Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer (raw, json)
Hash identifier: 22d8H1+bYtDpNgY3wi9MOjhYJgot/ptzlEEKFD46TCw=
Subject key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:06:28 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 45110
IP: 43.254.228.0 -- 43.254.243.255
IP: 43.254.248.0/22
IP: 43.255.0.0/22
IP: 45.125.76.0/22
IP: 45.125.84.0 -- 45.125.103.255
IP: 103.23.160.0/22
IP: 103.103.188.0/22
IP: 103.193.212.0 -- 103.193.239.255
IP: 103.200.220.0 -- 103.201.3.255
IP: 103.201.192.0 -- 103.201.219.255
IP: 103.229.216.0/21
IP: 103.229.228.0/22
IP: 103.229.236.0 -- 103.229.243.255
IP: 111.118.200.0/21
IP: 113.21.232.0/21
IP: 114.31.64.0/21
IP: 114.141.80.0/21
IP: 119.161.120.0/21
IP: 120.136.16.0/21
IP: 202.47.104.0/21
IP: 202.57.192.0/20
IP: 202.65.96.0/22
IP: 203.114.244.0/22
IP: 2401:f7c0::/32
IP: 2403:9b00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57619 (0xe113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:06:28 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:2c:cf:1d:e3:6b:44:6f:78:c6:23:43:04:
ad:eb:e0:99:00:0b:61:37:4e:83:2e:04:8a:e2:ea:
b5:47:fb:a8:1c:9d:a3:aa:a5:a7:3d:93:5a:a5:01:
ca:62:f2:94:2b:f9:ae:ee:4b:23:62:06:d3:54:b6:
6e:3b:46:3c:4f:98:88:d8:31:d6:a8:35:d2:5e:2e:
8f:42:43:9f:8f:fb:67:11:df:32:38:26:ac:28:ca:
55:e8:05:01:55:e7:a8:8d:b2:12:08:47:72:91:34:
a7:cf:91:1c:9f:60:1c:c6:d9:0a:28:6a:74:7d:9b:
81:b4:29:b0:4a:cc:b9:45:02:49:42:4b:11:68:4e:
db:39:2c:57:a4:c1:bb:86:ff:b5:93:d0:56:7e:23:
ba:b9:c8:14:e5:6e:1e:c7:a1:04:26:93:e7:eb:5f:
54:2c:bc:ae:c7:54:81:9a:0d:20:21:55:d1:2f:79:
39:7e:27:96:a8:73:c6:6a:d6:68:42:4c:36:d2:81:
41:21:48:a8:5f:dd:bc:fe:be:14:95:a8:33:a5:a4:
2f:1c:6a:43:b1:9f:54:75:d4:b0:d9:f8:d8:86:bb:
4c:56:5c:92:19:76:69:e6:48:96:1a:c9:8f:84:9d:
16:8b:6a:a1:72:d1:0b:f6:c1:f9:79:1c:2a:a7:f3:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45110
sbgp-ipAddrBlock: critical
IPv4:
43.254.228.0-43.254.243.255
43.254.248.0/22
43.255.0.0/22
45.125.76.0/22
45.125.84.0-45.125.103.255
103.23.160.0/22
103.103.188.0/22
103.193.212.0-103.193.239.255
103.200.220.0-103.201.3.255
103.201.192.0-103.201.219.255
103.229.216.0/21
103.229.228.0/22
103.229.236.0-103.229.243.255
111.118.200.0/21
113.21.232.0/21
114.31.64.0/21
114.141.80.0/21
119.161.120.0/21
120.136.16.0/21
202.47.104.0/21
202.57.192.0/20
202.65.96.0/22
203.114.244.0/22
IPv6:
2401:f7c0::/32
2403:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
a6:3d:4e:42:a8:bb:1a:06:4a:6e:d1:e9:4b:50:64:ca:04:0e:
b0:2f:ce:ac:9e:11:08:b9:67:dc:d9:66:51:af:bd:06:3d:d6:
1b:61:99:f1:f7:7f:31:45:c5:37:d5:08:bc:18:d9:d3:68:23:
cc:db:0d:f0:08:4c:89:a9:c9:70:34:a0:a6:b4:7c:25:2d:ea:
11:59:a3:ae:9f:cc:04:5d:f5:34:29:ea:8d:28:bc:3f:92:bd:
26:da:05:5a:5d:8d:86:db:d3:7b:58:e6:dd:e4:88:fb:33:0c:
4a:32:5e:67:f2:b8:d2:c7:24:80:bc:c9:ab:71:13:8e:ce:a7:
79:e3:15:d2:aa:ea:49:48:81:18:10:f7:28:ff:2e:dd:de:ef:
ac:17:4a:06:8f:92:6e:a0:aa:62:44:f1:bb:a5:53:44:46:d3:
72:c7:2b:92:be:35:58:6e:2e:55:c5:83:49:a5:dc:61:b6:ee:
3f:86:73:79:26:b4:43:a2:a0:0e:b5:5e:bb:13:db:ca:63:bb:
4d:76:0f:0f:a1:c9:05:f3:63:9f:50:21:88:17:65:fd:7f:6c:
14:66:80:87:92:e9:fc:85:8d:7e:d2:da:1b:72:55:f8:61:36:
40:8d:21:36:66:a6:0e:7a:c1:cf:db:d1:0f:1e:cc:5d:fd:0c:
88:b5:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:09:17 2025 by rpki-client