Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
File: 056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer (raw, json)
Hash identifier: PWlxRy4C/UY+5VOavPeWUSp48xTZFo8A98GbRYjl6lU=
Subject key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 13575642BED803E62B86453ADD9FB61F15A023EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 05:56:33 +0000
Certificate not after: Thu 27 May 2027 06:01:33 +0000
Subordinate resources: AS: 37963
AS: 45102 -- 45104
AS: 59028
AS: 59051
IP: 43.230.32.0/22
IP: 43.250.12.0/22
IP: 45.112.208.0/20
IP: 59.82.0.0/16
IP: 103.216.108.0/22
IP: 110.75.192.0/19
IP: 117.49.0.0/16
IP: 119.38.208.0/20
IP: 121.0.16.0/20
IP: 157.119.240.0/22
IP: 203.119.128.0/17
IP: 2401:2e00::/32
IP: 2401:b180::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:57:56:42:be:d8:03:e6:2b:86:45:3a:dd:9f:b6:1f:15:a0:23:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 05:56:33 2026 GMT
Not After : May 27 06:01:33 2027 GMT
Subject: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:b6:06:55:be:e2:2e:d2:24:7f:28:74:11:
88:3c:65:f6:cb:07:c7:b7:a8:88:de:fb:21:86:c5:
37:54:a9:03:70:10:79:96:72:46:ec:8a:39:cc:6b:
25:47:43:bd:9b:1c:73:1c:bf:8b:ff:01:3a:fd:c0:
f2:93:da:e2:7a:da:6f:4b:0b:0f:09:77:4e:a8:0a:
7a:9b:b4:19:42:7f:2f:48:de:65:24:11:85:70:c9:
fe:f4:79:9b:5d:2f:aa:8f:ce:d3:43:8f:41:b7:e5:
45:ad:4a:37:48:7d:7f:9b:fa:6c:24:a7:02:61:28:
2c:f1:56:91:57:05:40:2f:54:69:b6:06:34:91:54:
34:b2:4e:cf:62:ea:d1:cd:9c:ff:58:b0:3c:f0:81:
84:da:e3:a1:42:5e:18:bb:38:67:9d:e7:71:f8:99:
7d:e2:12:06:b2:b5:b3:72:e5:d5:57:93:34:16:d3:
be:ac:81:c0:48:cd:c0:76:ac:12:74:87:4c:cb:4c:
19:cf:15:65:cd:d6:e1:16:56:f0:7d:81:e8:05:79:
34:e4:34:26:ee:1c:98:c7:44:3a:64:9f:0d:d4:d1:
97:64:66:12:54:14:7a:a5:24:0e:46:84:4a:cc:42:
76:bf:76:41:11:c8:72:29:17:b5:50:7c:84:9e:b9:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.32.0/22
43.250.12.0/22
45.112.208.0/20
59.82.0.0/16
103.216.108.0/22
110.75.192.0/19
117.49.0.0/16
119.38.208.0/20
121.0.16.0/20
157.119.240.0/22
203.119.128.0/17
IPv6:
2401:2e00::/32
2401:b180::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37963
45102-45104
59028
59051
Signature Algorithm: sha256WithRSAEncryption
1e:88:1a:24:e2:48:a1:71:61:57:8c:58:99:de:6e:bc:74:3e:
61:32:7d:99:a5:4e:5f:5b:92:9f:a4:b3:5c:3f:59:d5:84:1e:
1b:12:43:b5:22:0f:6f:56:f5:cf:a2:b2:6a:6b:b0:36:1a:a0:
ee:64:4d:99:1b:74:60:d8:86:31:0a:71:c5:b9:d2:cc:a9:8e:
75:5a:f9:d6:04:50:7a:b2:89:fc:c4:8f:d9:5f:ab:8c:aa:43:
42:bf:68:44:59:b8:79:e0:85:7b:38:17:18:0b:60:a8:ab:5a:
a1:4c:6a:16:a2:2a:4a:c1:6e:28:57:7c:f2:f9:da:c7:90:ea:
68:57:6a:a4:cc:d4:e5:b3:50:be:0c:3d:4c:39:f1:98:78:b3:
b9:a4:ac:a7:d0:4b:98:4f:2f:9f:a4:64:1e:dd:74:a8:c7:a3:
77:05:8a:e5:e2:16:cd:93:3e:2b:16:7d:0c:3e:8b:cd:f9:64:
b8:63:5e:79:e0:ad:c3:df:ae:34:11:2c:87:a6:0c:72:36:30:
a9:4c:d6:3c:16:52:c7:fc:d6:4e:de:15:59:5e:1c:6c:06:e8:
73:e1:b7:7c:18:ca:5a:27:8e:0d:dc:7e:0d:f0:a2:c4:59:58:
46:7d:c5:64:88:ad:0e:b6:1e:aa:cd:05:38:30:ff:8d:78:e6:
23:fb:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:55:07 2026 by rpki-client