$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer File: qOvq1LE6eRhQyveRTqMND1A2w-c.cer (raw, json) Hash identifier: 2JgvidleNzi/OpxJu8vOgICn44ifq7jMDXVDLF6Bqfk= Subject key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E0D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:05:42 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 139138 IP: 103.150.164.0/23 IP: 2406:b640::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57557 (0xe0d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:05:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:8f:f7:29:4d:78:03:91:74:ca:3a:b2:3e: da:59:ff:8a:c4:7e:29:4f:32:73:0a:51:80:7b:51: 75:e5:12:9e:53:4a:73:c3:e3:b6:c5:cc:40:62:50: 26:2d:ac:84:7b:95:32:c8:91:8b:9c:fe:dc:3b:3f: 7c:53:48:51:46:ea:c8:3b:bb:d8:a3:f4:d4:88:51: d7:6b:da:ab:ed:d7:58:55:83:dc:f9:b5:5f:41:03: 1b:46:b8:38:8a:0e:f3:1d:ba:02:4c:1c:32:95:2d: 61:c1:af:a6:91:11:a9:db:e6:ae:3e:57:c7:fe:ed: 26:91:19:7d:c4:0d:74:e3:d0:64:0b:7e:5e:c1:a6: df:80:1c:b2:3a:80:f5:30:09:d7:a7:28:26:32:41: 6b:6b:f3:ba:8b:64:e6:d2:4f:24:f7:36:fa:d5:75: ff:38:fd:97:b3:e8:54:52:53:6f:24:54:5d:ba:e5: ad:91:92:6e:36:ce:78:b5:57:39:ab:83:f7:11:11: 10:75:eb:cc:65:df:d0:7e:b8:72:c3:c1:88:2c:49: 6f:f0:f2:65:17:c9:f5:8b:ef:f2:32:c1:fb:ca:e4: 3b:6b:cc:34:ea:01:dc:d1:89:37:e3:11:c8:ad:4e: 19:f7:f8:d4:79:c0:1b:76:72:94:7a:71:a4:14:f6: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139138 sbgp-ipAddrBlock: critical IPv4: 103.150.164.0/23 IPv6: 2406:b640::/32 Signature Algorithm: sha256WithRSAEncryption 27:9f:4b:8f:2e:79:68:89:1d:4e:cf:3a:22:a3:02:ef:fc:3f: d3:80:8f:9f:5b:50:c5:08:a9:db:09:ea:dc:f7:55:3b:bd:8f: b7:11:b8:4b:ac:75:41:29:7e:92:1a:3a:05:35:8d:09:d5:66: 17:c9:4f:50:62:af:f1:f6:33:74:91:03:37:90:a0:25:0e:d2: 4e:e5:f3:8d:dc:65:44:44:52:a5:0e:90:f8:af:72:35:81:4f: 9b:26:aa:42:82:e5:14:41:d9:c7:95:5a:81:45:84:0b:20:e8: f6:8b:14:af:4d:a4:0a:78:8d:a9:f1:29:dd:9e:35:a2:20:c9: ea:7e:e6:12:a0:b1:4f:0b:e8:77:b2:c9:70:7f:27:8e:a2:2b: 0c:9a:f8:7c:3a:e4:fa:3a:c2:22:2a:c3:e2:a3:be:f3:a4:1c: a3:91:15:4d:91:27:6c:4a:03:97:e2:8c:fc:ca:63:c7:4b:07: f0:e6:7a:a2:7d:88:ed:68:3f:f1:b8:6c:1a:b4:ab:b6:30:27: 62:e2:4b:12:bc:6a:e1:90:47:5c:5e:fa:d0:5e:23:ea:67:44: 28:a9:62:01:97:e7:56:0c:61:63:61:13:d3:38:52:8f:cc:53: b6:5b:61:45:1c:33:85:ac:bd:76:ed:9a:e4:78:f2:61:12:fc: 13:aa:42:cc -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAODVMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA1NDJaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEE4RUJFQUQ0QjEzQTc5MTg1MENBRjc5MTRFQTMwRDBGNTAzNkMz RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLo/3KU14A5F0yjqy PtpZ/4rEfilPMnMKUYB7UXXlEp5TSnPD47bFzEBiUCYtrIR7lTLIkYuc/tw7P3xT SFFG6sg7u9ij9NSIUddr2qvt11hVg9z5tV9BAxtGuDiKDvMdugJMHDKVLWHBr6aR Eanb5q4+V8f+7SaRGX3EDXTj0GQLfl7Bpt+AHLI6gPUwCdenKCYyQWtr87qLZObS TyT3NvrVdf84/Zez6FRSU28kVF265a2Rkm42zni1Vzmrg/cRERB168xl39B+uHLD wYgsSW/w8mUXyfWL7/IywfvK5DtrzDTqAdzRiTfjEcitThn3+NR5wBt2cpR6caQU 9oSpAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUqOvq1LE6eRhQyveRTqMND1A2w+cw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5 NzIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjk3Mi9xT3ZxMUxFNmVSaFF5dmVSVHFNTkQxQTJ3LWMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfgjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWeWpDANBAIAAjAHAwUAJAa2QDANBgkqhkiG9w0BAQsFAAOCAQEA J59Ljy55aIkdTs86IqMC7/w/04CPn1tQxQip2wnq3PdVO72PtxG4S6x1QSl+kho6 BTWNCdVmF8lPUGKv8fYzdJEDN5CgJQ7STuXzjdxlRERSpQ6Q+K9yNYFPmyaqQoLl FEHZx5VagUWECyDo9osUr02kCniNqfEp3Z41oiDJ6n7mEqCxTwvod7LJcH8njqIr DJr4fDrk+jrCIirD4qO+86Qco5EVTZEnbEoDl+KM/Mpjx0sH8OZ6on2I7Wg/8bhs GrSrtjAnYuJLErxq4ZBHXF760F4j6mdEKKliAZfnVgxhY2ET0zhSj8xTtlthRRwz hay9du2a5HjyYRL8E6pCzA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:47:30 2025 by rpki-client