$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer File: kOpMYj8LihBi2qgOqaj0R49Z3oU.cer (raw, json) Hash identifier: oLgK6FsUQ0YYFiqUTQgdRbYSpjN0lClRlGHKxQMf+u0= Subject key identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E31B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:13:34 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 151225 IP: 113.31.136.0/21 IP: 2401:90a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58139 (0xe31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:13:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:00:5c:6a:e8:b9:e6:7d:20:e0:a9:d6:e2: a3:17:09:2e:d2:25:3d:52:2f:8f:1d:f4:27:b7:cd: 35:a1:47:6b:c5:c5:68:3a:81:59:a3:5d:d1:f6:3d: 40:15:59:f4:c0:b0:61:d0:bb:cf:87:bf:89:e1:3d: 01:78:e2:b4:36:81:f1:b4:22:28:f7:da:c0:5f:dd: f7:8b:ca:d6:c8:85:2b:2d:fc:2e:29:12:f5:66:c2: 46:29:15:fa:83:88:25:48:e0:f4:de:bf:da:6b:29: cb:67:3b:c9:5b:01:ae:8e:58:8d:aa:5c:ac:c1:e8: cb:e9:bd:39:7c:7c:a0:72:39:e3:bb:b1:23:1b:ea: 1f:b6:d5:4c:e9:6a:de:eb:23:9c:0d:05:da:f7:64: 1f:6f:bb:85:76:15:14:23:f1:a9:e3:1d:0a:ca:c5: 9a:35:56:fb:7d:65:f5:93:6d:c6:61:0f:ac:af:95: 3f:9c:06:9c:76:63:7d:43:59:53:31:6d:32:ce:8e: fc:1f:8f:22:91:ee:7b:7f:40:d2:86:dd:1f:9e:77: 72:57:07:c1:ab:ca:28:7a:bc:4f:f1:d8:ad:a6:4e: 02:c7:8e:50:59:e0:ef:bc:54:ac:ab:0e:bd:72:26: 4b:91:a7:07:df:ae:74:f5:45:d4:d3:8f:29:b7:36: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151225 sbgp-ipAddrBlock: critical IPv4: 113.31.136.0/21 IPv6: 2401:90a0::/32 Signature Algorithm: sha256WithRSAEncryption 97:64:84:ca:12:6a:a6:f2:15:8c:23:90:11:85:6f:cc:a0:2e: 35:ae:d5:4c:bd:5c:bc:fd:37:21:16:46:9c:0a:f1:f8:c0:9f: 07:c9:d6:9b:8a:18:0f:48:d9:59:9b:6d:0f:3f:82:1a:ba:d6: 83:a2:3e:96:43:f0:d3:e6:36:60:88:8e:46:1d:26:df:cd:66: c9:67:3f:70:10:5b:34:57:40:46:1d:fc:a7:51:d0:e8:64:21: f6:2f:4b:0c:3d:5b:c0:49:0b:6b:f9:4d:ff:c9:73:89:9d:ea: 0b:78:37:48:bd:0b:46:2e:c9:ee:cc:a8:96:ab:c7:78:50:80: 2d:8a:28:14:e4:57:04:99:eb:b5:6d:2f:25:21:23:e4:f8:32: 1b:03:99:95:60:7d:00:df:90:51:ad:56:46:18:48:b9:17:3e: 20:b6:dd:25:c2:1f:f2:e1:63:42:00:48:63:ff:a9:98:06:e6: 4e:18:51:72:6d:ae:97:96:47:9c:99:8d:4f:86:a3:0b:f1:10: 63:d7:d0:b7:d2:7c:df:82:2c:ab:9a:b3:c7:1b:7e:58:e6:f8: 00:97:3a:a6:ee:23:3e:66:96:8d:43:5b:f7:79:63:91:64:80: ad:86:97:5f:18:49:03:76:54:25:ce:e2:9b:38:91:42:77:b7: 43:76:3f:db -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOMbMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEzMzRaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDkwRUE0QzYyM0YwQjhBMTA2MkRBQTgwRUE5QThGNDQ3OEY1OURF ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtgBcaui55n0g4KnW 4qMXCS7SJT1SL48d9Ce3zTWhR2vFxWg6gVmjXdH2PUAVWfTAsGHQu8+Hv4nhPQF4 4rQ2gfG0Iij32sBf3feLytbIhSst/C4pEvVmwkYpFfqDiCVI4PTev9prKctnO8lb Aa6OWI2qXKzB6MvpvTl8fKByOeO7sSMb6h+21Uzpat7rI5wNBdr3ZB9vu4V2FRQj 8anjHQrKxZo1Vvt9ZfWTbcZhD6yvlT+cBpx2Y31DWVMxbTLOjvwfjyKR7nt/QNKG 3R+ed3JXB8Gryih6vE/x2K2mTgLHjlBZ4O+8VKyrDr1yJkuRpwffrnT1RdTTjym3 NqdDAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUkOpMYj8LihBi2qgOqaj0R49Z3oUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NS9rT3BNWWo4TGloQmkycWdPcWFqMFI0OVozb1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOuTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEA3EfiDANBAIAAjAHAwUAJAGQoDANBgkqhkiG9w0BAQsFAAOCAQEA l2SEyhJqpvIVjCOQEYVvzKAuNa7VTL1cvP03IRZGnArx+MCfB8nWm4oYD0jZWZtt Dz+CGrrWg6I+lkPw0+Y2YIiORh0m381myWc/cBBbNFdARh38p1HQ6GQh9i9LDD1b wEkLa/lN/8lziZ3qC3g3SL0LRi7J7syolqvHeFCALYooFORXBJnrtW0vJSEj5Pgy GwOZlWB9AN+QUa1WRhhIuRc+ILbdJcIf8uFjQgBIY/+pmAbmThhRcm2ul5ZHnJmN T4ajC/EQY9fQt9J834Isq5qzxxt+WOb4AJc6pu4jPmaWjUNb93ljkWSArYaXXxhJ A3ZUJc7imziRQne3Q3Y/2w== -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:41 2025 by rpki-client