Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
File: 0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer (raw, json)
Hash identifier: qu7GnrYXEdsdgeNNuQlvZ9tBd1PHMkh8b3YWwJTAtZk=
Subject key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 2E3F8460ED85BBF2F9E2627B164E9FD59F8A1D26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 13 Apr 2026 03:19:41 +0000
Certificate not after: Mon 12 Apr 2027 03:24:41 +0000
Subordinate resources: AS: 59048
IP: 43.224.56.0/22
IP: 43.228.132.0 -- 43.228.139.255
IP: 43.242.60.0 -- 43.242.67.255
IP: 45.124.80.0/22
IP: 45.253.24.0/22
IP: 45.253.32.0/22
IP: 103.192.212.0/22
IP: 103.222.32.0/22
IP: 103.222.40.0/22
IP: 103.222.164.0/22
IP: 103.222.172.0/22
IP: 103.223.140.0/22
IP: 103.223.188.0/22
IP: 103.224.228.0/22
IP: 103.255.88.0/22
IP: 103.255.200.0/22
IP: 2401:a140::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3f:84:60:ed:85:bb:f2:f9:e2:62:7b:16:4e:9f:d5:9f:8a:1d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 13 03:19:41 2026 GMT
Not After : Apr 12 03:24:41 2027 GMT
Subject: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:7f:a1:86:78:c5:97:5b:a8:48:3a:76:90:
b4:89:87:66:a2:0b:e0:bc:01:c3:e9:ed:38:e1:be:
82:2f:56:70:d4:07:a6:54:5d:c9:1a:5d:73:86:5b:
60:c8:b6:e0:ac:75:1c:84:bc:73:ad:4c:1b:c2:ef:
f3:bb:b9:38:53:fb:44:f1:a2:0b:22:c7:6c:ef:91:
43:df:43:76:35:12:6e:0b:33:c7:33:55:48:2f:7a:
a9:04:c7:1a:2c:af:c4:e0:19:ed:92:e8:83:8f:ed:
41:c3:01:08:d4:59:b9:6b:9c:dd:1b:eb:16:03:ff:
9e:96:75:fd:97:89:fb:0d:a6:4c:dc:e6:63:c6:ed:
c9:e9:57:78:3f:e2:d1:98:5c:da:8b:d7:8f:b8:0a:
01:75:6c:37:3e:4f:c7:30:d7:a2:99:ab:51:c9:43:
4f:99:b5:29:1b:3a:e7:8a:07:c4:af:f2:f8:94:78:
fd:30:3e:23:e3:e7:f1:51:a4:36:00:a9:44:69:37:
93:e7:7e:8a:e0:82:df:0c:92:ba:fb:e3:07:ab:d9:
68:ad:22:3c:0b:b8:6c:72:4e:83:ad:c2:3b:23:ea:
a8:df:a5:27:19:9e:6c:53:78:75:c3:d0:06:0c:0a:
15:cc:4c:ac:a5:2b:6a:47:2e:15:97:7b:67:2e:11:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.224.56.0/22
43.228.132.0-43.228.139.255
43.242.60.0-43.242.67.255
45.124.80.0/22
45.253.24.0/22
45.253.32.0/22
103.192.212.0/22
103.222.32.0/22
103.222.40.0/22
103.222.164.0/22
103.222.172.0/22
103.223.140.0/22
103.223.188.0/22
103.224.228.0/22
103.255.88.0/22
103.255.200.0/22
IPv6:
2401:a140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59048
Signature Algorithm: sha256WithRSAEncryption
43:2b:e2:a2:3f:59:63:0e:57:ce:e1:68:c1:30:d8:23:3b:d3:
73:e0:55:c4:dc:c8:4a:8b:cb:f9:78:57:56:e5:10:92:e4:a9:
60:3f:5b:41:f9:95:ff:31:55:13:d3:4d:c5:9e:81:b6:12:c4:
48:04:74:0b:58:73:b0:db:fd:cc:22:91:9d:67:bf:ff:4d:5d:
4d:cd:55:5b:ef:03:cd:3a:f3:54:51:6b:ac:a4:89:0d:c4:28:
bf:53:e3:7c:06:42:70:ef:bc:c1:ab:76:94:03:46:ae:3f:33:
4c:65:2b:93:1d:f0:65:be:4a:6b:8d:e1:e7:05:55:3d:ac:57:
d0:d8:04:b2:28:a4:df:5d:59:6a:bd:a9:10:9a:fa:f7:a2:59:
e4:8a:f7:69:52:09:62:8c:a6:86:86:98:25:fc:cc:a7:9c:67:
6e:da:ba:d4:01:55:c7:45:49:98:7e:60:31:76:d8:8a:99:64:
85:f0:cb:71:2f:bc:a3:fb:36:fc:61:15:92:cf:36:ac:7f:6f:
0f:51:b4:a0:ce:fe:71:3d:60:31:e6:58:90:00:81:e0:98:09:
b6:e2:02:31:c6:76:26:68:66:19:99:ed:1c:bb:db:80:4b:67:
39:13:dc:52:31:bc:1f:c9:1d:e9:f4:0c:00:0e:c4:26:c3:2b:
cb:74:ab:fb
-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgIULj+EYO2Fu/L54mJ7Fk6f1Z+KHSYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzAzMTk0MVoX
DTI3MDQxMjAzMjQ0MVowMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4
NkU4ODgzRDU5NUI3NjlGREY4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALU7f6GGeMWXW6hIOnaQtImHZqIL4LwBw+ntOOG+gi9WcNQHplRdyRpdc4Zb
YMi24Kx1HIS8c61MG8Lv87u5OFP7RPGiCyLHbO+RQ99DdjUSbgszxzNVSC96qQTH
GiyvxOAZ7ZLog4/tQcMBCNRZuWuc3RvrFgP/npZ1/ZeJ+w2mTNzmY8btyelXeD/i
0Zhc2ovXj7gKAXVsNz5PxzDXopmrUclDT5m1KRs654oHxK/y+JR4/TA+I+Pn8VGk
NgCpRGk3k+d+iuCC3wySuvvjB6vZaK0iPAu4bHJOg63COyPqqN+lJxmebFN4dcPQ
BgwKFcxMrKUrakcuFZd7Zy4RHwUCAwEAAaOCAzIwggMuMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFA5KZKkLSMjtSqKG6Ig9WVt2n9+LMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NTkxMjQxMDg1OTk2MjM3MS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcx
LzAvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZoGCCsGAQUF
BwEHAQH/BIGKMIGHMHYEAgABMHADBAIr4DgwDAMEAivkhAMEAivkiDAMAwQCK/I8
AwQCK/JAAwQCLXxQAwQCLf0YAwQCLf0gAwQCZ8DUAwQCZ94gAwQCZ94oAwQCZ96k
AwQCZ96sAwQCZ9+MAwQCZ9+8AwQCZ+DkAwQCZ/9YAwQCZ//IMA0EAgACMAcDBQAk
AaFAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmqDANBgkqhkiG9w0BAQsFAAOC
AQEAQyvioj9ZYw5XzuFowTDYIzvTc+BVxNzISovL+XhXVuUQkuSpYD9bQfmV/zFV
E9NNxZ6BthLESAR0C1hzsNv9zCKRnWe//01dTc1VW+8DzTrzVFFrrKSJDcQov1Pj
fAZCcO+8wat2lANGrj8zTGUrkx3wZb5Ka43h5wVVPaxX0NgEsiik311Zar2pEJr6
96JZ5Ir3aVIJYoymhoaYJfzMp5xnbtq61AFVx0VJmH5gMXbYiplkhfDLcS+8o/s2
/GEVks82rH9vD1G0oM7+cT1gMeZYkACB4JgJtuICMcZ2JmhmGZntHLvbgEtnORPc
UjG8H8kd6fQMAA7EJsMry3Sr+w==
-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:08 2026 by rpki-client