Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ORZcru1PFFhR0mI9_l6jpZ2sur0.cer
File:                     ORZcru1PFFhR0mI9_l6jpZ2sur0.cer (raw, json)
Hash identifier:          8HtYoSZzmzlHrHQ7zpaDH7QNi+18C/5EZdYBHdg7VFs=
Subject key identifier:   39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       DD80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Wed 17 Sep 2025 01:26:51 +0000
Certificate not after:    Thu 17 Sep 2026 01:12:15 +0000
Subordinate resources:    AS: 63570
                          IP: 36.255.128.0/22
                          IP: 103.209.136.0/22
                          IP: 2404:4dc0::/32
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Oct 2025 23:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56704 (0xdd80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Sep 17 01:26:51 2025 GMT
            Not After : Sep 17 01:12:15 2026 GMT
        Subject: CN=39165CAEED4F145851D2623DFE5EA3A59DACBABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:60:51:a2:b7:0c:ed:6c:b0:ed:b9:c8:0f:
                    d1:ba:d3:b3:a4:b9:69:a5:0c:ab:45:b0:96:c1:8a:
                    3f:d7:c9:45:d6:7c:ae:7d:27:fe:9c:e8:a5:44:1a:
                    c1:d3:0a:98:45:a7:f3:5d:2e:ed:bf:7c:91:9b:24:
                    55:89:4a:10:37:cf:85:15:17:41:9c:21:1f:a9:f0:
                    0f:7c:e6:1d:ca:73:07:ed:cc:a5:86:c3:49:72:78:
                    76:36:c6:74:85:9a:ec:48:1e:d4:f1:4d:47:7c:6d:
                    35:63:bf:c4:c3:3f:1a:b8:e6:d1:ef:11:1d:31:c1:
                    7e:e2:2f:3d:65:4c:fa:e5:b2:d1:9d:8b:4b:0d:78:
                    36:76:dc:66:52:e1:5d:24:f4:67:45:17:e5:1a:e8:
                    47:4e:4b:cc:ee:05:15:90:04:a1:bd:16:cb:f3:29:
                    cf:d0:30:6d:c3:d4:3f:0b:f2:45:1f:ca:7c:27:f7:
                    f8:7c:54:9b:19:47:c4:a2:8a:c8:63:5f:b8:55:7a:
                    20:c6:5d:cc:b6:9b:23:b1:7d:72:b0:e3:87:0b:f4:
                    25:e7:15:10:4c:f1:f4:72:65:2e:33:99:df:e6:7d:
                    14:ec:7e:64:c8:22:5e:19:4d:11:f0:6c:67:c6:54:
                    8e:7e:df:36:2f:e2:f9:66:f5:92:83:4a:fa:27:82:
                    1a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:16:5C:AE:ED:4F:14:58:51:D2:62:3D:FE:5E:A3:A5:9D:AC:BA:BD
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3393/ORZcru1PFFhR0mI9_l6jpZ2sur0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63570

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.128.0/22
                  103.209.136.0/22
                IPv6:
                  2404:4dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:e8:f1:9d:d4:0a:f0:f3:62:c2:f0:49:99:7a:7d:02:ab:
         c7:8e:be:e0:ea:6b:c9:1d:3f:3e:09:3d:c4:97:32:cd:6a:0d:
         94:80:53:d7:89:2b:aa:cb:4d:16:d0:99:5c:16:d0:57:c0:15:
         14:77:78:ae:ff:a3:44:d9:2d:69:30:fb:cb:79:25:f4:97:2b:
         22:9c:b5:39:d6:f3:19:c4:89:43:a2:50:d4:cf:2a:53:c8:bc:
         13:8e:d2:64:0c:bc:b7:7c:84:7d:ed:47:cb:d0:07:98:5e:ff:
         0e:1f:ca:9c:f3:0a:7d:fe:c1:c3:c9:0b:7e:2c:77:39:cc:3a:
         49:70:2f:9a:06:75:56:e7:c8:c2:0d:1b:fb:90:60:ea:4e:a3:
         81:09:a0:27:c7:84:5c:8f:47:3c:8d:81:22:7c:43:c5:14:59:
         2b:94:77:e0:e4:8f:53:7d:eb:c5:da:91:dd:5d:6f:0c:b3:82:
         78:3e:09:70:5e:ae:11:1f:bc:f4:7a:8b:a5:12:89:64:11:da:
         43:4f:9e:99:b1:99:b1:f6:f9:52:7e:91:e5:65:17:6a:89:7d:
         4d:01:05:70:2a:cc:c5:9d:e5:60:da:fc:70:c4:16:14:d6:7b:
         83:ec:45:14:7b:9f:6f:df:3f:cd:91:2e:bc:87:f5:fa:d0:cd:
         4b:08:43:ed
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIDAN2AMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA5MTcwMTI2NTFaFw0yNjA5MTcwMTEyMTVaMDMx
MTAvBgNVBAMTKDM5MTY1Q0FFRUQ0RjE0NTg1MUQyNjIzREZFNUVBM0E1OURBQ0JB
QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1t2BRorcM7Wyw7bnI
D9G607OkuWmlDKtFsJbBij/XyUXWfK59J/6c6KVEGsHTCphFp/NdLu2/fJGbJFWJ
ShA3z4UVF0GcIR+p8A985h3KcwftzKWGw0lyeHY2xnSFmuxIHtTxTUd8bTVjv8TD
Pxq45tHvER0xwX7iLz1lTPrlstGdi0sNeDZ23GZS4V0k9GdFF+Ua6EdOS8zuBRWQ
BKG9FsvzKc/QMG3D1D8L8kUfynwn9/h8VJsZR8SiishjX7hVeiDGXcy2myOxfXKw
44cL9CXnFRBM8fRyZS4zmd/mfRTsfmTIIl4ZTRHwbGfGVI5+3zYv4vlm9ZKDSvon
ghpzAgMBAAGjggKGMIICgjAdBgNVHQ4EFgQUORZcru1PFFhR0mI9/l6jpZ2sur0w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
OTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM5My9PUlpjcnUxUEZGaFIwbUk5X2w2anBaMnN1cjAubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4UjA0BggrBgEFBQcBBwEB/wQlMCMw
EgQCAAEwDAMEAiT/gAMEAmfRiDANBAIAAjAHAwUAJARNwDANBgkqhkiG9w0BAQsF
AAOCAQEAEBzo8Z3UCvDzYsLwSZl6fQKrx46+4OpryR0/Pgk9xJcyzWoNlIBT14kr
qstNFtCZXBbQV8AVFHd4rv+jRNktaTD7y3kl9JcrIpy1OdbzGcSJQ6JQ1M8qU8i8
E47SZAy8t3yEfe1Hy9AHmF7/Dh/KnPMKff7Bw8kLfix3Ocw6SXAvmgZ1VufIwg0b
+5Bg6k6jgQmgJ8eEXI9HPI2BInxDxRRZK5R34OSPU33rxdqR3V1vDLOCeD4JcF6u
ER+89HqLpRKJZBHaQ0+embGZsfb5Un6R5WUXaol9TQEFcCrMxZ3lYNr8cMQWFNZ7
g+xFFHufb98/zZEuvIf1+tDNSwhD7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:16 2025 by rpki-client