
cf:3d:96:1c:16:89:3b:05:e0:39:a2:6e:d8:73:21:b3:c4:77:
5a:9f:a4:18:81:38:60:38:0a:b3:d3:75:7a:34:88:00:8a:4e:
10:87:f5:93:38:eb:4c:1f:45:c6:ca:53:19:f5:0d:a3:c2:22:
eb:19:3a:6c:89:f5:c9:58:8d:bb:5d:0b:1f:21:b9:a0:44:ec:
58:12:c7:8d:f8:05:32:36:e1:c9:5f:38:7f:18:f9:59:f3:c1:
a0:3d:ef:fc:fa:d4:8d:94:41:b0:27:14:d6:34:04:21:6e:e4:
e9:5a:30:5f:28:b1:ac:09:c6:b8:dc:1c:ff:76:9b:73:8d:a6:
18:ab:99:45:83:f9:12:7a:86:01:3e:d1:60:03:c7:95:c5:64:
97:fd:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:04 2025 by rpki-client