
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
File: chw2Z39Z_uqbZwezIlPzBi_fyJk.cer (raw, json)
Hash identifier: VLfVs2axrxOGR83Ft4gRO9Ff+b5RMJ6yWD73IYX5ak4=
Subject key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BE3D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 18 Jun 2026 14:16:45 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 151951
IP: 103.181.164.0/23
IP: 2400:5a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179773 (0x2be3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 18 14:16:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:57:33:b5:bd:8e:cf:22:45:a9:28:95:88:
ef:0d:42:8c:55:35:fc:72:b8:8b:25:36:96:28:dd:
c7:c3:b9:4e:00:45:64:14:1e:15:e8:27:17:a1:83:
80:78:06:c4:87:8a:78:ad:3e:49:ac:27:99:c4:87:
a2:e7:c5:16:0c:f0:7b:99:a7:e8:45:4c:0e:23:3f:
d8:a9:6d:78:bb:df:6f:26:a9:b8:09:23:31:15:a0:
68:07:3c:56:fb:99:a7:10:8b:8e:48:5b:4b:75:90:
33:62:cb:9e:66:75:eb:d5:5f:59:f6:ee:44:15:24:
e5:d7:e3:60:47:0c:bc:f1:41:38:57:fd:d2:33:f1:
17:8e:66:66:f4:97:f4:63:7d:e4:1d:f3:7e:08:5d:
aa:85:d6:68:9c:93:5c:7b:51:e7:9d:01:7b:c3:45:
33:e3:60:ef:df:87:36:d5:fd:14:24:f5:74:a3:e2:
ce:1d:dc:79:68:1c:b4:aa:a1:a8:c6:03:f9:00:d6:
6b:0e:a2:93:14:de:07:fb:e3:69:29:74:46:ad:e6:
d6:f6:0e:4c:65:28:6b:45:37:de:51:e6:dc:25:b5:
fb:ac:95:f1:7b:94:14:78:2c:bb:bb:cb:1a:c5:24:
a5:9a:a2:30:49:59:13:d8:25:a7:22:7c:88:fd:e7:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151951
sbgp-ipAddrBlock: critical
IPv4:
103.181.164.0/23
IPv6:
2400:5a60::/32
Signature Algorithm: sha256WithRSAEncryption
ab:f9:66:78:80:57:73:f8:ba:b6:7f:29:3b:7c:03:df:29:72:
70:25:b8:4b:01:d9:a9:86:c7:1b:df:aa:da:f5:bd:5e:6c:f6:
ad:7a:e7:d0:c8:40:b1:d4:06:7c:41:06:57:74:b5:9c:14:41:
c6:11:ca:fd:5e:e7:a8:0c:37:1f:22:10:d4:d9:e5:1c:18:c2:
17:0a:06:5f:48:c2:a1:3e:63:3a:68:bc:87:69:15:ea:53:af:
4d:27:48:0e:d3:f8:39:28:fc:96:68:2b:93:08:f9:ff:2a:52:
55:ba:e0:db:01:5c:b6:5b:0d:3a:9d:3a:dd:de:df:d1:16:3c:
fc:b7:ae:b0:fe:96:d7:16:e3:0a:55:f9:0b:c2:e6:0f:47:66:
8b:cf:2f:c7:46:0b:13:06:db:ca:c6:0f:7b:cd:00:0d:6b:8f:
40:65:5f:4f:e5:c9:18:fc:61:fe:61:cf:8a:c9:e6:3a:c5:58:
63:bf:36:c1:b4:7a:62:3f:79:6b:29:a2:5e:91:71:ed:c6:72:
c6:92:83:ab:46:fc:aa:ab:7e:51:15:c0:9e:5a:fd:40:92:21:
1c:5a:97:b0:39:42:e1:a4:94:99:99:6c:c5:ff:92:61:6d:b9:
b4:76:f4:32:ad:23:e9:8e:1b:56:3e:23:28:a7:15:67:f1:a2:
9a:ca:b0:c9
-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgIDAr49MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYxODE0MTY0NVoXDTI3MDUyODAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEyg3MjFDMzY2NzdGNTlGRUVBOUI2
NzA3QjMyMjUzRjMwNjJGREZDODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwwtXM7W9js8iRakolYjvDUKMVTX8criLJTaWKN3Hw7lOAEVkFB4V6CcX
oYOAeAbEh4p4rT5JrCeZxIei58UWDPB7mafoRUwOIz/YqW14u99vJqm4CSMxFaBo
BzxW+5mnEIuOSFtLdZAzYsueZnXr1V9Z9u5EFSTl1+NgRwy88UE4V/3SM/EXjmZm
9Jf0Y33kHfN+CF2qhdZonJNce1HnnQF7w0Uz42Dv34c21f0UJPV0o+LOHdx5aBy0
qqGoxgP5ANZrDqKTFN4H++NpKXRGrebW9g5MZShrRTfeUebcJbX7rJXxe5QUeCy7
u8saxSSlmqIwSVkT2CWnInyI/eeH/wIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFHIc
Nmd/Wf7qm2cHsyJT8wYv38iZMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBAQYIKwYBBQUHAQsEgfQwgfEwQgYIKwYB
BQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMx
MjEyMTY1NTMxMy8wLzBuBggrBgEFBQcwCoZicnN5bmM6Ly9ycGtpLXJwcy5jbm5p
Yy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzAvNzIxQzM2Njc3RjU5RkVF
QTlCNjcwN0IzMjI1M0YzMDYyRkRGQzg5OS5tZnQwOwYIKwYBBQUHMA2GL2h0dHBz
Oi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3RpZmljYXRpb24ueG1sMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwJRjzAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEAWe1pDANBAIAAjAHAwUAJABaYDANBgkqhkiG9w0BAQsFAAOCAQEAq/lmeIBX
c/i6tn8pO3wD3ylycCW4SwHZqYbHG9+q2vW9Xmz2rXrn0MhAsdQGfEEGV3S1nBRB
xhHK/V7nqAw3HyIQ1NnlHBjCFwoGX0jCoT5jOmi8h2kV6lOvTSdIDtP4OSj8lmgr
kwj5/ypSVbrg2wFctlsNOp063d7f0RY8/LeusP6W1xbjClX5C8LmD0dmi88vx0YL
EwbbysYPe80ADWuPQGVfT+XJGPxh/mHPisnmOsVYY782wbR6Yj95aymiXpFx7cZy
xpKDq0b8qqt+URXAnlr9QJIhHFqXsDlC4aSUmZlsxf+SYW25tHb0Mq0j6Y4bVj4j
KKcVZ/GimsqwyQ==
-----END CERTIFICATE-----
Generated at Sun Jul 5 06:53:58 2026 by rpki-client