Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.cer (raw, json)
Hash identifier: A2xoVJengK5WNCKDhPG1s/2bq+JbnUPro94lWQ+mOeA=
Subject key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E16F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:07:29 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 63578
AS: 63708
IP: 43.247.88.0/22
IP: 43.255.84.0/22
IP: 43.255.212.0/22
IP: 45.65.24.0/21
IP: 103.210.160.0/22
IP: 103.210.172.0 -- 103.210.183.255
IP: 103.228.160.0/22
IP: 103.229.212.0/22
IP: 139.5.60.0/22
IP: 160.19.208.0/22
IP: 163.53.168.0/22
IP: 211.150.192.0/18
IP: 211.154.96.0/19
IP: 2404:1f40::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57711 (0xe16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:07:29 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:da:a8:7d:55:00:5e:71:1f:36:a2:62:ca:
a1:e6:27:7a:5a:fb:40:6a:98:06:bc:44:f3:67:48:
f6:93:32:8f:c6:a2:aa:0a:38:27:d0:83:b0:fa:37:
ce:23:bf:f0:1f:a1:d9:f8:fe:33:b7:e3:18:2f:d4:
be:0c:e4:87:8c:99:cc:78:c0:18:13:27:66:eb:09:
6b:6f:a9:93:3b:ad:5a:42:b1:35:41:a1:7b:f3:f2:
04:f4:e3:c9:a4:a7:b0:70:de:12:87:a7:e5:94:ad:
77:76:ff:9b:64:b2:61:cd:ec:72:c2:13:0e:69:d9:
d0:a9:67:f0:90:a4:70:ad:d3:f1:70:84:77:22:96:
c9:1e:db:6b:6c:c3:97:8f:15:3c:dd:40:d3:88:74:
c8:eb:41:d9:e5:cf:3c:7a:90:00:77:c2:f9:0d:ba:
0c:8d:5d:c2:79:4b:09:a9:df:55:fa:10:7c:ba:36:
41:b9:7e:ab:02:83:c4:0d:8b:81:bd:cc:85:c3:99:
e1:3f:11:54:3e:65:22:06:51:ff:8f:bd:0b:5f:c7:
17:c1:8e:9a:d8:4a:7f:ce:cd:10:f4:8a:9f:e8:e1:
8f:4e:01:fd:1a:86:23:e8:25:ef:5c:a5:9d:02:69:
52:ec:d6:09:c9:e2:3d:a3:f7:75:ee:67:a4:fd:29:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63578
63708
sbgp-ipAddrBlock: critical
IPv4:
43.247.88.0/22
43.255.84.0/22
43.255.212.0/22
45.65.24.0/21
103.210.160.0/22
103.210.172.0-103.210.183.255
103.228.160.0/22
103.229.212.0/22
139.5.60.0/22
160.19.208.0/22
163.53.168.0/22
211.150.192.0/18
211.154.96.0/19
IPv6:
2404:1f40::/32
Signature Algorithm: sha256WithRSAEncryption
38:c4:6b:fc:b6:64:48:4a:86:77:82:7d:bb:41:3e:25:9b:c3:
b4:e4:27:28:03:45:47:4b:87:f3:ae:b2:bb:09:4a:52:4c:9a:
f9:e3:9c:b7:30:a5:7c:96:5e:0d:65:5e:ad:50:64:b6:01:bb:
82:0b:e2:e5:c7:fb:34:f4:a1:01:cc:c3:a6:2c:73:6e:b1:88:
57:76:c5:e4:0a:4b:e8:4c:52:ea:a1:2a:78:96:2e:d7:b6:f6:
20:db:a7:3f:34:2e:77:d7:b7:38:58:ec:c0:90:27:70:4c:fc:
48:2d:f2:e9:f0:18:d2:17:1c:aa:4a:b7:7f:08:53:d8:e7:c8:
e9:55:6f:f0:79:cd:db:f1:f4:bf:9c:84:8f:a9:95:a8:18:f9:
3b:7f:02:05:6e:03:64:75:d3:7a:c2:8f:c1:c3:ca:96:60:76:
66:ee:55:e0:f6:9e:14:64:ad:ed:d9:fd:6f:4e:41:bf:1e:b2:
61:40:1d:f0:9b:ea:5c:fa:8a:b1:74:22:3e:ba:0e:4f:89:f1:
62:65:26:ec:97:9c:60:af:bd:92:36:6b:4d:f4:5b:15:82:0b:
9f:fb:17:c9:45:40:0c:48:11:a3:b8:3d:44:df:06:c9:2f:fb:
8e:a6:60:32:00:44:c8:0a:e8:b0:f5:ba:1f:a6:56:bc:81:7a:
13:b6:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 13:22:50 2025 by rpki-client