Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
File: sTLT4KDPHu-UWlZnFbFefhSl_uM.cer (raw, json)
Hash identifier: 7gr/njVCIByqb4A1kIwDWguikxgnj7Y513a0rZuofRE=
Subject key identifier: B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DD4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 13 Sep 2025 03:08:33 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 17962
IP: 36.36.0.0/16
IP: 103.12.184.0/22
IP: 111.221.128.0 -- 111.222.255.255
IP: 115.44.0.0/15
IP: 116.76.0.0/15
IP: 180.200.252.0/22
IP: 203.88.32.0/19
IP: 211.148.192.0/19
IP: 219.232.160.0/19
IP: 219.234.96.0/19
IP: 222.125.0.0/16
IP: 222.248.0.0/16
IP: 223.212.0.0/15
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Oct 2025 23:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56650 (0xdd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 13 03:08:33 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:cd:d8:d9:b0:02:98:9e:b3:e5:47:6c:ef:
46:cc:38:32:a2:f8:fc:0c:34:28:df:15:04:21:95:
17:20:3d:94:a8:ff:9d:0a:4d:a8:dc:c6:f0:b5:01:
9e:af:80:50:65:5a:aa:70:e2:b7:47:24:f2:b0:88:
cb:5f:94:50:de:82:b9:e9:42:c1:7f:21:30:3d:a5:
c6:82:c8:80:66:15:9e:64:98:84:a0:19:e6:27:db:
d5:f3:5e:7f:d6:dd:73:6a:6a:47:62:c5:77:c5:c5:
09:46:5f:22:30:95:02:e3:2b:f8:3d:a9:1d:67:4a:
cd:78:ff:a6:a4:ec:91:f6:d8:a3:97:ac:dc:a2:0f:
3a:4b:89:b3:7d:6b:b6:7d:9d:1c:8b:36:3e:3f:67:
b5:ab:aa:2f:0a:f4:0d:06:fe:7f:1c:25:7e:1c:09:
47:26:4c:63:9c:de:12:62:6d:65:99:ee:40:43:54:
e3:a8:42:dc:64:94:e8:7a:3b:75:52:5a:5c:de:3d:
64:9b:44:e3:8f:84:90:96:20:64:21:06:d3:f7:b7:
8d:4a:6d:17:50:c4:f8:cb:35:81:9f:41:d3:fa:f2:
25:bd:a1:ef:c8:e6:f5:c2:ad:24:e7:c9:86:4f:6d:
d4:5c:58:d4:42:d4:b8:b0:32:97:a7:0e:35:c0:a3:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17962
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
103.12.184.0/22
111.221.128.0-111.222.255.255
115.44.0.0/15
116.76.0.0/15
180.200.252.0/22
203.88.32.0/19
211.148.192.0/19
219.232.160.0/19
219.234.96.0/19
222.125.0.0/16
222.248.0.0/16
223.212.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b6:3b:df:19:47:e9:a9:6a:71:f9:d4:4e:cd:25:5c:5e:a7:f4:
bb:b0:1e:db:f2:0d:6f:65:15:d7:96:d1:0c:0d:8f:91:66:41:
e9:02:92:f0:55:9d:db:21:b8:6c:39:ed:6b:bd:5f:9d:70:3b:
26:69:b8:9a:c0:a2:c8:70:3c:da:39:7d:fc:0d:65:73:a7:14:
7d:45:0f:b4:33:75:16:3c:f2:ac:bb:33:41:b1:d5:bf:62:14:
0c:55:dc:93:eb:8f:99:1d:bb:ee:95:b6:f3:32:cf:ae:c9:df:
48:03:17:f0:10:e6:1b:ab:de:ce:a7:ec:1b:07:df:9f:7a:e6:
e3:18:6b:a5:bd:43:40:28:cc:b4:1e:94:d0:cf:9e:54:9d:4a:
ee:d8:43:1a:fd:25:2e:14:bb:5a:5f:8a:71:c0:b9:9d:91:5e:
98:88:30:ce:0e:33:04:e2:a5:43:cc:61:29:8d:22:1d:53:a2:
72:4f:79:d5:8a:43:17:3f:ee:31:70:b1:e0:74:54:ee:33:1e:
73:6c:fa:76:bb:75:89:3b:11:d9:86:fb:ba:00:49:6c:d3:a7:
44:92:0d:28:26:c7:7f:a3:25:da:21:f0:70:3f:d0:72:70:d2:
38:67:55:ac:81:e1:02:bb:93:08:95:a3:08:ae:2b:b0:f4:5f:
94:47:35:e4
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDAN1KMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA5MTMwMzA4MzNaFw0yNjA4MDMwODQ0NDBaMDMx
MTAvBgNVBAMTKEIxMzJEM0UwQTBDRjFFRUY5NDVBNTY2NzE1QjE1RTdFMTRBNUZF
RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp083Y2bACmJ6z5Uds
70bMODKi+PwMNCjfFQQhlRcgPZSo/50KTajcxvC1AZ6vgFBlWqpw4rdHJPKwiMtf
lFDegrnpQsF/ITA9pcaCyIBmFZ5kmISgGeYn29XzXn/W3XNqakdixXfFxQlGXyIw
lQLjK/g9qR1nSs14/6ak7JH22KOXrNyiDzpLibN9a7Z9nRyLNj4/Z7Wrqi8K9A0G
/n8cJX4cCUcmTGOc3hJibWWZ7kBDVOOoQtxklOh6O3VSWlzePWSbROOPhJCWIGQh
BtP3t41KbRdQxPjLNYGfQdP68iW9oe/I5vXCrSTnyYZPbdRcWNRC1LiwMpenDjXA
o8wJAgMBAAGjggK3MIICszAdBgNVHQ4EFgQUsTLT4KDPHu+UWlZnFbFefhSl/uMw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0
Mi8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8xNDIvc1RMVDRLRFBIdS1VV2xabkZiRmVmaFNsX3VNLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJGKjBoBggrBgEFBQcBBwEB/wRZMFcwVQQC
AAEwTwMDACQkAwQCZwy4MAsDBAdv3YADAwBv3gMDAXMsAwMBdEwDBAK0yPwDBAXL
WCADBAXTlMADBAXb6KADBAXb6mADAwDefQMDAN74AwMB39QwDQYJKoZIhvcNAQEL
BQADggEBALY73xlH6alqcfnUTs0lXF6n9LuwHtvyDW9lFdeW0QwNj5FmQekCkvBV
ndshuGw57Wu9X51wOyZpuJrAoshwPNo5ffwNZXOnFH1FD7QzdRY88qy7M0Gx1b9i
FAxV3JPrj5kdu+6VtvMyz67J30gDF/AQ5hur3s6n7BsH35965uMYa6W9Q0AozLQe
lNDPnlSdSu7YQxr9JS4Uu1pfinHAuZ2RXpiIMM4OMwTipUPMYSmNIh1TonJPedWK
Qxc/7jFwseB0VO4zHnNs+na7dYk7EdmG+7oASWzTp0SSDSgmx3+jJdoh8HA/0HJw
0jhnVayB4QK7kwiVowiuK7D0X5RHNeQ=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:03:15 2025 by rpki-client