Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer
File: JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer (raw, json)
Hash identifier: 6ylbmR9Cff0n/hwHq/RqVHWQ8AVbI8RhRV9zLJoMF20=
Subject key identifier: 24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DBC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 26 Aug 2025 01:20:40 +0000
Certificate not after: Wed 26 Aug 2026 01:18:16 +0000
Subordinate resources: AS: 58840
IP: 110.236.0.0/15
IP: 113.18.0.0/16
IP: 182.157.0.0/16
IP: 2407:c400::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Sep 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56260 (0xdbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 26 01:20:40 2025 GMT
Not After : Aug 26 01:18:16 2026 GMT
Subject: CN=240ED9E7AD0A83829D8F1A990C9FF94D6A106ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:5e:00:a0:19:90:67:88:03:7f:49:fd:df:
90:57:76:f6:f5:a5:65:28:50:a4:45:96:c7:c6:70:
7c:3a:02:37:34:e7:27:53:97:c1:df:57:e4:ca:7f:
1c:e1:75:11:4b:5d:3c:46:04:86:72:38:f3:7e:d9:
16:20:12:ab:a5:9d:3e:1a:44:cf:10:ee:d2:d8:64:
3a:bb:7a:83:61:ad:b9:31:fc:f1:ea:74:71:fc:bb:
ac:ef:c9:7b:21:c2:2f:7e:00:04:0d:55:ea:a9:40:
bd:a0:06:e1:3e:a4:db:f1:9c:5c:4b:a3:c7:8b:96:
90:69:17:8a:af:53:d0:0c:73:ee:32:ea:f6:d3:cf:
30:92:97:de:d7:cd:45:88:fa:e6:fc:cc:bb:28:5b:
fc:31:8f:6e:b6:9c:f4:a7:42:8e:4d:6f:fd:f3:dc:
c6:df:3d:bd:35:7b:ff:00:93:76:06:4d:34:38:d5:
b7:28:71:80:c3:15:89:7f:b8:ae:7b:7d:f3:4f:76:
14:8f:20:de:17:e6:0a:6b:5f:72:96:e2:cf:16:2f:
c8:65:7c:2e:f7:77:cb:ad:81:5b:53:0f:6d:bc:16:
b8:a6:0f:2c:27:6a:22:10:22:02:c3:c0:f6:1a:39:
96:f7:1e:6b:ee:6b:38:c4:89:96:67:5c:be:6e:ea:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58840
sbgp-ipAddrBlock: critical
IPv4:
110.236.0.0/15
113.18.0.0/16
182.157.0.0/16
IPv6:
2407:c400::/32
Signature Algorithm: sha256WithRSAEncryption
46:d0:7c:24:f5:74:02:0a:40:2d:ca:0d:c9:60:d7:51:c2:f5:
33:65:7f:d2:1c:72:59:ff:0f:6b:94:84:fd:66:42:4c:bb:d5:
02:ee:b2:f0:ab:36:a8:48:0d:bb:8b:8b:6a:9e:5d:a8:8e:f8:
c6:13:38:c5:b1:f6:44:4b:42:ef:f4:5c:bb:70:53:66:f9:20:
4a:ee:20:3e:30:48:26:38:84:df:e0:18:6c:e7:8f:30:63:25:
92:7c:31:f3:64:05:41:93:0d:11:23:e8:01:01:03:97:97:2f:
6b:16:12:a7:57:d2:b1:6b:b2:4a:eb:69:7b:ae:8d:0e:b0:91:
76:3b:17:de:3a:2f:17:1f:1d:09:a9:9b:3b:43:15:ae:3b:ef:
e7:71:49:bf:bf:ca:8f:0d:1a:11:12:d7:32:35:f9:4c:92:e2:
2a:4a:ca:dd:ee:ff:04:7f:00:24:6b:09:82:7a:a5:d3:3b:81:
bd:5c:17:32:51:ae:4a:a6:36:d3:c5:ac:36:2f:65:26:0d:24:
42:86:59:f9:1c:27:f8:51:38:65:cc:c1:52:c4:2c:5c:11:2a:
a0:90:50:d0:fc:24:e0:4b:0d:d3:5e:1e:1b:c3:15:d4:10:fd:
6d:cb:d0:e1:55:9b:92:df:f5:52:a9:b9:8f:b7:d8:28:dc:e5:
74:d0:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:58:25 2025 by rpki-client