Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
File: sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer (raw, json)
Hash identifier: F+0L6QFo/pMEDcvmboAUl7/Rj2X65V98kYt2TlbKjjU=
Subject key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DC06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 28 Aug 2025 19:33:48 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 137718
IP: 14.103.0.0/16
IP: 27.54.192.0/18
IP: 27.103.0.0/16
IP: 27.109.32.0/19
IP: 36.0.64.0/18
IP: 42.157.64.0/18
IP: 43.236.0.0/16
IP: 43.239.0.0/19
IP: 43.247.200.0/22
IP: 45.255.0.0/18
IP: 49.4.192.0/18
IP: 60.55.0.0/16
IP: 61.45.128.0/18
IP: 101.78.32.0/19
IP: 101.96.160.0 -- 101.96.255.255
IP: 101.126.0.0/16
IP: 101.238.0.0/16
IP: 101.251.96.0/19
IP: 103.35.0.0/19
IP: 103.64.32.0 -- 103.64.127.255
IP: 103.159.142.0/23
IP: 103.223.32.0/19
IP: 103.238.20.0/22
IP: 106.2.160.0 -- 106.2.223.255
IP: 112.75.0.0/16
IP: 113.31.0.0 -- 113.31.95.255
IP: 113.209.0.0/17
IP: 115.103.0.0/16
IP: 115.181.0.0/16
IP: 115.190.0.0/15
IP: 116.70.0.0/18
IP: 116.213.64.0 -- 116.213.255.255
IP: 117.76.0.0/15
IP: 117.78.64.0 -- 117.78.255.255
IP: 117.121.0.0/19
IP: 117.121.64.0/18
IP: 117.122.128.0/18
IP: 118.126.0.0/19
IP: 118.145.32.0 -- 118.145.255.255
IP: 118.196.0.0/15
IP: 119.10.0.0/17
IP: 119.16.0.0/16
IP: 120.128.0.0 -- 120.130.255.255
IP: 123.100.0.0/19
IP: 123.137.0.0/16
IP: 123.199.160.0 -- 123.199.255.255
IP: 124.174.0.0/15
IP: 124.242.0.0/16
IP: 125.61.192.0/18
IP: 125.169.0.0/16
IP: 180.184.0.0/15
IP: 202.70.0.0/19
IP: 203.128.32.0/19
IP: 203.128.96.0/19
IP: 203.175.192.0 -- 203.176.63.255
IP: 210.16.128.0/19
IP: 210.78.96.0/19
IP: 221.136.0.0/16
IP: 223.255.0.0/17
IP: 2406:d440::/32
IP: 240b:6000::/20
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Sep 2025 10:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56326 (0xdc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 28 19:33:48 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:12:92:12:a5:7e:df:cd:3d:6c:97:6b:09:
05:5d:fa:84:b7:55:0b:84:13:53:ba:68:a9:66:b1:
cf:5e:7a:40:8a:64:a9:5f:65:be:6f:d7:07:65:a8:
8b:bb:26:5a:a7:83:0f:47:3e:ee:88:eb:2b:dc:63:
94:3b:f0:56:da:36:60:bb:77:15:6c:85:d0:34:20:
37:16:9e:cf:f7:f0:b8:f9:e7:36:ca:20:ff:0f:41:
ca:9a:ae:52:d8:4f:57:2c:ab:d2:56:96:f8:ea:0d:
d7:4c:ec:15:70:5a:b3:39:4d:83:52:a9:de:22:ce:
03:93:ce:08:80:61:13:46:d4:5b:ff:68:11:10:d8:
0a:58:db:9e:9c:ce:5c:e1:f5:f6:3e:43:9a:c7:94:
84:9a:aa:83:92:84:99:92:42:9c:b8:8e:e9:06:87:
84:70:79:a2:f9:63:1d:72:f7:9d:21:89:80:19:a0:
24:38:6a:09:47:3b:4b:b3:e9:c0:f2:b0:ab:7e:1c:
2a:e8:e9:4f:f0:c8:87:77:86:d2:d8:71:03:4f:08:
2c:c3:0e:14:99:ae:53:7d:51:f6:f6:78:d8:72:3c:
c3:ed:05:c7:42:b7:d2:c3:ba:8b:f8:e0:1e:63:39:
7c:17:5f:60:48:a2:4f:f8:00:47:48:d8:c4:93:60:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137718
sbgp-ipAddrBlock: critical
IPv4:
14.103.0.0/16
27.54.192.0/18
27.103.0.0/16
27.109.32.0/19
36.0.64.0/18
42.157.64.0/18
43.236.0.0/16
43.239.0.0/19
43.247.200.0/22
45.255.0.0/18
49.4.192.0/18
60.55.0.0/16
61.45.128.0/18
101.78.32.0/19
101.96.160.0-101.96.255.255
101.126.0.0/16
101.238.0.0/16
101.251.96.0/19
103.35.0.0/19
103.64.32.0-103.64.127.255
103.159.142.0/23
103.223.32.0/19
103.238.20.0/22
106.2.160.0-106.2.223.255
112.75.0.0/16
113.31.0.0-113.31.95.255
113.209.0.0/17
115.103.0.0/16
115.181.0.0/16
115.190.0.0/15
116.70.0.0/18
116.213.64.0-116.213.255.255
117.76.0.0/15
117.78.64.0-117.78.255.255
117.121.0.0/19
117.121.64.0/18
117.122.128.0/18
118.126.0.0/19
118.145.32.0-118.145.255.255
118.196.0.0/15
119.10.0.0/17
119.16.0.0/16
120.128.0.0-120.130.255.255
123.100.0.0/19
123.137.0.0/16
123.199.160.0-123.199.255.255
124.174.0.0/15
124.242.0.0/16
125.61.192.0/18
125.169.0.0/16
180.184.0.0/15
202.70.0.0/19
203.128.32.0/19
203.128.96.0/19
203.175.192.0-203.176.63.255
210.16.128.0/19
210.78.96.0/19
221.136.0.0/16
223.255.0.0/17
IPv6:
2406:d440::/32
240b:6000::/20
Signature Algorithm: sha256WithRSAEncryption
16:8b:cd:41:fa:5a:a0:d1:f9:0f:ab:56:ed:a5:39:db:f6:11:
99:b0:f6:10:53:5b:a2:94:5d:a0:7c:d2:e7:9f:be:64:6a:e8:
5e:2e:25:ee:81:b1:e7:a0:7d:32:11:d1:f1:65:ca:54:f3:d0:
a1:73:81:e1:5f:ea:62:a7:04:0b:20:50:8f:5c:a1:93:66:7f:
09:e3:a7:49:64:b5:e5:a6:03:59:a8:01:53:91:16:33:23:85:
5f:9a:ad:47:3a:44:95:2c:34:dd:e6:68:30:27:5e:01:d8:24:
1c:4f:b6:a8:2e:a5:df:16:c9:47:d6:81:41:75:9c:26:29:ef:
51:c9:ec:f7:c6:bd:3f:29:6f:f7:4a:b3:07:69:c1:24:90:b8:
1e:ee:67:5d:9c:04:56:1b:94:01:98:b5:ee:d1:d5:c5:23:e6:
92:47:70:fe:74:ec:48:68:56:98:1c:e3:a2:09:04:d3:ed:b6:
e6:18:30:c4:b8:05:6a:93:5f:46:83:02:d8:eb:1f:56:f6:5d:
d0:e4:98:61:66:df:a3:f8:d3:52:23:f6:7d:ec:27:8d:28:be:
41:24:ef:5d:e6:63:b8:86:14:2e:2f:39:ab:92:11:1e:a3:ed:
95:61:3b:24:33:cc:57:f0:9f:60:5e:c2:c4:95:3d:fe:0e:c3:
8d:c6:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 07:09:04 2025 by rpki-client