Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
File:                     1133679B2C104A0446FA0C3764EEE246C5D21075.cer (raw, json)
Hash identifier:          jcC8c/+XQhEUD44HGZhupHPd3JcGM4+aKxRrhg4Ls3E=
Subject key identifier:   11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       4D93989FD4D4CB5003A0490D62686DE3E99F75C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 28 May 2026 08:57:53 +0000
Certificate not after:    Thu 27 May 2027 09:02:53 +0000
Subordinate resources:    AS: 55991
                          IP: 43.228.204.0/22
                          IP: 43.228.240.0/22
                          IP: 103.41.116.0/22
                          IP: 103.44.144.0/22
                          IP: 103.56.100.0 -- 103.56.107.255
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:93:98:9f:d4:d4:cb:50:03:a0:49:0d:62:68:6d:e3:e9:9f:75:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 28 08:57:53 2026 GMT
            Not After : May 27 09:02:53 2027 GMT
        Subject: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:b4:88:44:d9:06:ef:b2:7a:fc:90:a9:2c:
                    20:94:bf:92:8b:50:6d:fa:7e:fe:0c:00:e9:4e:0e:
                    2d:18:98:10:9c:9a:93:f9:b5:94:d9:9e:5c:6a:d9:
                    70:35:f6:35:84:cc:2c:50:c5:3c:e8:5d:8e:b8:f6:
                    51:28:89:56:b6:10:e0:47:8b:b6:13:9d:69:2e:ad:
                    56:0c:8f:ec:5c:75:5f:c0:04:7f:2d:d3:c9:e1:67:
                    d5:eb:8c:7e:fb:83:8a:b8:bd:7c:91:77:5f:37:b0:
                    19:40:ef:23:82:11:be:06:38:87:0d:11:d0:ad:d8:
                    00:49:15:bb:d6:d0:f9:04:07:38:7f:05:3e:fc:2d:
                    49:e9:9e:0a:32:fd:a3:d8:b5:0e:96:2e:07:91:2d:
                    51:c8:8e:f9:bf:d0:99:36:92:b1:9b:01:16:65:80:
                    51:51:81:df:84:00:73:15:88:59:65:1a:fd:30:bd:
                    db:37:80:38:66:0b:89:6b:9e:da:6a:b5:4b:a4:2d:
                    d8:1d:a9:27:dc:fb:09:05:a0:de:75:0d:0b:b9:62:
                    a0:7f:a0:6b:ae:67:65:60:ab:b2:84:10:05:5a:08:
                    1d:ff:58:73:e5:38:09:7c:ab:29:48:42:db:b2:35:
                    81:6f:fb:45:d8:f2:6e:27:de:b3:da:02:48:1a:1b:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.204.0/22
                  43.228.240.0/22
                  103.41.116.0/22
                  103.44.144.0/22
                  103.56.100.0-103.56.107.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55991

    Signature Algorithm: sha256WithRSAEncryption
         5e:2a:09:d7:f2:8f:61:7f:d9:25:1f:1c:ae:49:49:62:80:bf:
         99:bc:23:d6:c0:84:24:28:37:80:99:4b:a3:b7:6e:48:2e:3f:
         a4:60:1c:23:97:fc:aa:54:8a:e4:4f:f3:f8:6b:64:5c:72:98:
         e9:d5:4c:18:19:3f:46:4b:24:fe:f3:84:fc:f3:62:16:93:a8:
         0b:4a:1c:9b:5f:16:30:8a:d8:a6:f6:fc:55:75:00:a4:b1:bc:
         46:88:f6:a1:06:0a:3d:b0:01:48:f9:28:71:85:da:b5:a4:0b:
         f8:b8:f6:b8:01:d5:d6:77:d9:45:2a:7e:59:6b:e1:98:dc:3b:
         32:02:98:78:70:f3:b0:61:32:41:14:d1:d7:49:e9:a5:22:6d:
         27:58:2e:2e:75:9b:54:75:91:20:4a:c1:0f:6f:fa:d9:1c:9f:
         ef:d4:94:af:69:0f:fa:8a:11:15:f7:93:49:7b:2e:f2:d0:3f:
         34:64:77:de:3b:52:63:ec:86:3b:0c:4d:40:57:35:9b:3d:76:
         05:92:b8:2e:e4:f7:75:8e:03:ed:82:01:58:d1:b6:39:5c:04:
         fc:e6:f8:e6:ba:f6:34:f4:b1:38:84:e2:64:72:b0:80:e1:b8:
         96:f4:58:0b:ea:7d:46:79:31:f0:3d:a5:cc:18:aa:19:e7:f6:
         ff:d6:3d:a8
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgIUTZOYn9TUy1ADoEkNYmht4+mfdcMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4NTc1M1oX
DTI3MDUyNzA5MDI1M1owMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEw
QzM3NjRFRUUyNDZDNUQyMTA3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANrttIhE2Qbvsnr8kKksIJS/kotQbfp+/gwA6U4OLRiYEJyak/m1lNmeXGrZ
cDX2NYTMLFDFPOhdjrj2USiJVrYQ4EeLthOdaS6tVgyP7Fx1X8AEfy3TyeFn1euM
fvuDiri9fJF3XzewGUDvI4IRvgY4hw0R0K3YAEkVu9bQ+QQHOH8FPvwtSemeCjL9
o9i1DpYuB5EtUciO+b/QmTaSsZsBFmWAUVGB34QAcxWIWWUa/TC92zeAOGYLiWue
2mq1S6Qt2B2pJ9z7CQWg3nUNC7lioH+ga65nZWCrsoQQBVoIHf9Yc+U4CXyrKUhC
27I1gW/7Rdjybifes9oCSBobQUECAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFBEzZ5ssEEoERvoMN2Tu4kbF0hB1MB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzQwMDMyMi8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NDAwMzIy
LzAvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUH
AQcBAf8EMDAuMCwEAgABMCYDBAIr5MwDBAIr5PADBAJnKXQDBAJnLJAwDAMEAmc4
ZAMEAmc4aDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA2rcwDQYJKoZIhvcNAQEL
BQADggEBAF4qCdfyj2F/2SUfHK5JSWKAv5m8I9bAhCQoN4CZS6O3bkguP6RgHCOX
/KpUiuRP8/hrZFxymOnVTBgZP0ZLJP7zhPzzYhaTqAtKHJtfFjCK2Kb2/FV1AKSx
vEaI9qEGCj2wAUj5KHGF2rWkC/i49rgB1dZ32UUqfllr4ZjcOzICmHhw87BhMkEU
0ddJ6aUibSdYLi51m1R1kSBKwQ9v+tkcn+/UlK9pD/qKERX3k0l7LvLQPzRkd947
UmPshjsMTUBXNZs9dgWSuC7k93WOA+2CAVjRtjlcBPzm+Oa69jT0sTiE4mRysIDh
uJb0WAvqfUZ5MfA9pcwYqhnn9v/WPag=
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:41:45 2026 by rpki-client