Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ab4zXmpO-5VNuniThGkpo6X2hno.cer
File: Ab4zXmpO-5VNuniThGkpo6X2hno.cer (raw, json)
Hash identifier: hgYoRtkex1RPd3+0ctGFwSUHMH2wTL34Z7FdieUk1So=
Subject key identifier: 01:BE:33:5E:6A:4E:FB:95:4D:BA:78:93:84:69:29:A3:A5:F6:86:7A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:07:57 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 151263
IP: 43.226.49.0/24
IP: 43.226.72.0/22
IP: 43.227.68.0/24
IP: 43.227.80.0/20
IP: 103.20.128.0/22
IP: 103.45.128.0/19
IP: 103.65.224.0/23
IP: 103.255.68.0/22
IP: 2401:5c20::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Oct 2025 11:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57749 (0xe195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:07:57 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=01BE335E6A4EFB954DBA7893846929A3A5F6867A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:0f:f1:3f:52:6b:1f:67:c6:d7:bf:84:34:
7b:bb:14:a1:36:68:32:66:41:c0:1a:14:d6:59:80:
38:3e:d6:80:30:cb:db:fb:21:fe:70:b9:1f:06:2c:
d0:28:99:72:82:d1:fc:00:2c:e3:a9:a7:9f:63:a4:
e4:ee:17:10:5e:a9:aa:54:8d:d7:21:17:0f:92:47:
09:b6:71:3a:dc:8b:61:a2:e7:96:be:56:34:91:d9:
dd:40:4e:61:39:35:70:5d:2d:c4:2d:1d:8f:e9:e4:
b6:67:8d:f9:ac:16:df:78:02:3a:ef:f4:4d:60:e9:
40:5c:a3:4d:eb:8c:1b:ca:b9:a6:93:c2:1f:fd:96:
5a:f2:52:df:0d:ce:58:30:20:a3:00:78:8f:5c:e0:
02:40:b2:9d:09:8b:28:ad:6a:94:50:f1:07:b6:a2:
33:2e:f2:f2:e7:e2:cf:9d:27:81:35:ca:ef:44:de:
f1:ba:0d:d7:79:9a:ac:d8:c5:73:4c:47:71:c5:45:
30:d1:77:01:95:ac:26:5e:47:c3:c7:ea:3a:9c:28:
4b:c7:f8:f7:72:54:50:35:a4:47:fc:a3:5d:9f:da:
f2:43:59:8e:cd:e8:25:72:c9:a2:32:4d:63:c9:00:
2f:9e:ce:f0:a5:9e:86:b6:7f:4a:91:7c:50:c9:ff:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:33:5E:6A:4E:FB:95:4D:BA:78:93:84:69:29:A3:A5:F6:86:7A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151263
sbgp-ipAddrBlock: critical
IPv4:
43.226.49.0/24
43.226.72.0/22
43.227.68.0/24
43.227.80.0/20
103.20.128.0/22
103.45.128.0/19
103.65.224.0/23
103.255.68.0/22
IPv6:
2401:5c20::/32
Signature Algorithm: sha256WithRSAEncryption
85:c1:9c:e2:ab:24:05:da:88:84:f9:1f:4c:08:2a:99:08:db:
77:de:98:ba:db:82:5a:c9:99:59:f5:c3:2d:31:3e:3d:84:ed:
1e:8d:42:9f:fb:a5:ba:98:e2:f3:e8:69:a8:65:b9:8b:46:1e:
b4:0a:80:d2:21:e5:6f:f8:ff:79:60:6a:59:cb:c8:c9:ee:08:
4c:83:a7:69:e0:85:96:4e:bc:a2:ef:ce:b1:0c:f4:be:09:78:
24:e6:00:3b:f4:18:74:9b:d0:a1:58:17:fe:23:97:1d:90:27:
d1:e9:fb:38:2b:0b:22:53:37:6d:87:c1:f4:d0:6f:26:82:6b:
68:4c:83:9a:ae:d0:cb:9d:cf:af:be:10:ad:1b:32:61:7c:89:
9e:46:a9:07:2d:18:ae:83:a7:8e:47:c7:f1:0e:69:8b:87:5a:
3d:7d:04:ce:7b:f2:94:c3:df:aa:85:35:9e:b1:f8:ae:20:8e:
9b:80:d1:22:c2:ad:c6:53:27:2f:61:2c:e5:11:73:b8:ec:43:
af:b2:08:10:5c:1a:99:72:23:9a:0b:62:bc:a0:c9:4d:5a:29:
a7:ca:80:ae:9b:cd:98:d8:fe:96:50:0a:b7:6f:63:c7:fc:d7:
9b:cb:e5:64:c2:7a:74:16:db:a1:3e:b4:e6:49:8c:b5:b1:9c:
37:9a:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 08:09:17 2025 by rpki-client