Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
File: ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer (raw, json)
Hash identifier: Y1JB2tN0jdEKwzRetJedjwrf4JIITsX8nqWw4NesO6I=
Subject key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8138
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 25 Aug 2026 03:19:17 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 40.72.0.0/15
IP: 40.125.128.0/17
IP: 40.126.64.0/18
IP: 40.162.0.0/16
IP: 47.92.0.0 -- 47.127.255.255
IP: 52.80.0.0/14
IP: 52.130.0.0/15
IP: 54.222.0.0/15
IP: 68.79.0.0/18
IP: 69.230.192.0/18
IP: 69.231.128.0/18
IP: 69.234.192.0/18
IP: 69.235.128.0/18
IP: 71.131.192.0 -- 71.132.63.255
IP: 71.136.64.0/18
IP: 71.137.0.0/18
IP: 138.252.72.0/23
IP: 138.252.78.0/23
IP: 138.252.118.0/23
IP: 138.252.162.0/23
IP: 139.9.0.0/16
IP: 139.129.0.0/16
IP: 139.148.0.0/16
IP: 139.155.0.0/16
IP: 139.159.0.0/16
IP: 139.176.0.0/16
IP: 139.183.0.0/16
IP: 139.186.0.0/16
IP: 139.196.0.0/14
IP: 139.217.0.0/16
IP: 139.219.0.0 -- 139.221.255.255
IP: 139.224.0.0/16
IP: 140.143.0.0/16
IP: 140.179.0.0/16
IP: 140.205.0.0/16
IP: 140.210.0.0/16
IP: 143.64.0.0/16
IP: 144.79.4.0/23
IP: 144.79.10.0/23
IP: 144.79.28.0/23
IP: 144.79.42.0/23
IP: 144.79.54.0/23
IP: 144.79.84.0/23
IP: 144.79.118.0/23
IP: 144.79.148.0/23
IP: 152.104.128.0/17
IP: 157.10.34.0 -- 157.10.37.255
IP: 157.10.112.0/23
IP: 157.10.130.0/23
IP: 157.10.218.0 -- 157.10.221.255
IP: 157.10.246.0/23
IP: 157.15.74.0/23
IP: 157.15.94.0/23
IP: 157.15.100.0 -- 157.15.105.255
IP: 157.20.136.0/23
IP: 157.20.194.0/23
IP: 157.20.246.0/23
IP: 157.66.42.0/23
IP: 157.66.70.0/23
IP: 157.66.88.0/21
IP: 157.66.164.0/23
IP: 157.66.244.0/23
IP: 158.60.0.0/16
IP: 158.140.252.0/22
IP: 159.27.0.0/16
IP: 160.19.76.0/23
IP: 160.19.82.0/23
IP: 160.20.16.0/22
IP: 160.20.130.0/23
IP: 160.22.58.0/23
IP: 160.22.82.0/23
IP: 160.22.148.0/23
IP: 160.22.188.0/23
IP: 160.22.224.0/23
IP: 160.22.230.0/23
IP: 160.22.244.0/22
IP: 160.25.10.0 -- 160.25.13.255
IP: 160.25.194.0/23
IP: 160.30.40.0/23
IP: 160.30.150.0/23
IP: 160.30.194.0 -- 160.30.199.255
IP: 160.30.230.0/23
IP: 160.187.223.0/24
IP: 160.187.252.0/22
IP: 160.191.0.0/23
IP: 160.191.104.0/23
IP: 160.191.110.0/23
IP: 160.236.78.0/23
IP: 160.236.148.0/23
IP: 160.236.162.0/23
IP: 160.236.234.0/23
IP: 160.236.250.0/23
IP: 160.250.14.0 -- 160.250.19.255
IP: 160.250.84.0/23
IP: 160.250.90.0/23
IP: 160.250.102.0 -- 160.250.105.255
IP: 160.250.160.0/23
IP: 160.250.170.0/23
IP: 160.250.214.0/23
IP: 160.250.252.0/23
IP: 161.189.0.0/16
IP: 161.207.0.0/16
IP: 161.248.20.0/23
IP: 161.248.42.0/23
IP: 161.248.84.0/23
IP: 161.248.92.0/23
IP: 161.248.108.0 -- 161.248.113.255
IP: 162.4.54.0/23
IP: 162.4.136.0/23
IP: 162.4.168.0/23
IP: 162.4.198.0/23
IP: 162.4.202.0/23
IP: 162.4.230.0/23
IP: 165.101.4.0/23
IP: 165.101.66.0/23
IP: 165.101.70.0/23
IP: 165.101.144.0/23
IP: 165.101.170.0/23
IP: 165.101.208.0/23
IP: 165.101.244.0/23
IP: 167.189.0.0/16
IP: 167.220.244.0/22
IP: 168.160.0.0/16
IP: 170.179.0.0/16
IP: 192.51.172.0/23
IP: 192.55.46.0/23
IP: 192.55.68.0/22
IP: 192.102.204.0/22
IP: 192.232.34.0/23
IP: 192.232.44.0/22
IP: 198.175.100.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33080 (0x8138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 25 03:19:17 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:d1:c9:63:8a:d2:86:8f:8f:f4:38:68:a7:
f0:04:05:f6:8d:b0:72:a6:d9:3f:07:ba:1c:bb:56:
8f:7c:06:c3:af:f7:09:fb:61:01:e1:8b:3f:27:d2:
6e:f7:53:6c:f5:46:0b:95:a2:4d:61:f9:b7:00:d7:
f6:89:64:40:b1:7a:49:37:2d:e6:a6:04:a6:57:2e:
03:0b:6c:3e:d0:b4:f6:6e:75:b9:1b:50:63:11:41:
ea:f2:81:0c:8c:66:34:de:02:eb:a7:17:22:73:87:
ba:26:93:60:99:ba:07:81:57:2a:d4:32:80:da:a3:
db:c7:80:8c:34:9e:c3:dc:2b:9d:9a:90:28:8c:ea:
29:15:02:c8:9f:dc:1f:4d:98:98:aa:59:1d:08:35:
de:d7:40:d6:df:c6:83:e9:9f:c8:c9:f1:87:04:3f:
e1:87:fb:4b:78:51:cb:ba:58:77:43:02:32:a1:a9:
48:ad:ba:30:f2:9a:14:06:a1:ce:d2:4f:f5:7b:61:
17:9d:90:25:ac:c3:06:06:64:7e:57:82:21:c7:ae:
fa:37:37:e9:1a:1a:08:6b:24:5a:14:b4:06:40:44:
60:8b:9e:e1:bd:3e:bf:24:7c:35:fa:19:6d:6e:df:
59:52:98:e8:31:1c:3a:75:24:79:d0:a1:03:f8:48:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.0.0/15
40.125.128.0/17
40.126.64.0/18
40.162.0.0/16
47.92.0.0-47.127.255.255
52.80.0.0/14
52.130.0.0/15
54.222.0.0/15
68.79.0.0/18
69.230.192.0/18
69.231.128.0/18
69.234.192.0/18
69.235.128.0/18
71.131.192.0-71.132.63.255
71.136.64.0/18
71.137.0.0/18
138.252.72.0/23
138.252.78.0/23
138.252.118.0/23
138.252.162.0/23
139.9.0.0/16
139.129.0.0/16
139.148.0.0/16
139.155.0.0/16
139.159.0.0/16
139.176.0.0/16
139.183.0.0/16
139.186.0.0/16
139.196.0.0/14
139.217.0.0/16
139.219.0.0-139.221.255.255
139.224.0.0/16
140.143.0.0/16
140.179.0.0/16
140.205.0.0/16
140.210.0.0/16
143.64.0.0/16
144.79.4.0/23
144.79.10.0/23
144.79.28.0/23
144.79.42.0/23
144.79.54.0/23
144.79.84.0/23
144.79.118.0/23
144.79.148.0/23
152.104.128.0/17
157.10.34.0-157.10.37.255
157.10.112.0/23
157.10.130.0/23
157.10.218.0-157.10.221.255
157.10.246.0/23
157.15.74.0/23
157.15.94.0/23
157.15.100.0-157.15.105.255
157.20.136.0/23
157.20.194.0/23
157.20.246.0/23
157.66.42.0/23
157.66.70.0/23
157.66.88.0/21
157.66.164.0/23
157.66.244.0/23
158.60.0.0/16
158.140.252.0/22
159.27.0.0/16
160.19.76.0/23
160.19.82.0/23
160.20.16.0/22
160.20.130.0/23
160.22.58.0/23
160.22.82.0/23
160.22.148.0/23
160.22.188.0/23
160.22.224.0/23
160.22.230.0/23
160.22.244.0/22
160.25.10.0-160.25.13.255
160.25.194.0/23
160.30.40.0/23
160.30.150.0/23
160.30.194.0-160.30.199.255
160.30.230.0/23
160.187.223.0/24
160.187.252.0/22
160.191.0.0/23
160.191.104.0/23
160.191.110.0/23
160.236.78.0/23
160.236.148.0/23
160.236.162.0/23
160.236.234.0/23
160.236.250.0/23
160.250.14.0-160.250.19.255
160.250.84.0/23
160.250.90.0/23
160.250.102.0-160.250.105.255
160.250.160.0/23
160.250.170.0/23
160.250.214.0/23
160.250.252.0/23
161.189.0.0/16
161.207.0.0/16
161.248.20.0/23
161.248.42.0/23
161.248.84.0/23
161.248.92.0/23
161.248.108.0-161.248.113.255
162.4.54.0/23
162.4.136.0/23
162.4.168.0/23
162.4.198.0/23
162.4.202.0/23
162.4.230.0/23
165.101.4.0/23
165.101.66.0/23
165.101.70.0/23
165.101.144.0/23
165.101.170.0/23
165.101.208.0/23
165.101.244.0/23
167.189.0.0/16
167.220.244.0/22
168.160.0.0/16
170.179.0.0/16
192.51.172.0/23
192.55.46.0/23
192.55.68.0/22
192.102.204.0/22
192.232.34.0/23
192.232.44.0/22
198.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:e7:49:2c:56:40:31:27:08:f2:51:71:ae:12:be:26:a1:28:
c8:f0:8f:b1:ce:a3:b8:eb:de:b4:ce:9f:11:f7:dd:64:33:bf:
d9:50:f6:5b:6c:22:c8:19:9c:d0:ee:02:63:08:bb:36:b2:79:
4b:94:f8:4c:2c:23:54:90:3e:62:9d:eb:3e:72:40:44:a8:0f:
e2:d2:27:29:00:25:a3:3a:d9:36:08:3a:9e:a1:4c:98:6a:7d:
5e:68:f7:d6:7a:e0:38:3a:80:1b:c7:2c:a6:ee:ee:44:31:b0:
30:4d:bb:8a:2d:93:74:37:1a:41:f1:0e:de:26:dd:d0:75:67:
a3:55:64:5c:63:29:01:f7:ad:ec:58:46:7c:02:02:b7:6d:2a:
3f:3a:69:c8:5d:56:4b:43:66:e1:09:d7:42:0e:6f:7e:65:69:
e7:d0:8e:28:4e:aa:0f:87:c3:98:b0:82:65:77:42:fc:27:a2:
8e:c5:8c:3e:61:3c:b9:df:2f:1e:cd:ca:ab:a9:bc:0d:e3:6a:
ed:3a:fe:b2:f4:e5:9d:3c:5c:70:01:44:33:4b:1e:3e:85:02:
6b:48:e8:68:e5:ca:c8:20:f0:b2:47:32:ee:c8:a4:34:35:c6:
24:98:4f:c2:4d:24:a1:ff:62:31:b3:d7:d2:5f:95:fc:a2:b0:
c5:7c:25:33
-----BEGIN CERTIFICATE-----
MIIJKTCCCBGgAwIBAgIDAIE4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgyNTAzMTkxN1oXDTI3MDkzMDAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0MDRENkY4NDA0
MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyIvRyWOK0oaPj/Q4aKfwBAX2jbByptk/B7ocu1aPfAbDr/cJ+2EB4Ys/
J9Ju91Ns9UYLlaJNYfm3ANf2iWRAsXpJNy3mpgSmVy4DC2w+0LT2bnW5G1BjEUHq
8oEMjGY03gLrpxcic4e6JpNgmboHgVcq1DKA2qPbx4CMNJ7D3CudmpAojOopFQLI
n9wfTZiYqlkdCDXe10DW38aD6Z/IyfGHBD/hh/tLeFHLulh3QwIyoalIrbow8poU
BqHO0k/1e2EXnZAlrMMGBmR+V4Ihx676NzfpGhoIayRaFLQGQERgi57hvT6/JHw1
+hltbt9ZUpjoMRw6dSR50KED+EgyFQIDAQABo4IGGjCCBhYwHQYDVR0OBBYEFMsC
FKXEBNb4QEM7Egysu1uMWeYTMB8GA1UdIwQYMBaAFHQBZagNEHGXCrwJwCtxwax8
HW4OMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy
MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9kQUZscUEwUWNaY0t2QW5BSzNIQnJI
d2RiZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJnNC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBAQYIKwYBBQUHAQsEgfQwgfEwQgYIKwYB
BQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM5MDc3
NTA5MDY3NTcxNS8wLzBuBggrBgEFBQcwCoZicnN5bmM6Ly9ycGtpLXJwcy5jbm5p
Yy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1LzAvQ0IwMjE0QTVDNDA0RDZG
ODQwNDMzQjEyMENBQ0JCNUI4QzU5RTYxMy5tZnQwOwYIKwYBBQUHMA2GL2h0dHBz
Oi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3RpZmljYXRpb24ueG1sMIIDawYI
KwYBBQUHAQcBAf8EggNaMIIDVjCCA1IEAgABMIIDSgMDAShIAwQHKH2AAwQGKH5A
AwMAKKIwCgMDAi9cAwMHLwADAwI0UAMDATSCAwMBNt4DBAZETwADBAZF5sADBAZF
54ADBAZF6sADBAZF64AwDAMEBkeDwAMEBkeEAAMEBkeIQAMEBkeJAAMEAYr8SAME
AYr8TgMEAYr8dgMEAYr8ogMDAIsJAwMAi4EDAwCLlAMDAIubAwMAi58DAwCLsAMD
AIu3AwMAi7oDAwKLxAMDAIvZMAoDAwCL2wMDAYvcAwMAi+ADAwCMjwMDAIyzAwMA
jM0DAwCM0gMDAI9AAwQBkE8EAwQBkE8KAwQBkE8cAwQBkE8qAwQBkE82AwQBkE9U
AwQBkE92AwQBkE+UAwQHmGiAMAwDBAGdCiIDBAGdCiQDBAGdCnADBAGdCoIwDAME
AZ0K2gMEAZ0K3AMEAZ0K9gMEAZ0PSgMEAZ0PXjAMAwQCnQ9kAwQBnQ9oAwQBnRSI
AwQBnRTCAwQBnRT2AwQBnUIqAwQBnUJGAwQDnUJYAwQBnUKkAwQBnUL0AwMAnjwD
BAKejPwDAwCfGwMEAaATTAMEAaATUgMEAqAUEAMEAaAUggMEAaAWOgMEAaAWUgME
AaAWlAMEAaAWvAMEAaAW4AMEAaAW5gMEAqAW9DAMAwQBoBkKAwQBoBkMAwQBoBnC
AwQBoB4oAwQBoB6WMAwDBAGgHsIDBAOgHsADBAGgHuYDBACgu98DBAKgu/wDBAGg
vwADBAGgv2gDBAGgv24DBAGg7E4DBAGg7JQDBAGg7KIDBAGg7OoDBAGg7PowDAME
AaD6DgMEAqD6EAMEAaD6VAMEAaD6WjAMAwQBoPpmAwQBoPpoAwQBoPqgAwQBoPqq
AwQBoPrWAwQBoPr8AwMAob0DAwChzwMEAaH4FAMEAaH4KgMEAaH4VAMEAaH4XDAM
AwQCofhsAwQBofhwAwQBogQ2AwQBogSIAwQBogSoAwQBogTGAwQBogTKAwQBogTm
AwQBpWUEAwQBpWVCAwQBpWVGAwQBpWWQAwQBpWWqAwQBpWXQAwQBpWX0AwMAp70D
BAKn3PQDAwCooAMDAKqzAwQBwDOsAwQBwDcuAwQCwDdEAwQCwGbMAwQBwOgiAwQC
wOgsAwQCxq9kMA0GCSqGSIb3DQEBCwUAA4IBAQAq50ksVkAxJwjyUXGuEr4moSjI
8I+xzqO46960zp8R991kM7/ZUPZbbCLIGZzQ7gJjCLs2snlLlPhMLCNUkD5ines+
ckBEqA/i0icpACWjOtk2CDqeoUyYan1eaPfWeuA4OoAbxyym7u5EMbAwTbuKLZN0
NxpB8Q7eJt3QdWejVWRcYykB963sWEZ8AgK3bSo/OmnIXVZLQ2bhCddCDm9+ZWnn
0I4oTqoPh8OYsIJld0L8J6KOxYw+YTy53y8ezcqrqbwN42rtOv6y9OWdPFxwAUQz
Sx4+hQJrSOho5crIIPCyRzLuyKQ0NcYkmE/CTSSh/2Ixs9fSX5X8orDFfCUz
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:34:39 2026 by rpki-client