Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
File: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer (raw, json)
Hash identifier: VAwdYxN5PTz+B4DXqmCei63WhW4wjF5IyLlDqzhry4w=
Subject key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E2E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:12:54 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: IP: 43.250.116.0/22
IP: 103.108.192.0/22
IP: 103.139.0.0/22
IP: 103.235.184.0/22
IP: 150.242.224.0/22
IP: 218.247.64.0/19
IP: 219.234.0.0/19
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58087 (0xe2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:12:54 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:a5:2a:39:f7:16:70:ff:b7:6c:01:dc:24:
f8:ad:36:53:c9:f0:f1:95:d0:f8:a2:46:35:9f:5c:
f2:ce:e2:ba:9a:64:e6:10:ea:c7:46:70:fa:a7:1c:
05:28:a4:80:a6:cb:a8:24:6d:49:c4:48:3e:28:64:
24:90:86:10:59:63:e6:a8:6a:90:14:13:92:18:b9:
ab:8f:7a:c6:63:03:b9:63:90:95:f5:72:09:6b:9b:
6e:ee:59:91:ef:59:3b:3e:c0:ea:bb:dd:bd:34:ef:
3c:c2:4f:cf:12:4d:5b:df:69:71:6a:8d:32:a8:cd:
cb:07:ad:d9:7d:77:69:a8:5b:f8:3f:7b:ef:56:8a:
fb:1a:db:8c:6c:9e:51:9e:ea:27:51:4c:9d:f1:4a:
b0:7a:90:3c:16:cf:1e:80:a4:ad:40:7a:13:38:45:
89:4f:3a:5a:7e:da:d4:62:7f:3c:11:40:72:79:b2:
49:e6:2f:07:07:60:ae:db:1d:77:b8:22:ad:ff:90:
10:a6:38:be:56:98:e8:17:f6:a7:5e:4e:94:db:c7:
a1:2c:76:1f:13:c5:9c:b7:4f:f9:67:2b:a9:b9:b9:
e7:ba:c8:90:e1:ef:1f:b7:36:55:87:03:ce:00:e9:
42:4c:24:26:a0:4d:1a:16:9c:6f:5d:5e:13:d7:4f:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.108.192.0/22
103.139.0.0/22
103.235.184.0/22
150.242.224.0/22
218.247.64.0/19
219.234.0.0/19
Signature Algorithm: sha256WithRSAEncryption
08:f6:c7:e1:83:63:81:55:74:6b:87:b9:a2:42:06:7d:1d:dc:
25:d3:bb:45:cf:35:3c:b1:09:a5:03:87:74:75:4b:df:86:e6:
03:30:77:b9:c6:34:c3:5c:6e:ed:b5:8b:53:1a:52:eb:9a:d3:
65:5f:94:80:ee:13:07:b8:81:ea:72:54:58:bd:2c:1d:7b:21:
00:40:8c:2b:f9:39:d0:73:d7:56:50:10:51:21:1c:82:47:7f:
9f:16:6c:e7:50:fd:dd:0a:e5:9c:fc:54:a7:c6:da:49:d0:57:
55:85:89:7b:38:27:fe:4c:89:16:7c:3d:f5:92:24:bc:eb:12:
5b:56:ca:9b:b6:de:f7:67:97:8b:d6:cd:d9:2d:86:06:55:74:
62:a4:a6:7e:cd:72:3f:9a:dc:44:d4:53:95:00:98:74:fa:d8:
64:f7:12:a1:80:42:05:57:a4:04:36:d6:40:8a:6d:bf:a8:9e:
cc:16:15:e9:c7:7f:ab:4d:85:05:4e:fb:76:41:70:e6:85:30:
98:30:68:63:ac:20:15:a6:c2:84:b0:7f:6e:53:24:02:6a:7e:
62:84:b8:e2:0b:3f:30:bc:47:fa:0a:11:65:a0:2e:a9:45:b4:
2e:8d:01:a4:97:a8:29:bd:d6:2c:37:0d:f8:67:d8:34:36:0f:
d0:05:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:26:18 2025 by rpki-client