Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5QMbBjqUYVbD6gW9hA2Mll5snpQ.cer
File:                     5QMbBjqUYVbD6gW9hA2Mll5snpQ.cer (raw, json)
Hash identifier:          NoBi+FHbW6+u33HinPmeVVDpY+eg8FlQzTLX0Al5Y0g=
Subject key identifier:   E5:03:1B:06:3A:94:61:56:C3:EA:05:BD:84:0D:8C:96:5E:6C:9E:94
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       DE18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 26 Sep 2025 08:50:10 +0000
Certificate not after:    Sat 26 Sep 2026 08:47:44 +0000
Subordinate resources:    AS: 55985
                          IP: 43.247.152.0/22
                          IP: 43.247.232.0/22
                          IP: 45.251.144.0/21
                          IP: 103.30.96.0/22
                          IP: 103.220.108.0/22
                          IP: 103.220.116.0/22
                          IP: 103.252.104.0/22
                          IP: 182.49.0.0/16
                          IP: 2405:9700::/32
                          IP: 2405:9880::/32
                          IP: 2405:9980::/32
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Oct 2025 23:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56856 (0xde18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Sep 26 08:50:10 2025 GMT
            Not After : Sep 26 08:47:44 2026 GMT
        Subject: CN=E5031B063A946156C3EA05BD840D8C965E6C9E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:68:46:26:3e:28:05:5d:aa:71:c0:34:ba:
                    b3:53:5a:20:52:c9:34:43:28:8c:de:55:9a:1e:04:
                    ec:ef:d6:1a:2e:b2:fd:f5:81:4f:c7:6f:11:3f:ba:
                    19:43:ed:b3:51:e6:f9:65:1b:37:c6:0a:23:d4:c6:
                    28:83:e0:ec:d2:64:79:6a:cd:09:25:a3:ee:55:34:
                    c0:61:00:e1:58:e0:e4:bc:b4:c1:c5:6b:90:6e:e4:
                    a0:4a:ff:32:f3:b6:23:c5:0a:3c:aa:25:23:a6:7e:
                    fe:a6:0d:0b:54:d5:54:aa:c1:00:36:d0:24:67:15:
                    95:ba:15:b5:6c:37:88:4a:6c:dc:e8:8b:99:96:3c:
                    4a:57:aa:b3:11:64:b0:8b:9f:db:26:10:70:57:68:
                    e5:fc:b0:d1:32:a4:ed:07:40:b6:f4:15:a2:0e:82:
                    02:b5:e6:f0:c2:51:fc:d8:0c:dd:e8:ba:f9:6c:54:
                    8a:06:52:2a:83:98:9b:1b:89:4a:f7:ff:43:fa:0e:
                    b1:89:39:fb:8d:53:1e:e6:7c:62:a7:f6:5e:2d:46:
                    de:23:d5:83:f1:f6:6a:d8:c9:ce:4f:6d:81:f0:30:
                    53:24:bc:c3:9c:aa:b6:98:30:04:73:d7:fd:b0:74:
                    dd:3a:25:f9:62:4f:86:24:1d:08:cf:04:e5:ef:62:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:03:1B:06:3A:94:61:56:C3:EA:05:BD:84:0D:8C:96:5E:6C:9E:94
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/528/5QMbBjqUYVbD6gW9hA2Mll5snpQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55985

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.152.0/22
                  43.247.232.0/22
                  45.251.144.0/21
                  103.30.96.0/22
                  103.220.108.0/22
                  103.220.116.0/22
                  103.252.104.0/22
                  182.49.0.0/16
                IPv6:
                  2405:9700::/32
                  2405:9880::/32
                  2405:9980::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:11:b0:48:79:fe:17:c0:73:de:ce:57:a2:c5:2c:46:9f:
         22:59:d0:57:d8:a5:b9:a4:23:f2:d7:bb:c1:a5:25:6e:cd:a4:
         a8:8d:a2:e4:25:84:a7:8d:84:39:3a:48:91:fd:bb:f5:34:ad:
         a5:7b:92:c2:56:3c:2d:1f:a9:5d:cb:69:23:6f:cb:d7:63:fd:
         35:9d:37:24:6f:32:9f:14:28:55:20:98:c6:24:09:e5:5a:62:
         d9:09:88:f0:82:09:5a:ea:54:3a:23:6b:67:97:e0:9c:1e:64:
         6a:25:1b:4a:30:5f:1f:bd:0c:19:0e:ef:b1:25:92:8e:62:4b:
         a5:c3:7b:3d:43:96:32:58:0e:5a:7c:c4:4d:65:d8:c4:c4:85:
         02:6c:18:c1:6e:5f:18:ae:bc:32:85:7f:8b:e4:7d:7d:69:3f:
         67:42:35:b9:17:aa:ff:da:6e:5c:bf:73:32:15:4e:41:47:02:
         50:7b:40:7e:82:82:1a:34:33:b5:c7:d5:12:6d:09:25:7f:6f:
         88:ae:f0:5d:4e:82:d5:03:37:04:80:75:3c:fc:b9:c3:a9:f3:
         11:3f:cd:83:05:72:d2:35:e7:83:3a:73:5b:29:82:35:74:35:
         80:8b:bb:29:0d:9b:b9:a9:6d:2e:1f:c7:0e:52:5b:5f:a6:ce:
         b6:4a:2c:04
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIDAN4YMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA5MjYwODUwMTBaFw0yNjA5MjYwODQ3NDRaMDMx
MTAvBgNVBAMTKEU1MDMxQjA2M0E5NDYxNTZDM0VBMDVCRDg0MEQ4Qzk2NUU2QzlF
OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSGhGJj4oBV2qccA0
urNTWiBSyTRDKIzeVZoeBOzv1housv31gU/HbxE/uhlD7bNR5vllGzfGCiPUxiiD
4OzSZHlqzQklo+5VNMBhAOFY4OS8tMHFa5Bu5KBK/zLztiPFCjyqJSOmfv6mDQtU
1VSqwQA20CRnFZW6FbVsN4hKbNzoi5mWPEpXqrMRZLCLn9smEHBXaOX8sNEypO0H
QLb0FaIOggK15vDCUfzYDN3ouvlsVIoGUiqDmJsbiUr3/0P6DrGJOfuNUx7mfGKn
9l4tRt4j1YPx9mrYyc5PbYHwMFMkvMOcqraYMARz1/2wdN06JfliT4YkHQjPBOXv
Yk+PAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU5QMbBjqUYVbD6gW9hA2Mll5snpQw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzUy
OC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC81MjgvNVFNYkJqcVVZVmJENmdXOWhBMk1sbDVzbnBRLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA2rEwZQYIKwYBBQUHAQcBAf8EVjBUMDUE
AgABMC8DBAIr95gDBAIr9+gDBAMt+5ADBAJnHmADBAJn3GwDBAJn3HQDBAJn/GgD
AwC2MTAbBAIAAjAVAwUAJAWXAAMFACQFmIADBQAkBZmAMA0GCSqGSIb3DQEBCwUA
A4IBAQBY6BGwSHn+F8Bz3s5XosUsRp8iWdBX2KW5pCPy17vBpSVuzaSojaLkJYSn
jYQ5OkiR/bv1NK2le5LCVjwtH6ldy2kjb8vXY/01nTckbzKfFChVIJjGJAnlWmLZ
CYjwggla6lQ6I2tnl+CcHmRqJRtKMF8fvQwZDu+xJZKOYkulw3s9Q5YyWA5afMRN
ZdjExIUCbBjBbl8YrrwyhX+L5H19aT9nQjW5F6r/2m5cv3MyFU5BRwJQe0B+goIa
NDO1x9USbQklf2+IrvBdToLVAzcEgHU8/LnDqfMRP82DBXLSNeeDOnNbKYI1dDWA
i7spDZu5qW0uH8cOUltfps62SiwE
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:06 2025 by rpki-client