Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
File: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer (raw, json)
Hash identifier: 8fjfvxIcjM54BOqFxpaLDI82V+I0+JaYIO/qACG7l9E=
Subject key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 01AFF103AA5C366B3F6D7C2837E8BAF29D26B0B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 26 May 2026 08:07:28 +0000
Certificate not after: Tue 25 May 2027 08:12:28 +0000
Subordinate resources: AS: 151251
IP: 202.153.7.0/24
IP: 202.158.242.0/24
IP: 202.171.232.0/24
IP: 202.172.7.0/24
IP: 202.173.6.0/24
IP: 203.16.63.0/24
IP: 203.17.249.0/24
IP: 203.19.1.0/24
IP: 203.100.60.0/24
IP: 203.142.219.0/24
IP: 203.174.6.0/24
IP: 203.191.2.0/24
IP: 203.191.7.0/24
IP: 203.201.181.0/24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:af:f1:03:aa:5c:36:6b:3f:6d:7c:28:37:e8:ba:f2:9d:26:b0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 26 08:07:28 2026 GMT
Not After : May 25 08:12:28 2027 GMT
Subject: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:62:3d:42:20:47:aa:4e:5d:af:25:30:2c:
9f:e2:a7:59:9a:71:de:d7:e2:1f:91:3e:b3:02:cf:
5a:d1:67:e3:2a:86:db:b2:54:44:e2:05:9a:36:37:
01:a6:00:bb:89:d3:fd:d8:89:1b:30:6c:46:4c:28:
85:a5:6b:76:f0:cf:02:7d:cd:2f:ca:78:ae:cf:d2:
72:31:e4:29:c2:d0:04:93:54:67:dd:3d:e9:06:5d:
19:e2:8a:7a:ab:f2:7f:51:2c:e8:2b:b6:80:7c:cd:
fb:a0:a5:37:1e:2f:22:44:e0:53:78:4e:0e:1e:e9:
de:2c:64:5a:05:70:35:57:87:3f:9f:38:0b:99:90:
96:e0:5f:0c:43:47:3a:8c:0b:be:ba:e0:99:ed:4d:
d6:bb:14:95:9e:69:f6:08:5a:7d:ab:91:a3:2a:2c:
f6:5b:f2:61:9c:56:a8:2f:f9:1d:52:2d:97:3d:2c:
6b:37:ec:7a:ba:9b:1a:f6:a5:e9:15:ad:fa:e6:98:
c0:16:34:6d:78:19:98:38:83:47:ba:c0:32:98:31:
17:f6:4a:db:65:4a:79:dd:03:90:f1:f3:83:19:ca:
f8:70:a4:cf:a1:1c:c4:07:27:73:57:1e:7d:31:03:
f5:f7:8b:d9:9f:39:ce:5d:79:99:ab:5c:f0:1f:87:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.153.7.0/24
202.158.242.0/24
202.171.232.0/24
202.172.7.0/24
202.173.6.0/24
203.16.63.0/24
203.17.249.0/24
203.19.1.0/24
203.100.60.0/24
203.142.219.0/24
203.174.6.0/24
203.191.2.0/24
203.191.7.0/24
203.201.181.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151251
Signature Algorithm: sha256WithRSAEncryption
52:5d:d2:11:c6:33:f1:eb:af:c9:2d:2e:4a:d4:b2:ba:15:83:
23:14:96:64:3f:08:da:34:10:2f:dd:06:a4:b2:6c:37:a2:a7:
91:41:5f:06:42:fd:33:98:e3:52:e7:da:82:ac:e9:99:75:3c:
9e:e9:c0:52:12:a0:25:26:a8:ac:a3:eb:30:b0:93:62:bd:a5:
08:d6:e1:17:1c:ef:66:aa:22:14:f6:d6:6b:a8:7a:dd:1b:b7:
59:95:20:5a:2c:bb:92:15:c1:b1:51:5a:3b:d6:da:fc:87:c2:
77:19:71:35:6c:cf:f8:ee:be:ae:f1:fd:bc:35:fc:1f:a4:8d:
90:86:08:fa:96:7c:b4:17:ba:fd:2b:11:1d:fe:64:08:bb:58:
0f:f0:9d:e9:f2:66:b7:5d:3d:9e:a2:0e:b6:42:be:96:7a:b1:
7c:43:f4:98:38:51:ce:e5:38:cd:3b:19:81:cb:e8:82:a5:46:
3c:5f:48:a9:89:72:d1:4e:f2:51:e9:26:b8:0e:04:fe:e2:92:
4a:4c:cc:7d:af:1c:c3:c1:55:70:9d:3b:6c:31:a3:69:e3:81:
aa:00:4f:fd:38:e8:bf:6c:55:97:ed:16:79:34:ea:c1:8c:fe:
34:b7:32:c8:b1:30:46:bc:7f:00:d7:45:ab:66:65:97:82:36:
38:7c:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:14:09 2026 by rpki-client