$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer File: q8wu6vrqrw1E480gBAmZ7T6LblY.cer (raw, json) Hash identifier: OsvRo2JnivJnj908rg6FhoFoGH/t2tYzLBkFa58UKVM= Subject key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D3AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 27 May 2025 07:47:51 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 103.20.160.0/22 IP: 150.242.244.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Jun 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54191 (0xd3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: May 27 07:47:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:aa:16:47:15:70:b5:be:06:de:4a:d6:11: a1:38:c8:75:fd:5e:0f:86:9d:e0:e6:22:42:c1:f6: 3e:7e:04:38:0a:f2:2c:b3:10:5b:89:38:43:0e:1d: e2:9d:9b:d2:3b:1d:22:25:42:38:cc:92:10:85:28: f6:9d:7d:de:d3:e9:5e:7a:4f:74:ec:1c:66:be:1b: db:45:6d:9a:d7:1b:35:39:59:cb:57:ec:b8:de:dd: 18:f2:56:d0:e3:5c:22:ed:aa:75:f6:74:2f:82:1f: b5:96:81:fd:58:09:40:cc:61:e5:c6:7b:87:21:ff: 15:07:d8:33:d4:80:fe:47:13:2e:44:23:10:cf:11: 5d:93:db:9a:65:6e:fa:99:ee:f3:98:e3:e1:f6:c3: 68:a8:9d:01:55:f6:e2:4a:e9:9c:36:d2:65:b2:17: 2c:6f:80:d4:7f:0a:f4:23:df:8a:b6:73:c3:92:21: 47:54:23:f3:39:ad:15:ac:e9:0a:d1:97:e6:86:73: f4:c6:1c:00:42:29:5c:26:81:95:34:8b:56:be:29: a5:f1:52:35:d9:65:10:f7:76:39:aa:f7:42:a9:43: 74:92:c9:f3:70:95:0d:03:a3:7a:15:a1:7a:69:09: 5a:c4:2a:30:38:3d:e3:f9:cd:61:2d:af:35:d2:9b: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.20.160.0/22 150.242.244.0/22 Signature Algorithm: sha256WithRSAEncryption a7:08:10:c8:5f:70:4f:5e:f8:11:80:7b:b7:76:91:8f:5c:b7: 34:71:d7:37:aa:64:38:a5:06:b7:50:40:c6:e8:dc:f1:49:51: bd:b5:b7:82:44:75:ac:ef:ad:38:9f:77:12:04:99:de:61:a2: 55:b1:fd:d7:18:70:51:ab:aa:94:8a:1b:df:25:2a:56:11:a6: 84:9c:74:d3:3a:21:41:b6:0e:78:64:8e:57:cb:47:09:bf:1e: 7c:80:7d:85:e0:ba:6d:8b:86:1a:40:07:50:1d:3a:a8:8f:cb: 01:c9:4e:7a:ea:1e:5d:2f:d7:2b:ec:b0:25:5a:9d:9a:df:e4: 7c:f4:c7:ca:2b:b7:91:5b:b9:a8:d3:62:a0:d6:8f:da:13:a7: bb:f0:61:a9:ab:71:dc:d6:f8:e3:49:c5:03:6b:e5:e8:2f:c2: 71:98:a4:15:e5:a0:3d:10:4f:7e:83:9d:97:cc:37:47:b0:eb: b3:6d:75:fa:89:9c:8f:82:be:25:67:aa:bb:96:63:1e:42:b5: 76:f4:ae:70:c2:ba:a8:c9:aa:ae:fc:f4:c3:98:68:39:e9:49: 25:bb:de:ac:48:fb:52:42:ca:b2:64:ad:33:54:50:af:2b:b4: 9c:35:28:63:e1:9d:31:16:04:cb:4d:a8:6b:69:e5:78:ad:c4: ae:f0:c7:59 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDANOvMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA1MjcwNzQ3NTFaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKEFCQ0MyRUVBRkFFQUFGMEQ0NEUzQ0QyMDA0MDk5OUVEM0U4QjZF NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIKoWRxVwtb4G3krW EaE4yHX9Xg+GneDmIkLB9j5+BDgK8iyzEFuJOEMOHeKdm9I7HSIlQjjMkhCFKPad fd7T6V56T3TsHGa+G9tFbZrXGzU5WctX7Lje3RjyVtDjXCLtqnX2dC+CH7WWgf1Y CUDMYeXGe4ch/xUH2DPUgP5HEy5EIxDPEV2T25plbvqZ7vOY4+H2w2ionQFV9uJK 6Zw20mWyFyxvgNR/CvQj34q2c8OSIUdUI/M5rRWs6QrRl+aGc/TGHABCKVwmgZU0 i1a+KaXxUjXZZRD3djmq90KpQ3SSyfNwlQ0Do3oVoXppCVrEKjA4PeP5zWEtrzXS m7l1AgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUq8wu6vrqrw1E480gBAmZ7T6LblYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MTcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMxNy9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZxSgAwQClvL0MA0GCSqGSIb3 DQEBCwUAA4IBAQCnCBDIX3BPXvgRgHu3dpGPXLc0cdc3qmQ4pQa3UEDG6NzxSVG9 tbeCRHWs7604n3cSBJneYaJVsf3XGHBRq6qUihvfJSpWEaaEnHTTOiFBtg54ZI5X y0cJvx58gH2F4Lpti4YaQAdQHTqoj8sByU566h5dL9cr7LAlWp2a3+R89MfKK7eR W7mo02Kg1o/aE6e78GGpq3Hc1vjjScUDa+XoL8JxmKQV5aA9EE9+g52XzDdHsOuz bXX6iZyPgr4lZ6q7lmMeQrV29K5wwrqoyaqu/PTDmGg56Uklu96sSPtSQsqyZK0z VFCvK7ScNShj4Z0xFgTLTahraeV4rcSu8MdZ -----END CERTIFICATE-----Generated at Mon Jun 2 07:21:02 2025 by rpki-client