Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
File: o69xdi-gXlrOO2o8MyyrfymqM1M.cer (raw, json)
Hash identifier: JAEmvAiuY1EVyP4NYlD3vV1+q+ml6C3GJFBKL69ikCk=
Subject key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 540F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 29 Jun 2026 06:10:21 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 62.234.0.0/16
IP: 81.68.0.0/14
IP: 82.156.0.0/15
IP: 94.191.0.0/17
IP: 109.244.0.0/16
IP: 128.108.0.0/16
IP: 188.131.128.0/17
IP: 193.112.0.0/16
IP: 212.64.0.0/17
IP: 212.129.128.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21519 (0x540f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jun 29 06:10:21 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:ba:0c:69:e0:1e:56:68:c9:a2:7d:42:fa:
9d:4f:af:cb:57:61:4b:d1:a5:c5:f8:af:2f:00:01:
29:db:00:be:2c:ca:4b:71:d4:1d:28:2d:09:b5:e3:
2a:62:5c:70:bd:a8:24:63:9a:15:a6:6a:27:de:5e:
0d:4e:0c:e6:b3:56:0d:cd:fd:7f:d2:7f:c7:0f:46:
d1:b5:d2:2f:90:33:66:8c:5d:d4:d6:cd:98:5f:de:
dd:f4:cb:ac:21:7b:11:b9:9e:e0:06:92:67:4a:ff:
0e:b5:59:d8:95:7d:bc:0e:78:18:96:c2:ed:a3:fd:
f5:9a:4c:6e:7a:ca:a7:53:ac:3d:8e:8d:e2:67:49:
c5:16:09:8c:16:a5:04:0e:08:ae:75:f5:74:0f:dd:
a8:11:86:9e:ee:31:c6:22:60:de:7c:46:d4:73:8f:
ce:0c:c9:1e:0f:b5:77:14:41:54:d9:f3:45:8d:01:
de:15:e2:e7:f1:99:40:81:54:26:8d:63:b6:32:c5:
c0:d6:ff:81:c6:fb:8d:8b:c4:80:76:ec:d2:0a:90:
a4:a4:96:39:c8:18:c1:05:82:e3:57:8d:b1:78:50:
b2:08:3c:60:d2:d0:0c:06:06:3d:2b:45:ce:62:43:
52:42:35:8a:6d:9e:8f:c6:5c:1f:1d:65:f8:c2:bb:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.234.0.0/16
81.68.0.0/14
82.156.0.0/15
94.191.0.0/17
109.244.0.0/16
128.108.0.0/16
188.131.128.0/17
193.112.0.0/16
212.64.0.0/17
212.129.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0f:38:a9:46:1b:bb:cd:fc:dc:a6:51:eb:6f:59:ed:ea:d2:c3:
5e:17:d7:99:b0:4f:0d:ad:13:64:c2:9d:37:ab:ad:e5:6c:c0:
be:af:c9:d1:16:88:39:a4:9a:08:da:7a:1a:94:57:27:d5:24:
b8:0a:17:c9:d3:c7:1b:de:8c:49:6e:00:93:29:75:47:ec:0e:
bc:6d:db:16:b9:be:a6:60:71:4d:6b:39:ac:5e:3a:4e:44:5e:
c2:f4:25:cc:f1:b8:61:8f:97:58:dd:cd:6f:23:de:a2:55:f6:
6b:50:2c:6b:54:63:12:86:98:e4:12:dc:a2:c1:44:11:22:2e:
51:e4:f7:67:14:97:16:24:52:37:51:23:a1:39:82:78:7b:2e:
22:68:87:51:e5:15:3b:ac:39:ce:0d:6f:f5:03:71:fe:47:b7:
8d:e3:97:c4:02:34:bd:41:d1:5f:38:57:b2:da:48:32:33:b3:
ee:3f:e4:62:99:9c:4a:a1:34:01:0e:8b:e9:78:07:0f:a7:fb:
58:7d:fd:6d:3c:1e:4d:00:49:b1:29:89:d2:25:26:19:9a:a7:
f9:d3:b0:28:5f:5d:0d:53:79:d8:0c:10:cc:91:6e:21:61:7d:
e8:25:01:d5:28:16:a3:35:e6:c4:c7:7f:7c:56:79:39:21:d0:
71:0e:85:7e
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgICVA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwNjI5MDYxMDIxWhcNMjcwNzMwMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTEyMDk3NDAwMDAxMTAvBgNVBAUTKEEzQUY3MTc2MkZBMDVFNUFDRTNC
NkEzQzMzMkNBQjdGMjlBQTMzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbJ7oMaeAeVmjJon1C+p1Pr8tXYUvRpcX4ry8AASnbAL4syktx1B0oLQm1
4ypiXHC9qCRjmhWmaifeXg1ODOazVg3N/X/Sf8cPRtG10i+QM2aMXdTWzZhf3t30
y6whexG5nuAGkmdK/w61WdiVfbwOeBiWwu2j/fWaTG56yqdTrD2OjeJnScUWCYwW
pQQOCK519XQP3agRhp7uMcYiYN58RtRzj84MyR4PtXcUQVTZ80WNAd4V4ufxmUCB
VCaNY7YyxcDW/4HG+42LxIB27NIKkKSkljnIGMEFguNXjbF4ULIIPGDS0AwGBj0r
Rc5iQ1JCNYptno/GXB8dZfjCu/uRAgMBAAGjggL8MIIC+DAdBgNVHQ4EFgQUo69x
di+gXlrOO2o8MyyrfymqM1MwHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe
dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0
MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX
ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwggEBBggrBgEFBQcBCwSB9DCB8TBCBggrBgEF
BQcwBYY2cnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMz
NDA0MDgwMTY1LzMvMG4GCCsGAQUFBzAKhmJyc3luYzovL3Jwa2ktcnBzLmNubmlj
LmNuL3JlcG8vQTExMjE2MTU4MzM0MDQwODAxNjUvMy9BM0FGNzE3NjJGQTA1RTVB
Q0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6
Ly9ycmRwLXJwcy5jbm5pYy5jbi9ycmRwL25vdGlmaWNhdGlvbi54bWwwTwYIKwYB
BQUHAQcBAf8EQDA+MDwEAgABMDYDAwA+6gMDAlFEAwMBUpwDBAdevwADAwBt9AMD
AIBsAwQHvIOAAwMAwXADBAfUQAADBAfUgYAwDQYJKoZIhvcNAQELBQADggEBAA84
qUYbu8383KZR629Z7erSw14X15mwTw2tE2TCnTerreVswL6vydEWiDmkmgjaehqU
VyfVJLgKF8nTxxvejEluAJMpdUfsDrxt2xa5vqZgcU1rOaxeOk5EXsL0JczxuGGP
l1jdzW8j3qJV9mtQLGtUYxKGmOQS3KLBRBEiLlHk92cUlxYkUjdRI6E5gnh7LiJo
h1HlFTusOc4Nb/UDcf5Ht43jl8QCNL1B0V84V7LaSDIzs+4/5GKZnEqhNAEOi+l4
Bw+n+1h9/W08Hk0ASbEpidIlJhmap/nTsChfXQ1TedgMEMyRbiFhfeglAdUoFqM1
5sTHf3xWeTkh0HEOhX4=
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:04:45 2026 by rpki-client