Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
File: AYLUzQxtIdwsKW7SYGpw15bVu7k.cer (raw, json)
Hash identifier: Sg4+TtIetgC/73DpdstxzcOdcLCCyyZxkwYOW67Woxs=
Subject key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BAD7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 04 Jun 2026 06:33:48 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 9535
AS: 9936
AS: 10095
AS: 23924
AS: 55461 -- 55463
AS: 55466
AS: 55515
AS: 55641
AS: 55739
AS: 55849
AS: 55883
AS: 55886
AS: 55929
AS: 55937
AS: 56019
AS: 56053
AS: 56116
AS: 56119
AS: 56127
AS: 56176
AS: 56187
AS: 56230
AS: 56279
AS: 56292
AS: 56314
AS: 58410
AS: 58412
AS: 58415 -- 58417
AS: 58879
AS: 58888
AS: 63918
AS: 131300 -- 131301
AS: 131307
AS: 131311
AS: 131319 -- 131320
AS: 131326 -- 131327
AS: 131335 -- 131336
AS: 131449 -- 131450
AS: 131456 -- 131457
AS: 131469 -- 131470
IP: 101.36.0.0 -- 101.36.95.255
IP: 101.38.0.0 -- 101.41.255.255
IP: 110.165.32.0/19
IP: 118.26.0.0/19
IP: 118.26.40.0/21
IP: 118.26.56.0 -- 118.26.95.255
IP: 118.26.112.0/21
IP: 118.26.128.0/22
IP: 118.26.133.0 -- 118.26.143.255
IP: 118.26.160.0/20
IP: 118.26.188.0 -- 118.26.255.255
IP: 118.28.0.0/15
IP: 118.184.0.0/17
IP: 118.186.0.0 -- 118.188.255.255
IP: 118.191.0.0 -- 118.191.12.255
IP: 118.191.16.0/21
IP: 118.191.64.0 -- 118.191.83.255
IP: 118.191.128.0/19
IP: 118.191.176.0 -- 118.191.208.255
IP: 118.191.216.0/22
IP: 118.191.223.0 -- 118.191.224.255
IP: 118.191.240.0 -- 118.193.7.255
IP: 118.193.48.0/21
IP: 118.193.96.0 -- 118.193.255.255
IP: 118.194.128.0 -- 118.194.227.255
IP: 118.194.240.0/21
IP: 122.8.0.0/17
IP: 122.8.192.0/18
IP: 122.10.128.0/22
IP: 122.10.164.0 -- 122.10.195.255
IP: 122.10.200.0 -- 122.10.215.255
IP: 122.10.228.0 -- 122.10.243.255
IP: 122.14.0.0 -- 122.14.191.255
IP: 123.58.32.0 -- 123.58.95.255
IP: 123.58.128.0/18
IP: 123.58.224.0/20
IP: 2401:a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 00:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178903 (0x2bad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 06:33:48 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:db:3c:01:b1:6b:45:0a:13:c5:af:a2:be:
99:38:0f:ae:de:2f:fc:72:ec:b0:23:77:44:f6:6b:
21:d6:a9:0f:41:21:10:6b:3e:e4:aa:19:8c:69:0b:
8f:91:ef:ae:ac:e3:46:38:26:0c:3b:3d:f8:94:f0:
10:ed:26:ad:f0:61:b8:e4:b4:c2:b7:18:bc:fa:a9:
52:70:34:41:f4:fd:49:2e:96:bb:18:d6:5d:f5:13:
6a:af:d2:47:34:ca:54:72:50:54:6b:7f:52:88:98:
a1:7f:4e:90:12:ac:24:fb:10:d3:9c:56:fc:86:41:
c6:24:0a:5a:88:1a:99:19:4c:6c:75:7c:d9:7a:1a:
c5:ae:cf:40:8a:53:e2:dd:4f:b4:74:52:ac:0b:88:
41:1f:c1:fc:35:62:05:d7:3d:8b:e8:d7:95:45:be:
c5:8e:04:0a:ed:f4:20:ab:d8:a9:ba:c2:e4:16:df:
5a:26:fe:28:e8:4a:e5:e9:d3:63:55:b4:6f:7f:3a:
0b:07:a7:69:5c:08:fd:2f:44:fe:92:6a:9e:0a:17:
11:bf:03:17:4d:1c:0d:88:10:d6:21:60:6c:b2:97:
de:22:4e:ec:5e:d1:60:87:9d:66:c3:83:dd:29:b7:
66:e6:a7:a2:fe:88:a3:1c:3a:88:0d:a4:c9:35:a0:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9535
9936
10095
23924
55461-55463
55466
55515
55641
55739
55849
55883
55886
55929
55937
56019
56053
56116
56119
56127
56176
56187
56230
56279
56292
56314
58410
58412
58415-58417
58879
58888
63918
131300-131301
131307
131311
131319-131320
131326-131327
131335-131336
131449-131450
131456-131457
131469-131470
sbgp-ipAddrBlock: critical
IPv4:
101.36.0.0-101.36.95.255
101.38.0.0-101.41.255.255
110.165.32.0/19
118.26.0.0/19
118.26.40.0/21
118.26.56.0-118.26.95.255
118.26.112.0/21
118.26.128.0/22
118.26.133.0-118.26.143.255
118.26.160.0/20
118.26.188.0-118.26.255.255
118.28.0.0/15
118.184.0.0/17
118.186.0.0-118.188.255.255
118.191.0.0-118.191.12.255
118.191.16.0/21
118.191.64.0-118.191.83.255
118.191.128.0/19
118.191.176.0-118.191.208.255
118.191.216.0/22
118.191.223.0-118.191.224.255
118.191.240.0-118.193.7.255
118.193.48.0/21
118.193.96.0-118.193.255.255
118.194.128.0-118.194.227.255
118.194.240.0/21
122.8.0.0/17
122.8.192.0/18
122.10.128.0/22
122.10.164.0-122.10.195.255
122.10.200.0-122.10.215.255
122.10.228.0-122.10.243.255
122.14.0.0-122.14.191.255
123.58.32.0-123.58.95.255
123.58.128.0/18
123.58.224.0/20
IPv6:
2401:a00::/32
Signature Algorithm: sha256WithRSAEncryption
98:f5:fc:5e:75:6c:a0:8e:45:78:38:30:ba:10:96:70:17:3d:
a3:92:3e:c5:89:3d:f5:28:25:0a:b0:2b:f0:07:65:3d:99:f7:
98:2d:4a:42:3f:3d:3d:8b:6f:9f:9f:49:30:f9:32:38:14:c8:
14:8a:4e:84:2b:d4:fd:3d:29:b9:95:20:33:62:db:a4:74:28:
58:e4:7b:66:71:17:c3:75:14:ec:27:1b:0b:be:2f:f7:80:2c:
a9:6a:a4:5c:e5:bd:82:27:b1:f3:f2:f2:e8:c8:41:bf:75:14:
d8:c0:a9:a2:0c:8c:cb:b7:9c:43:29:2c:69:62:c3:de:fc:77:
37:0a:97:67:ba:7f:46:04:f3:cf:15:65:f9:a1:92:6e:0c:4f:
cd:3a:d9:72:76:95:89:d9:ab:36:ce:5e:02:76:7d:f1:98:c8:
5b:04:00:b6:ba:e0:24:2e:95:7e:f0:af:4c:47:80:88:49:77:
cb:52:76:ab:cb:ef:52:a2:bc:53:45:e2:e9:4b:30:d9:3a:62:
65:1c:d4:6b:dc:ff:c6:16:16:4a:20:40:06:1a:68:cd:e4:68:
7d:f7:1e:23:4e:b5:5b:1e:8a:2a:2b:f0:b3:fc:a4:70:7c:37:
22:c7:94:35:ea:d5:eb:a9:84:d3:2e:ad:5c:2b:35:4c:28:4f:
7e:13:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:16 2026 by rpki-client