Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
File: 1xHsDTeBWKRHb-bqfXClSpUZWhE.cer (raw, json)
Hash identifier: CWw5QXbJcSTvGhS+uk2//3lF0Sh/BA5Eml0v0XMA4ng=
Subject key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 69F4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 19 Aug 2025 02:04:41 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 40.72.0.0/15
IP: 40.125.128.0/17
IP: 40.126.64.0/18
IP: 40.162.0.0/16
IP: 47.92.0.0 -- 47.127.255.255
IP: 52.80.0.0/14
IP: 52.130.0.0/15
IP: 54.222.0.0/15
IP: 68.79.0.0/18
IP: 69.230.192.0/18
IP: 69.231.128.0/18
IP: 69.234.192.0/18
IP: 69.235.128.0/18
IP: 71.131.192.0 -- 71.132.63.255
IP: 71.136.64.0/18
IP: 71.137.0.0/18
IP: 139.9.0.0/16
IP: 139.129.0.0/16
IP: 139.148.0.0/16
IP: 139.155.0.0/16
IP: 139.159.0.0/16
IP: 139.176.0.0/16
IP: 139.183.0.0/16
IP: 139.186.0.0/16
IP: 139.196.0.0/14
IP: 139.217.0.0/16
IP: 139.219.0.0 -- 139.221.255.255
IP: 139.224.0.0/16
IP: 140.143.0.0/16
IP: 140.179.0.0/16
IP: 140.205.0.0/16
IP: 140.210.0.0/16
IP: 143.64.0.0/16
IP: 152.104.128.0/17
IP: 157.10.34.0 -- 157.10.37.255
IP: 157.10.112.0/23
IP: 157.10.130.0/23
IP: 157.10.218.0 -- 157.10.221.255
IP: 157.10.246.0/23
IP: 157.15.74.0/23
IP: 157.15.94.0/23
IP: 157.15.100.0 -- 157.15.105.255
IP: 157.20.136.0/23
IP: 157.20.194.0/23
IP: 157.20.246.0/23
IP: 157.66.42.0/23
IP: 157.66.70.0/23
IP: 157.66.88.0/21
IP: 157.66.164.0/23
IP: 157.66.244.0/23
IP: 158.60.0.0/16
IP: 158.140.252.0/22
IP: 159.27.0.0/16
IP: 160.19.76.0/23
IP: 160.19.82.0/23
IP: 160.20.16.0/22
IP: 160.20.130.0/23
IP: 160.22.58.0/23
IP: 160.22.82.0/23
IP: 160.22.148.0/23
IP: 160.22.188.0/23
IP: 160.22.224.0/23
IP: 160.22.230.0/23
IP: 160.22.244.0/22
IP: 160.25.10.0 -- 160.25.13.255
IP: 160.25.194.0/23
IP: 160.30.40.0/23
IP: 160.30.150.0/23
IP: 160.30.194.0 -- 160.30.199.255
IP: 160.30.230.0/23
IP: 160.187.223.0/24
IP: 160.187.252.0/22
IP: 160.191.0.0/23
IP: 160.191.104.0/23
IP: 160.191.110.0/23
IP: 160.250.14.0 -- 160.250.19.255
IP: 160.250.84.0/23
IP: 160.250.90.0/23
IP: 160.250.102.0 -- 160.250.105.255
IP: 160.250.160.0/23
IP: 160.250.170.0/23
IP: 160.250.214.0/23
IP: 160.250.252.0/23
IP: 161.189.0.0/16
IP: 161.207.0.0/16
IP: 161.248.20.0/23
IP: 161.248.42.0/23
IP: 161.248.84.0/23
IP: 161.248.92.0/23
IP: 161.248.108.0 -- 161.248.113.255
IP: 165.101.4.0/23
IP: 165.101.66.0/23
IP: 165.101.70.0/23
IP: 165.101.144.0/23
IP: 165.101.170.0/23
IP: 165.101.208.0/23
IP: 165.101.244.0/23
IP: 167.189.0.0/16
IP: 167.220.244.0/22
IP: 168.160.0.0/16
IP: 170.179.0.0/16
IP: 192.51.172.0/23
IP: 192.55.46.0/23
IP: 192.55.68.0/22
IP: 192.102.204.0/22
IP: 198.175.100.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27124 (0x69f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 19 02:04:41 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:1d:78:af:13:1a:bf:c7:cb:47:5f:8d:f7:
22:f6:3a:87:d5:56:55:30:cf:3d:cb:91:56:19:a3:
e6:19:32:c4:14:4b:76:9d:a3:5c:f5:f2:89:08:fb:
50:5c:8a:cb:2e:bb:f9:58:be:7b:05:a7:4f:d9:b3:
cb:39:e7:fa:ea:ee:d0:23:3d:02:b6:0c:24:fe:e6:
4d:53:6f:cb:bc:16:02:c2:ca:dd:37:f6:89:7c:9d:
99:33:cc:a9:30:4c:75:0a:12:6b:62:46:23:da:09:
1c:2f:6d:de:70:51:cb:41:46:4d:5f:d8:a6:aa:23:
6a:df:4f:00:92:3e:33:81:4f:1e:82:53:33:10:c8:
2f:6a:0e:98:07:05:85:7b:f6:12:35:db:75:a5:45:
43:25:c3:0d:39:42:93:21:4a:17:4e:f1:fb:80:16:
73:ec:f6:a1:c5:f6:4a:6b:73:b3:c3:5c:dc:01:b0:
68:12:45:65:7e:55:7e:fb:ba:7b:45:ae:9a:56:10:
2a:bd:1f:66:58:e1:da:22:53:78:ed:af:78:eb:92:
48:3e:82:9e:6f:a7:17:5e:96:f6:11:31:5e:06:d7:
60:54:15:4b:a8:ee:b9:e8:c8:39:65:54:62:7e:cd:
28:95:1d:3d:10:9b:7e:3a:b8:86:49:5f:e8:20:f8:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.0.0/15
40.125.128.0/17
40.126.64.0/18
40.162.0.0/16
47.92.0.0-47.127.255.255
52.80.0.0/14
52.130.0.0/15
54.222.0.0/15
68.79.0.0/18
69.230.192.0/18
69.231.128.0/18
69.234.192.0/18
69.235.128.0/18
71.131.192.0-71.132.63.255
71.136.64.0/18
71.137.0.0/18
139.9.0.0/16
139.129.0.0/16
139.148.0.0/16
139.155.0.0/16
139.159.0.0/16
139.176.0.0/16
139.183.0.0/16
139.186.0.0/16
139.196.0.0/14
139.217.0.0/16
139.219.0.0-139.221.255.255
139.224.0.0/16
140.143.0.0/16
140.179.0.0/16
140.205.0.0/16
140.210.0.0/16
143.64.0.0/16
152.104.128.0/17
157.10.34.0-157.10.37.255
157.10.112.0/23
157.10.130.0/23
157.10.218.0-157.10.221.255
157.10.246.0/23
157.15.74.0/23
157.15.94.0/23
157.15.100.0-157.15.105.255
157.20.136.0/23
157.20.194.0/23
157.20.246.0/23
157.66.42.0/23
157.66.70.0/23
157.66.88.0/21
157.66.164.0/23
157.66.244.0/23
158.60.0.0/16
158.140.252.0/22
159.27.0.0/16
160.19.76.0/23
160.19.82.0/23
160.20.16.0/22
160.20.130.0/23
160.22.58.0/23
160.22.82.0/23
160.22.148.0/23
160.22.188.0/23
160.22.224.0/23
160.22.230.0/23
160.22.244.0/22
160.25.10.0-160.25.13.255
160.25.194.0/23
160.30.40.0/23
160.30.150.0/23
160.30.194.0-160.30.199.255
160.30.230.0/23
160.187.223.0/24
160.187.252.0/22
160.191.0.0/23
160.191.104.0/23
160.191.110.0/23
160.250.14.0-160.250.19.255
160.250.84.0/23
160.250.90.0/23
160.250.102.0-160.250.105.255
160.250.160.0/23
160.250.170.0/23
160.250.214.0/23
160.250.252.0/23
161.189.0.0/16
161.207.0.0/16
161.248.20.0/23
161.248.42.0/23
161.248.84.0/23
161.248.92.0/23
161.248.108.0-161.248.113.255
165.101.4.0/23
165.101.66.0/23
165.101.70.0/23
165.101.144.0/23
165.101.170.0/23
165.101.208.0/23
165.101.244.0/23
167.189.0.0/16
167.220.244.0/22
168.160.0.0/16
170.179.0.0/16
192.51.172.0/23
192.55.46.0/23
192.55.68.0/22
192.102.204.0/22
198.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
08:57:f0:74:82:ee:91:00:0b:7b:ee:33:8e:f9:95:ba:3d:71:
1a:06:d2:2e:b5:aa:81:37:60:36:4a:a3:92:ef:5b:ff:75:43:
d8:40:23:97:83:be:8e:cf:8d:33:84:5e:66:1e:60:37:8c:56:
07:23:75:43:cc:99:31:33:7a:a0:08:3f:19:a4:20:d6:f4:34:
45:1e:40:db:4c:fe:ac:eb:ac:39:e8:83:ff:30:99:d7:18:01:
57:ba:58:b8:2c:c4:b8:77:2f:b5:42:8a:6b:4d:46:2c:61:c5:
26:9a:c1:62:a1:71:47:b3:a9:5e:5b:e3:3a:bf:a6:52:98:60:
04:be:ef:a8:5c:c7:60:43:4a:47:55:c1:02:01:0b:40:9a:1f:
ab:ce:50:96:2d:e4:93:f0:7e:e0:d0:7a:36:56:10:11:d3:1e:
4e:44:d8:d6:6e:0b:aa:ef:e3:bc:37:d5:ee:ab:79:b9:07:93:
3f:c1:31:3b:91:92:e5:ac:4a:83:6e:bc:62:99:23:0a:fb:b8:
1e:3a:c3:59:94:c7:4d:e5:77:cc:74:a3:c2:2a:9d:b8:b2:ac:
7c:61:0b:0a:cd:13:51:17:24:4a:e9:31:3e:93:50:77:cf:e1:
e1:5c:9d:60:89:22:66:3f:79:15:de:6a:e1:92:8d:2e:7d:24:
ff:ad:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:21:34 2025 by rpki-client