Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gL0CjXa7PVXmZBaamvDfKpjHUFU.cer
File: gL0CjXa7PVXmZBaamvDfKpjHUFU.cer (raw, json)
Hash identifier: Xp0357tRYtPnnZVRG7XvU/RyJeN9z5PVzFmjGdOOgXc=
Subject key identifier: 80:BD:02:8D:76:BB:3D:55:E6:64:16:9A:9A:F0:DF:2A:98:C7:50:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/gL0CjXa7PVXmZBaamvDfKpjHUFU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:13:08 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 146772
IP: 45.248.108.0/22
IP: 45.250.180.0 -- 45.250.187.255
IP: 45.251.0.0/22
IP: 103.191.242.0/23
IP: 103.216.252.0/22
IP: 103.219.84.0 -- 103.219.91.255
IP: 103.219.100.0/22
IP: 2405:80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 07:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55428 (0xd884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:13:08 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=80BD028D76BB3D55E664169A9AF0DF2A98C75055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:64:35:3d:51:b5:d7:98:bd:c6:75:7e:ae:
24:a9:4d:6f:93:63:93:b9:87:02:f9:1d:f6:0e:39:
1d:62:c0:ce:73:a2:14:8d:19:c8:d4:eb:21:6a:4c:
cf:69:26:26:06:c3:2b:95:0b:8b:ea:a3:58:97:d0:
0c:a6:c8:49:7a:19:96:2f:9f:dc:02:4e:3b:e7:5b:
93:1c:74:c4:59:f6:85:47:8e:95:eb:27:f1:21:25:
15:2a:b5:27:56:74:f0:20:28:bd:e6:a8:5a:bd:1f:
b8:d2:a5:17:69:6c:56:85:16:f2:84:89:f5:b6:20:
05:c3:7e:ce:d8:ae:dd:f3:14:d9:9b:7b:91:5a:37:
27:82:ab:76:f3:e4:4a:d7:be:98:e3:a6:76:9e:ad:
cb:ed:d6:d5:59:39:8b:76:e1:64:67:4e:45:69:6e:
1d:e7:85:3c:25:f3:69:3d:98:f5:67:58:37:49:37:
37:2b:57:95:8c:89:6b:9b:93:b6:01:63:cd:f8:20:
a2:9a:00:03:fe:0e:11:29:91:df:22:01:56:77:b2:
45:0d:78:17:10:18:d7:3f:c6:db:76:44:30:c0:40:
dd:b4:b3:1a:55:2e:99:a7:10:df:8f:28:f4:f2:98:
4b:04:99:9f:58:58:85:47:a3:67:ad:e6:87:16:6f:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:02:8D:76:BB:3D:55:E6:64:16:9A:9A:F0:DF:2A:98:C7:50:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/gL0CjXa7PVXmZBaamvDfKpjHUFU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146772
sbgp-ipAddrBlock: critical
IPv4:
45.248.108.0/22
45.250.180.0-45.250.187.255
45.251.0.0/22
103.191.242.0/23
103.216.252.0/22
103.219.84.0-103.219.91.255
103.219.100.0/22
IPv6:
2405:80::/32
Signature Algorithm: sha256WithRSAEncryption
00:2a:3b:8e:a2:22:b1:ca:27:4a:9b:ab:19:1b:7a:1d:a5:44:
1f:7a:5a:2a:b9:a7:1c:e6:b4:a4:9c:60:c8:23:77:de:5b:6e:
79:a7:69:f1:fc:58:24:00:3d:2c:26:b8:c6:16:35:bd:e3:8b:
cf:b8:af:41:20:27:9b:f1:90:84:e8:ac:8f:19:a0:46:9d:83:
b1:41:75:1a:3a:a9:cb:8d:5c:77:cc:20:2f:bf:18:68:09:39:
32:9f:ca:e6:28:aa:62:51:64:73:88:95:71:dd:de:dd:ad:bc:
c1:98:30:75:c7:97:36:fa:d2:89:b6:34:0d:85:1b:b3:30:d8:
d1:12:ab:20:c7:0e:ee:7a:ed:9e:ae:2f:bd:90:12:02:fc:a6:
2b:b1:c1:26:b7:fd:3a:4a:90:45:92:ba:5d:7b:8d:bd:64:17:
1a:c1:12:a2:2b:5b:d8:e5:fb:dd:9f:dc:eb:0b:b2:2e:e6:ff:
88:c0:e7:8f:5c:3d:c0:09:bf:e8:da:de:be:47:3f:e1:68:bc:
3c:75:41:f2:40:9a:c5:64:ca:d7:c4:e9:e9:24:99:4f:2c:ba:
8c:f6:08:49:0f:d2:65:29:2c:48:bd:22:9f:f5:1b:aa:ab:f3:
f9:e2:ac:57:fe:f6:df:20:1c:6b:9d:6e:ee:bd:21:6a:d5:44:
bc:c0:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:31:24 2025 by rpki-client