Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
File: 1xHsDTeBWKRHb-bqfXClSpUZWhE.cer (raw, json)
Hash identifier: bNjHt2Yfe/k0DVjsAB7680u0t4gwuQWt6CwUkcLxpwg=
Subject key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6708
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 25 Jun 2025 06:01:54 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 40.72.0.0/15
IP: 40.125.128.0/17
IP: 40.126.64.0/18
IP: 40.162.0.0/16
IP: 47.92.0.0 -- 47.127.255.255
IP: 52.80.0.0/14
IP: 52.130.0.0/15
IP: 54.222.0.0/15
IP: 68.79.0.0/18
IP: 69.230.192.0/18
IP: 69.231.128.0/18
IP: 69.234.192.0/18
IP: 69.235.128.0/18
IP: 71.131.192.0 -- 71.132.63.255
IP: 71.136.64.0/18
IP: 71.137.0.0/18
IP: 139.9.0.0/16
IP: 139.129.0.0/16
IP: 139.148.0.0/16
IP: 139.155.0.0/16
IP: 139.159.0.0/16
IP: 139.176.0.0/16
IP: 139.183.0.0/16
IP: 139.186.0.0/16
IP: 139.196.0.0/14
IP: 139.217.0.0/16
IP: 139.219.0.0 -- 139.221.255.255
IP: 139.224.0.0/16
IP: 140.143.0.0/16
IP: 140.179.0.0/16
IP: 140.205.0.0/16
IP: 140.210.0.0/16
IP: 143.64.0.0/16
IP: 152.104.128.0/17
IP: 157.10.34.0 -- 157.10.37.255
IP: 157.10.112.0/23
IP: 157.10.130.0/23
IP: 157.10.218.0 -- 157.10.221.255
IP: 157.10.246.0/23
IP: 157.15.74.0/23
IP: 157.15.94.0/23
IP: 157.15.100.0 -- 157.15.105.255
IP: 157.20.136.0/23
IP: 157.20.194.0/23
IP: 157.20.246.0/23
IP: 157.66.42.0/23
IP: 157.66.70.0/23
IP: 157.66.88.0/21
IP: 157.66.164.0/23
IP: 157.66.244.0/23
IP: 158.60.0.0/16
IP: 158.140.252.0/22
IP: 159.27.0.0/16
IP: 160.19.76.0/23
IP: 160.19.82.0/23
IP: 160.20.16.0/22
IP: 160.20.130.0/23
IP: 160.22.58.0/23
IP: 160.22.82.0/23
IP: 160.22.148.0/23
IP: 160.22.188.0/23
IP: 160.22.224.0/23
IP: 160.22.230.0/23
IP: 160.22.244.0/22
IP: 160.25.10.0 -- 160.25.13.255
IP: 160.25.194.0/23
IP: 160.30.40.0/23
IP: 160.30.150.0/23
IP: 160.30.194.0 -- 160.30.199.255
IP: 160.30.230.0/23
IP: 160.187.223.0/24
IP: 160.187.252.0/22
IP: 160.191.0.0/23
IP: 160.191.104.0/23
IP: 160.191.110.0/23
IP: 160.250.14.0 -- 160.250.19.255
IP: 160.250.84.0/23
IP: 160.250.90.0/23
IP: 160.250.102.0 -- 160.250.105.255
IP: 160.250.160.0/23
IP: 160.250.170.0/23
IP: 160.250.214.0/23
IP: 160.250.252.0/23
IP: 161.189.0.0/16
IP: 161.207.0.0/16
IP: 161.248.20.0/23
IP: 161.248.42.0/23
IP: 161.248.84.0/23
IP: 161.248.92.0/23
IP: 161.248.108.0 -- 161.248.113.255
IP: 165.101.4.0/23
IP: 165.101.66.0/23
IP: 165.101.70.0/23
IP: 167.189.0.0/16
IP: 167.220.244.0/22
IP: 168.160.0.0/16
IP: 170.179.0.0/16
IP: 192.55.46.0/23
IP: 192.55.68.0/22
IP: 192.102.204.0/22
IP: 198.175.100.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26376 (0x6708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 25 06:01:54 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:1d:78:af:13:1a:bf:c7:cb:47:5f:8d:f7:
22:f6:3a:87:d5:56:55:30:cf:3d:cb:91:56:19:a3:
e6:19:32:c4:14:4b:76:9d:a3:5c:f5:f2:89:08:fb:
50:5c:8a:cb:2e:bb:f9:58:be:7b:05:a7:4f:d9:b3:
cb:39:e7:fa:ea:ee:d0:23:3d:02:b6:0c:24:fe:e6:
4d:53:6f:cb:bc:16:02:c2:ca:dd:37:f6:89:7c:9d:
99:33:cc:a9:30:4c:75:0a:12:6b:62:46:23:da:09:
1c:2f:6d:de:70:51:cb:41:46:4d:5f:d8:a6:aa:23:
6a:df:4f:00:92:3e:33:81:4f:1e:82:53:33:10:c8:
2f:6a:0e:98:07:05:85:7b:f6:12:35:db:75:a5:45:
43:25:c3:0d:39:42:93:21:4a:17:4e:f1:fb:80:16:
73:ec:f6:a1:c5:f6:4a:6b:73:b3:c3:5c:dc:01:b0:
68:12:45:65:7e:55:7e:fb:ba:7b:45:ae:9a:56:10:
2a:bd:1f:66:58:e1:da:22:53:78:ed:af:78:eb:92:
48:3e:82:9e:6f:a7:17:5e:96:f6:11:31:5e:06:d7:
60:54:15:4b:a8:ee:b9:e8:c8:39:65:54:62:7e:cd:
28:95:1d:3d:10:9b:7e:3a:b8:86:49:5f:e8:20:f8:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.0.0/15
40.125.128.0/17
40.126.64.0/18
40.162.0.0/16
47.92.0.0-47.127.255.255
52.80.0.0/14
52.130.0.0/15
54.222.0.0/15
68.79.0.0/18
69.230.192.0/18
69.231.128.0/18
69.234.192.0/18
69.235.128.0/18
71.131.192.0-71.132.63.255
71.136.64.0/18
71.137.0.0/18
139.9.0.0/16
139.129.0.0/16
139.148.0.0/16
139.155.0.0/16
139.159.0.0/16
139.176.0.0/16
139.183.0.0/16
139.186.0.0/16
139.196.0.0/14
139.217.0.0/16
139.219.0.0-139.221.255.255
139.224.0.0/16
140.143.0.0/16
140.179.0.0/16
140.205.0.0/16
140.210.0.0/16
143.64.0.0/16
152.104.128.0/17
157.10.34.0-157.10.37.255
157.10.112.0/23
157.10.130.0/23
157.10.218.0-157.10.221.255
157.10.246.0/23
157.15.74.0/23
157.15.94.0/23
157.15.100.0-157.15.105.255
157.20.136.0/23
157.20.194.0/23
157.20.246.0/23
157.66.42.0/23
157.66.70.0/23
157.66.88.0/21
157.66.164.0/23
157.66.244.0/23
158.60.0.0/16
158.140.252.0/22
159.27.0.0/16
160.19.76.0/23
160.19.82.0/23
160.20.16.0/22
160.20.130.0/23
160.22.58.0/23
160.22.82.0/23
160.22.148.0/23
160.22.188.0/23
160.22.224.0/23
160.22.230.0/23
160.22.244.0/22
160.25.10.0-160.25.13.255
160.25.194.0/23
160.30.40.0/23
160.30.150.0/23
160.30.194.0-160.30.199.255
160.30.230.0/23
160.187.223.0/24
160.187.252.0/22
160.191.0.0/23
160.191.104.0/23
160.191.110.0/23
160.250.14.0-160.250.19.255
160.250.84.0/23
160.250.90.0/23
160.250.102.0-160.250.105.255
160.250.160.0/23
160.250.170.0/23
160.250.214.0/23
160.250.252.0/23
161.189.0.0/16
161.207.0.0/16
161.248.20.0/23
161.248.42.0/23
161.248.84.0/23
161.248.92.0/23
161.248.108.0-161.248.113.255
165.101.4.0/23
165.101.66.0/23
165.101.70.0/23
167.189.0.0/16
167.220.244.0/22
168.160.0.0/16
170.179.0.0/16
192.55.46.0/23
192.55.68.0/22
192.102.204.0/22
198.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
55:d7:32:69:d2:a9:8f:97:a9:19:09:32:09:fd:dc:d6:8b:8f:
7f:c0:81:9e:9c:81:63:d6:79:ad:22:30:17:34:44:c8:0b:04:
0d:67:8d:96:74:bd:6f:2b:e2:9d:4f:78:14:26:f2:91:9f:f8:
4f:d0:ce:fa:c7:a3:4b:d5:c4:f4:c9:c1:51:26:b8:d6:8d:86:
f8:f2:89:0b:5a:80:0e:91:55:f7:21:72:e7:68:c2:4b:e2:80:
70:d5:2b:86:86:38:87:45:49:09:68:4a:1f:1d:10:75:b3:d7:
e2:81:88:c2:b3:c1:39:c4:76:12:18:ae:60:8b:35:fb:61:dc:
93:8b:fe:db:cd:a2:60:e4:60:26:d7:3c:af:60:c4:ec:c4:38:
1f:01:c5:31:b9:b6:1c:71:f8:b2:02:fa:9c:3f:5d:05:15:b6:
7a:fe:26:d7:15:59:d4:92:20:9e:24:ea:6f:49:22:45:7e:d1:
94:ce:51:d5:72:d6:b1:88:97:9c:c5:f3:9b:08:5d:00:0a:10:
a9:83:be:fc:14:23:99:65:0e:16:8e:ef:1e:51:96:75:bc:3d:
e4:e2:f3:a8:64:09:14:e5:18:75:c1:39:43:a7:70:0a:d8:ef:
dd:38:85:ca:82:7a:81:ee:eb:63:40:5d:c3:e3:00:fc:ed:47:
04:09:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:29:20 2025 by rpki-client