Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer (raw, json)
Hash identifier: 4WW9MosPCx/nmFSA93tv78cRua7qKY8lpngNea4rfH8=
Subject key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:09:22 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: IP: 103.50.44.0 -- 103.50.75.255
IP: 103.50.108.0 -- 103.50.127.255
IP: 103.50.132.0 -- 103.50.143.255
IP: 103.50.172.0 -- 103.50.203.255
IP: 103.50.220.0 -- 103.50.251.255
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57859 (0xe203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:09:22 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:c9:5c:5c:b8:1f:1e:fd:08:25:00:8f:4a:
1a:bc:21:ab:4d:a8:11:f7:6f:e8:fc:21:b0:6f:8b:
70:08:2b:7a:07:45:69:1b:9e:78:bf:9c:8d:e1:3a:
d7:42:a6:02:45:34:bd:c6:2c:68:ee:b9:f5:65:a6:
37:22:e6:c6:49:78:0f:2f:10:7b:6f:9d:68:ea:17:
77:31:1a:be:1b:a6:d3:32:6f:4d:b4:91:de:02:8a:
9e:d5:48:a9:03:07:05:a4:9f:96:4f:1c:74:a4:f0:
74:85:cc:3b:77:6b:59:70:38:54:8f:6f:f7:1d:98:
d4:f7:c1:c8:f0:aa:a0:19:5b:67:82:8b:01:f8:5e:
98:93:8a:7d:f1:e2:6e:7b:f2:27:bf:77:45:bd:a6:
6d:11:f5:a0:ec:dd:70:b9:b8:0c:43:5b:87:b1:36:
52:00:52:6a:81:67:e0:57:37:bf:b8:77:24:3f:bd:
84:f1:03:55:7c:d9:1d:45:c6:d0:30:34:d5:13:4c:
f6:eb:0b:17:ac:b1:b6:63:84:53:c0:d0:4e:85:cc:
f2:2e:8d:ce:93:e8:31:49:19:b9:aa:da:66:a6:c8:
bc:c2:df:56:c7:e6:b0:79:b0:fc:60:ad:51:be:0b:
a8:01:d6:cc:f7:97:00:ef:c9:50:5f:b7:65:01:1a:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.44.0-103.50.75.255
103.50.108.0-103.50.127.255
103.50.132.0-103.50.143.255
103.50.172.0-103.50.203.255
103.50.220.0-103.50.251.255
Signature Algorithm: sha256WithRSAEncryption
00:0f:a6:10:78:a8:41:ab:cf:97:27:5f:89:42:18:7e:fe:e3:
89:9f:db:a3:8d:ef:29:db:95:9b:d4:cf:bb:b3:f8:2a:5d:67:
74:47:56:c4:15:02:91:a5:4b:d4:1b:6d:18:97:31:6a:97:5f:
cd:0c:f2:45:1a:da:7c:2a:fa:07:97:3a:33:d4:bc:b2:0c:0c:
30:8c:1e:db:e6:1f:86:16:34:d7:2e:d9:2a:26:41:7d:8e:51:
b1:bd:ba:b6:24:8f:3b:69:a5:09:fb:0d:8b:9e:3f:ed:55:ec:
77:b8:5f:2f:f5:02:d1:b3:d2:9f:84:40:a1:5e:4d:13:78:4c:
7e:8f:6f:d4:92:e9:14:d5:82:8c:75:eb:d5:2a:9b:2f:ef:99:
ea:2b:c8:40:4b:89:b8:ee:4d:ef:c0:54:0a:43:98:1d:e0:50:
a8:2f:aa:ab:26:cc:1b:5b:47:60:62:a1:11:08:69:fb:74:99:
cd:3c:7a:9a:9f:ab:2c:d6:9b:ae:f1:e9:1f:fa:af:44:25:f3:
8f:2e:e7:16:b6:a6:36:a0:a9:1f:0b:09:07:4b:86:99:98:93:
e5:ef:56:fd:d2:d8:47:25:2f:d0:a4:53:d5:0f:99:38:74:04:
76:c9:a7:69:96:3b:1e:a7:2d:92:96:9c:10:de:69:4d:73:59:
ff:39:cb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:46 2025 by rpki-client