Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
File:                     sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer (raw, json)
Hash identifier:          pFt3uuIgAgTrVfjeIcyF0HauxdcmEN3XLIpQPvIrzAk=
Subject key identifier:   B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       D4AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 16 Jun 2025 02:03:22 +0000
Certificate not after:    Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources:    AS: 137718
                          IP: 14.103.0.0/16
                          IP: 27.54.192.0/18
                          IP: 27.103.0.0/16
                          IP: 27.109.32.0/19
                          IP: 36.0.64.0/18
                          IP: 42.157.64.0/18
                          IP: 43.236.0.0/16
                          IP: 43.239.0.0/19
                          IP: 43.247.200.0/22
                          IP: 45.255.0.0/18
                          IP: 49.4.192.0/18
                          IP: 60.55.0.0/16
                          IP: 61.45.128.0/18
                          IP: 101.78.32.0/19
                          IP: 101.96.160.0 -- 101.96.255.255
                          IP: 101.126.0.0/16
                          IP: 101.238.0.0/16
                          IP: 101.251.96.0/19
                          IP: 103.35.0.0/19
                          IP: 103.64.32.0 -- 103.64.127.255
                          IP: 103.159.142.0/23
                          IP: 103.223.32.0/19
                          IP: 103.238.20.0/22
                          IP: 106.2.160.0 -- 106.2.223.255
                          IP: 112.75.0.0/16
                          IP: 113.31.0.0 -- 113.31.95.255
                          IP: 113.209.0.0/17
                          IP: 115.103.0.0/16
                          IP: 115.181.0.0/16
                          IP: 115.190.0.0/15
                          IP: 116.70.0.0/18
                          IP: 117.122.128.0/18
                          IP: 118.126.0.0/19
                          IP: 118.145.32.0 -- 118.145.255.255
                          IP: 118.196.0.0/15
                          IP: 119.10.0.0/17
                          IP: 119.16.0.0/16
                          IP: 123.100.0.0/19
                          IP: 123.137.0.0/16
                          IP: 123.199.160.0 -- 123.199.255.255
                          IP: 124.174.0.0/15
                          IP: 125.61.192.0/18
                          IP: 125.169.0.0/16
                          IP: 180.184.0.0/15
                          IP: 202.70.0.0/19
                          IP: 203.128.32.0/19
                          IP: 203.128.96.0/19
                          IP: 203.175.192.0/18
                          IP: 210.78.96.0/19
                          IP: 221.136.0.0/16
                          IP: 223.255.0.0/17
                          IP: 2406:d440::/32
                          IP: 240b:6000::/20
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 13:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54443 (0xd4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun 16 02:03:22 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=B08B918D2D45B6371ACB9770743553D1BF224708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:12:92:12:a5:7e:df:cd:3d:6c:97:6b:09:
                    05:5d:fa:84:b7:55:0b:84:13:53:ba:68:a9:66:b1:
                    cf:5e:7a:40:8a:64:a9:5f:65:be:6f:d7:07:65:a8:
                    8b:bb:26:5a:a7:83:0f:47:3e:ee:88:eb:2b:dc:63:
                    94:3b:f0:56:da:36:60:bb:77:15:6c:85:d0:34:20:
                    37:16:9e:cf:f7:f0:b8:f9:e7:36:ca:20:ff:0f:41:
                    ca:9a:ae:52:d8:4f:57:2c:ab:d2:56:96:f8:ea:0d:
                    d7:4c:ec:15:70:5a:b3:39:4d:83:52:a9:de:22:ce:
                    03:93:ce:08:80:61:13:46:d4:5b:ff:68:11:10:d8:
                    0a:58:db:9e:9c:ce:5c:e1:f5:f6:3e:43:9a:c7:94:
                    84:9a:aa:83:92:84:99:92:42:9c:b8:8e:e9:06:87:
                    84:70:79:a2:f9:63:1d:72:f7:9d:21:89:80:19:a0:
                    24:38:6a:09:47:3b:4b:b3:e9:c0:f2:b0:ab:7e:1c:
                    2a:e8:e9:4f:f0:c8:87:77:86:d2:d8:71:03:4f:08:
                    2c:c3:0e:14:99:ae:53:7d:51:f6:f6:78:d8:72:3c:
                    c3:ed:05:c7:42:b7:d2:c3:ba:8b:f8:e0:1e:63:39:
                    7c:17:5f:60:48:a2:4f:f8:00:47:48:d8:c4:93:60:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137718

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.103.0.0/16
                  27.54.192.0/18
                  27.103.0.0/16
                  27.109.32.0/19
                  36.0.64.0/18
                  42.157.64.0/18
                  43.236.0.0/16
                  43.239.0.0/19
                  43.247.200.0/22
                  45.255.0.0/18
                  49.4.192.0/18
                  60.55.0.0/16
                  61.45.128.0/18
                  101.78.32.0/19
                  101.96.160.0-101.96.255.255
                  101.126.0.0/16
                  101.238.0.0/16
                  101.251.96.0/19
                  103.35.0.0/19
                  103.64.32.0-103.64.127.255
                  103.159.142.0/23
                  103.223.32.0/19
                  103.238.20.0/22
                  106.2.160.0-106.2.223.255
                  112.75.0.0/16
                  113.31.0.0-113.31.95.255
                  113.209.0.0/17
                  115.103.0.0/16
                  115.181.0.0/16
                  115.190.0.0/15
                  116.70.0.0/18
                  117.122.128.0/18
                  118.126.0.0/19
                  118.145.32.0-118.145.255.255
                  118.196.0.0/15
                  119.10.0.0/17
                  119.16.0.0/16
                  123.100.0.0/19
                  123.137.0.0/16
                  123.199.160.0-123.199.255.255
                  124.174.0.0/15
                  125.61.192.0/18
                  125.169.0.0/16
                  180.184.0.0/15
                  202.70.0.0/19
                  203.128.32.0/19
                  203.128.96.0/19
                  203.175.192.0/18
                  210.78.96.0/19
                  221.136.0.0/16
                  223.255.0.0/17
                IPv6:
                  2406:d440::/32
                  240b:6000::/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:90:03:d1:04:e7:bc:52:88:36:d3:0b:b6:2f:37:d7:0f:
         5e:20:bc:12:21:e0:7b:78:6e:88:b6:86:c3:4d:8f:fc:80:64:
         8b:73:34:a6:8d:4d:3c:93:28:1b:5a:a0:14:81:3c:bd:b1:11:
         96:95:d0:f5:66:c7:30:93:75:03:ea:12:bc:e4:d5:02:1c:f0:
         ca:fb:f3:c0:e6:00:49:97:7b:0c:70:e2:63:41:6a:7c:d6:48:
         34:37:31:ea:e5:18:d5:be:e7:2b:fe:5b:2d:f9:3c:2b:7a:61:
         2a:8a:12:48:1e:94:3b:50:5c:53:e0:11:ed:34:1a:af:4c:61:
         5a:9e:11:58:78:85:d9:52:fc:6a:cc:74:b3:29:76:83:15:96:
         48:73:37:4c:4a:de:a9:52:bb:ac:d0:5b:5c:58:85:3a:62:23:
         23:bc:42:8e:90:ec:54:c6:04:8b:87:33:d0:d7:70:d4:fb:1b:
         97:0f:f1:20:3d:04:f9:eb:1c:20:f7:e2:e9:e0:62:e7:12:cb:
         c4:2a:b9:d3:c1:93:bb:c4:9a:e2:76:78:ae:0f:10:87:5e:ad:
         3f:19:9a:ba:fb:8c:5e:11:a5:08:12:9d:1e:23:41:69:8b:ee:
         59:dd:51:32:d9:2b:27:cf:62:d5:48:a8:0f:47:d8:1f:d6:0d:
         b5:5d:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:00:16 2025 by rpki-client