Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
File:                     060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer (raw, json)
Hash identifier:          v5ypniFRS4MFC5ctQ1DPVUTd5wQi5I0ZGhiSUKsR4fc=
Subject key identifier:   06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       7C28A123381F5192E44409FFD48167604BF5703A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 27 Apr 2026 03:43:42 +0000
Certificate not after:    Mon 26 Apr 2027 03:48:42 +0000
Subordinate resources:    AS: 63602
                          AS: 137804
                          IP: 101.49.128.0/18
                          IP: 103.216.40.0/22
                          IP: 157.119.172.0/22
                          IP: 2404:e780::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:28:a1:23:38:1f:51:92:e4:44:09:ff:d4:81:67:60:4b:f5:70:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 27 03:43:42 2026 GMT
            Not After : Apr 26 03:48:42 2027 GMT
        Subject: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:82:ee:c3:41:9e:5d:92:76:7d:7d:ce:ea:
                    63:38:72:24:60:b2:57:bc:c8:0a:58:2a:35:b9:14:
                    5b:a8:72:d9:96:75:da:c1:3f:01:85:eb:5f:af:36:
                    3d:8a:c1:84:83:4a:b5:92:c8:5a:17:2d:3c:00:d0:
                    dd:d8:52:dd:13:cf:b6:2c:60:76:69:5e:29:6b:3c:
                    85:fc:df:a1:29:97:0b:33:68:dd:1a:eb:3a:e8:43:
                    11:e0:fd:67:8d:57:a5:a9:13:63:7b:e0:bd:a3:29:
                    45:db:1d:1e:28:e5:ee:2c:f4:ed:83:95:db:36:fb:
                    09:dc:8f:d7:37:02:72:fb:2f:54:5b:93:12:46:7e:
                    fb:30:26:11:b0:fa:b4:f8:46:6d:f5:c3:59:36:9f:
                    51:7a:b1:1f:c7:d4:8a:70:32:76:c0:bf:88:d5:56:
                    98:14:a9:be:15:c2:0a:e4:63:8a:ee:f7:12:19:98:
                    77:a3:d7:e3:42:56:96:13:b6:09:99:a1:ad:36:7d:
                    e4:88:ea:56:39:0d:9b:db:c4:1b:3b:c6:b6:ca:98:
                    51:48:10:57:75:fe:72:cd:13:da:9b:5c:83:5e:09:
                    dc:61:6e:8d:05:c4:2a:b8:b0:85:83:f2:d0:af:1e:
                    6f:b2:78:51:35:d8:d2:74:75:a9:17:c6:72:00:1b:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.128.0/18
                  103.216.40.0/22
                  157.119.172.0/22
                IPv6:
                  2404:e780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63602
                  137804

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:31:5c:b3:f1:ea:3b:15:e7:36:06:c4:4b:30:c8:13:d0:
         08:8d:3d:2a:9c:e8:a5:a8:80:88:2a:6f:b7:24:17:5d:8d:e5:
         72:2f:df:10:cd:28:46:3e:50:0e:14:97:29:82:af:41:28:9c:
         ae:af:76:ed:de:e9:be:88:fa:8d:64:97:fb:9a:d0:cb:d9:d8:
         7a:78:d7:58:d5:89:fd:d1:dd:64:b3:47:c4:33:d5:02:0f:ee:
         58:de:fc:a9:5d:38:4d:cf:a8:d3:0e:a5:5b:bc:a1:20:b9:9b:
         a9:47:ce:84:78:e9:3d:84:97:20:1f:0a:f9:ec:c2:cd:fb:2a:
         a8:fc:11:35:bb:30:61:e1:29:b8:4e:ec:45:8e:ce:31:6a:38:
         72:15:8e:e7:c8:e9:55:f2:a4:81:2b:ef:b9:b3:08:b7:11:df:
         31:30:66:19:b9:4d:52:e8:5e:36:57:aa:18:52:a6:ec:21:26:
         6f:2a:15:ab:ef:d9:ae:ff:69:c3:f5:86:66:a5:fd:af:c8:98:
         46:14:72:7f:23:c8:0a:ee:f7:0b:f8:ad:ac:04:7f:20:83:ca:
         54:b4:60:c9:2e:b8:f9:72:1e:d9:c5:9e:67:0d:8d:8c:81:3c:
         8f:ff:d1:40:dc:bd:57:85:53:a5:f4:91:6b:dc:4e:48:71:bb:
         0c:e2:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:09:26 2026 by rpki-client