Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
File: jAllti4Iqf0W-3-aGF-tRDhUcWI.cer (raw, json)
Hash identifier: Mw3mkvoZxXmn7we0ixYNolqsvRt693rbK1LmXUZshwQ=
Subject key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B575
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 19 May 2026 01:29:12 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 7497
AS: 37944
AS: 37951
IP: 36.254.0.0/16
IP: 49.210.0.0/15
IP: 60.245.128.0/17
IP: 101.252.0.0/15
IP: 103.2.208.0/22
IP: 116.90.184.0/21
IP: 116.215.0.0/16
IP: 117.103.16.0/20
IP: 119.78.0.0/15
IP: 119.232.0.0 -- 119.233.127.255
IP: 124.16.0.0/15
IP: 150.242.4.0/22
IP: 202.90.224.0/21
IP: 202.127.0.0/21
IP: 202.127.16.0/20
IP: 202.127.144.0/20
IP: 210.72.0.0 -- 210.72.159.255
IP: 210.73.0.0/18
IP: 210.75.160.0/19
IP: 210.75.224.0/19
IP: 210.76.192.0/19
IP: 210.77.0.0/19
IP: 210.77.64.0/19
IP: 211.147.192.0/20
IP: 211.156.64.0/20
IP: 211.156.160.0/20
IP: 211.167.160.0/20
IP: 218.244.64.0/19
IP: 223.192.0.0/15
IP: 2001:cc0::/32
IP: 2400:dd00::/28
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177525 (0x2b575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 19 01:29:12 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:30:6e:ea:4d:8c:b2:bb:9b:c1:70:07:3b:
8f:ea:aa:ca:f4:93:34:85:ad:24:26:9c:8b:2e:41:
15:ba:32:2c:00:30:7f:01:ff:9e:bd:ed:a5:21:0e:
fc:a9:52:86:ca:69:1d:af:e7:21:f3:bc:3b:a0:11:
e9:98:f2:6d:d2:87:ea:32:42:67:af:6d:ed:00:69:
4b:d5:89:b8:23:d1:ab:63:dd:b6:83:37:a8:64:bc:
b2:17:94:50:00:c4:7c:d8:59:75:90:4a:ec:a1:5a:
0b:bd:12:6e:5a:69:fb:08:5d:35:9b:11:31:f8:c5:
dc:62:a8:25:f7:0e:b8:02:f7:dd:d6:5b:d6:61:de:
a8:d2:bb:3a:13:ee:ce:0b:e6:ea:21:1b:78:60:40:
25:81:42:48:f3:dd:0e:fe:fa:e5:c0:04:24:f8:ab:
4c:f6:4f:71:9b:14:ab:45:6c:de:48:a2:cc:2c:be:
e4:81:93:e5:bc:30:48:bb:cd:c4:1d:28:5e:77:17:
37:37:51:26:ac:5d:7b:61:ca:d1:08:88:18:73:46:
34:23:ff:81:10:ba:44:51:e8:1e:fe:3e:57:b2:3c:
0e:a4:d5:ca:84:18:f4:8f:15:fd:75:c9:e5:0a:87:
ce:5a:d4:65:14:a1:de:b4:c7:5c:31:02:75:44:e8:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7497
37944
37951
sbgp-ipAddrBlock: critical
IPv4:
36.254.0.0/16
49.210.0.0/15
60.245.128.0/17
101.252.0.0/15
103.2.208.0/22
116.90.184.0/21
116.215.0.0/16
117.103.16.0/20
119.78.0.0/15
119.232.0.0-119.233.127.255
124.16.0.0/15
150.242.4.0/22
202.90.224.0/21
202.127.0.0/21
202.127.16.0/20
202.127.144.0/20
210.72.0.0-210.72.159.255
210.73.0.0/18
210.75.160.0/19
210.75.224.0/19
210.76.192.0/19
210.77.0.0/19
210.77.64.0/19
211.147.192.0/20
211.156.64.0/20
211.156.160.0/20
211.167.160.0/20
218.244.64.0/19
223.192.0.0/15
IPv6:
2001:cc0::/32
2400:dd00::/28
Signature Algorithm: sha256WithRSAEncryption
6a:64:a5:d9:65:70:4d:0a:a6:ed:65:21:db:55:56:53:11:bf:
c0:01:14:1f:67:6a:9b:48:aa:06:6c:e2:26:4a:e7:05:45:d6:
40:f9:6a:7a:bf:48:81:52:83:4f:da:ca:dc:30:92:76:b6:80:
12:e3:96:90:76:55:72:c1:b9:8e:a1:20:e5:eb:d7:3a:40:d5:
b2:9f:02:69:76:d1:75:e2:03:9e:b5:9f:b8:f8:a7:97:1e:fd:
17:31:99:be:ab:a0:db:6c:2c:da:24:8c:03:40:92:2f:93:3c:
08:15:68:4f:f4:47:2c:5f:fd:a2:0e:dc:32:cc:2a:54:3f:94:
f4:12:b1:e6:bc:f2:58:9d:66:0e:66:a0:76:47:4e:c6:47:6b:
11:d7:f9:b3:ec:fb:49:48:7a:7a:d0:f2:63:53:1a:64:99:ad:
bc:96:96:04:ee:37:0c:3a:a7:c9:10:f5:9c:a4:9f:a3:50:3f:
e9:bb:a7:f9:30:c5:72:8a:a0:23:3d:4e:42:8a:28:d6:6f:ee:
7a:55:df:fc:2e:a5:4f:99:c4:9f:c8:56:51:a9:2c:94:37:be:
76:b0:be:dd:01:94:9b:49:77:81:eb:41:fc:4a:bf:ec:b9:44:
af:d4:06:8c:f4:e8:27:6a:40:0c:a6:29:9a:af:7b:11:96:7c:
62:b9:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:45 2026 by rpki-client