Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gL0CjXa7PVXmZBaamvDfKpjHUFU.cer
File: gL0CjXa7PVXmZBaamvDfKpjHUFU.cer (raw, json)
Hash identifier: heWZTtkPP3tc1m/xR9R2nbxzE40ZUZ0CTSV8i2Hcdec=
Subject key identifier: 80:BD:02:8D:76:BB:3D:55:E6:64:16:9A:9A:F0:DF:2A:98:C7:50:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E0FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/gL0CjXa7PVXmZBaamvDfKpjHUFU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:06:13 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 146772
IP: 45.248.108.0/22
IP: 45.250.180.0 -- 45.250.187.255
IP: 45.251.0.0/22
IP: 103.191.242.0/23
IP: 103.216.252.0/22
IP: 103.219.84.0 -- 103.219.91.255
IP: 103.219.100.0/22
IP: 2405:80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 02:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57599 (0xe0ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:06:13 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=80BD028D76BB3D55E664169A9AF0DF2A98C75055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:64:35:3d:51:b5:d7:98:bd:c6:75:7e:ae:
24:a9:4d:6f:93:63:93:b9:87:02:f9:1d:f6:0e:39:
1d:62:c0:ce:73:a2:14:8d:19:c8:d4:eb:21:6a:4c:
cf:69:26:26:06:c3:2b:95:0b:8b:ea:a3:58:97:d0:
0c:a6:c8:49:7a:19:96:2f:9f:dc:02:4e:3b:e7:5b:
93:1c:74:c4:59:f6:85:47:8e:95:eb:27:f1:21:25:
15:2a:b5:27:56:74:f0:20:28:bd:e6:a8:5a:bd:1f:
b8:d2:a5:17:69:6c:56:85:16:f2:84:89:f5:b6:20:
05:c3:7e:ce:d8:ae:dd:f3:14:d9:9b:7b:91:5a:37:
27:82:ab:76:f3:e4:4a:d7:be:98:e3:a6:76:9e:ad:
cb:ed:d6:d5:59:39:8b:76:e1:64:67:4e:45:69:6e:
1d:e7:85:3c:25:f3:69:3d:98:f5:67:58:37:49:37:
37:2b:57:95:8c:89:6b:9b:93:b6:01:63:cd:f8:20:
a2:9a:00:03:fe:0e:11:29:91:df:22:01:56:77:b2:
45:0d:78:17:10:18:d7:3f:c6:db:76:44:30:c0:40:
dd:b4:b3:1a:55:2e:99:a7:10:df:8f:28:f4:f2:98:
4b:04:99:9f:58:58:85:47:a3:67:ad:e6:87:16:6f:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:02:8D:76:BB:3D:55:E6:64:16:9A:9A:F0:DF:2A:98:C7:50:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3164/gL0CjXa7PVXmZBaamvDfKpjHUFU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146772
sbgp-ipAddrBlock: critical
IPv4:
45.248.108.0/22
45.250.180.0-45.250.187.255
45.251.0.0/22
103.191.242.0/23
103.216.252.0/22
103.219.84.0-103.219.91.255
103.219.100.0/22
IPv6:
2405:80::/32
Signature Algorithm: sha256WithRSAEncryption
31:4a:37:13:a7:6d:16:e6:0b:ef:3f:2a:92:4a:1b:fd:88:94:
09:bd:96:fe:59:9c:ba:e8:b7:4d:26:1e:55:5c:31:b4:65:2a:
62:2c:0a:67:5d:d1:29:b2:da:02:b1:d6:a0:a3:dd:65:24:c5:
26:f6:cb:2d:9d:d8:ac:ba:d9:a3:5b:73:72:33:c6:48:b1:18:
8b:88:27:28:61:3b:1f:79:b1:4b:69:19:5c:7f:9d:45:fa:1e:
43:cf:2f:18:37:ec:01:17:47:7e:52:26:84:dd:aa:e4:a3:e7:
15:b6:d9:87:81:1f:2f:de:80:40:9c:56:b4:12:4a:70:4a:d9:
35:2a:77:6e:d3:2d:e3:24:24:73:7f:1b:4c:8a:cd:70:32:9d:
af:a1:05:b0:05:fa:e5:3d:47:12:88:83:5f:16:c5:2c:93:80:
ff:1e:f6:18:e8:25:9c:7b:a3:58:f2:b7:a6:be:36:e5:2a:fc:
25:8f:cd:04:68:78:8a:9b:06:56:8b:f6:de:e0:f4:bc:e2:56:
86:98:eb:ed:50:14:0f:dc:39:e0:69:e3:d9:bf:f1:4a:0d:b4:
33:a4:6b:28:4e:d3:62:7e:c6:43:5c:3a:0e:b5:66:41:1c:41:
74:3e:b8:2f:37:77:f7:ed:04:39:f5:8f:b3:58:59:0c:6c:b2:
e1:a3:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 00:50:12 2025 by rpki-client