Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
File: 158B95F55D548B072B42C2C2820ACE7D9908E60F.cer (raw, json)
Hash identifier: QQJQE0P817wE3TfzL3kep4fvrEU85XUStMLyNomjrmw=
Subject key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 460C35654017745A92B777D8BBAD67883BDE28AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 22 Apr 2026 06:08:25 +0000
Certificate not after: Wed 21 Apr 2027 06:13:25 +0000
Subordinate resources: AS: 59072
IP: 43.247.68.0/22
IP: 43.254.156.0/22
IP: 45.248.128.0/22
IP: 45.248.208.0 -- 45.248.235.255
IP: 45.248.240.0 -- 45.249.7.255
IP: 103.24.176.0/22
IP: 103.61.140.0/22
IP: 103.65.60.0 -- 103.65.75.255
IP: 103.198.156.0/22
IP: 103.207.188.0 -- 103.207.215.255
IP: 103.217.0.0/18
IP: 103.238.188.0/22
IP: 124.150.137.0/24
IP: 137.59.59.0/24
IP: 175.111.144.0 -- 175.111.175.255
IP: 202.153.7.0/24
IP: 202.158.242.0/24
IP: 202.171.232.0/24
IP: 202.172.7.0/24
IP: 202.173.6.0/24
IP: 203.16.63.0/24
IP: 203.17.249.0/24
IP: 203.19.1.0/24
IP: 203.100.60.0/24
IP: 203.142.219.0/24
IP: 203.174.6.0/24
IP: 203.191.2.0/24
IP: 203.191.7.0/24
IP: 203.201.181.0/24
IP: 2406:9380::/32
IP: 2406:9480::/32
IP: 2406:9d80::/32
IP: 2406:9e80::/32
IP: 2406:9f80::/32
IP: 2406:a080::/32
IP: 2406:a180::/32
IP: 2406:a280::/32
IP: 2406:a380::/32
IP: 2406:a480::/32
IP: 2406:a580::/32
IP: 2406:a680::/32
IP: 2406:a780::/32
IP: 2406:a880::/32
IP: 2406:a980::/32
IP: 2406:aa80::/32
IP: 2406:ab80::/32
IP: 2406:ac80::/32
IP: 2406:ad80::/32
IP: 2406:ae80::/32
IP: 2406:af80::/32
IP: 2406:b080::/32
IP: 2406:b880::/32
IP: 2406:b980::/32
IP: 2406:ba80::/32
IP: 2406:bb80::/32
IP: 2406:bc80::/32
IP: 2406:bd80::/32
IP: 2406:be80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 11:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0c:35:65:40:17:74:5a:92:b7:77:d8:bb:ad:67:88:3b:de:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 22 06:08:25 2026 GMT
Not After : Apr 21 06:13:25 2027 GMT
Subject: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:ca:d1:5d:0f:81:26:96:c9:86:ca:75:76:
dd:e0:bf:4f:89:a0:66:b6:f0:1a:f2:6c:09:7b:71:
78:1f:9d:ec:ef:48:d5:54:12:49:8c:0c:82:db:0c:
9e:94:25:b5:85:fc:92:ce:40:39:c3:77:f9:51:2d:
48:8d:49:6e:e5:19:2b:ef:b6:40:61:64:a6:57:c9:
4f:bf:60:71:1a:91:00:41:27:cf:ee:5e:82:68:2c:
87:39:1a:7f:fb:81:08:d8:5f:a0:f8:39:00:85:69:
6c:e5:bb:78:c2:20:21:8d:92:ac:dd:ed:b3:e1:3b:
68:f4:ef:b3:fc:e3:7b:b0:e4:4a:c7:8a:67:a8:d7:
2f:96:4d:70:64:a6:c1:34:e4:e1:9a:00:1e:ab:92:
66:cc:37:6e:39:43:59:0c:47:2a:bd:56:57:61:62:
3f:a5:d0:0e:bd:f6:aa:9b:a5:39:16:0d:92:bc:b3:
c0:18:bc:6f:76:16:bd:6f:e0:1b:8f:78:7b:01:ab:
14:2e:5c:75:49:2b:db:b3:f2:76:33:2a:06:f1:d7:
6a:ba:c9:37:5b:6d:9c:12:d8:cf:07:df:4a:34:db:
43:7a:18:8d:50:e9:67:4f:d2:7f:1e:db:20:7d:d7:
c8:b8:2f:39:42:35:ee:ac:e1:aa:1f:05:e1:05:58:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.68.0/22
43.254.156.0/22
45.248.128.0/22
45.248.208.0-45.248.235.255
45.248.240.0-45.249.7.255
103.24.176.0/22
103.61.140.0/22
103.65.60.0-103.65.75.255
103.198.156.0/22
103.207.188.0-103.207.215.255
103.217.0.0/18
103.238.188.0/22
124.150.137.0/24
137.59.59.0/24
175.111.144.0-175.111.175.255
202.153.7.0/24
202.158.242.0/24
202.171.232.0/24
202.172.7.0/24
202.173.6.0/24
203.16.63.0/24
203.17.249.0/24
203.19.1.0/24
203.100.60.0/24
203.142.219.0/24
203.174.6.0/24
203.191.2.0/24
203.191.7.0/24
203.201.181.0/24
IPv6:
2406:9380::/32
2406:9480::/32
2406:9d80::/32
2406:9e80::/32
2406:9f80::/32
2406:a080::/32
2406:a180::/32
2406:a280::/32
2406:a380::/32
2406:a480::/32
2406:a580::/32
2406:a680::/32
2406:a780::/32
2406:a880::/32
2406:a980::/32
2406:aa80::/32
2406:ab80::/32
2406:ac80::/32
2406:ad80::/32
2406:ae80::/32
2406:af80::/32
2406:b080::/32
2406:b880::/32
2406:b980::/32
2406:ba80::/32
2406:bb80::/32
2406:bc80::/32
2406:bd80::/32
2406:be80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59072
Signature Algorithm: sha256WithRSAEncryption
85:df:75:61:cb:54:03:7e:05:c0:5a:11:e4:63:70:6b:22:8b:
4b:83:27:25:0f:f6:c2:24:25:06:78:d5:db:31:3e:04:1b:6a:
98:ca:aa:86:42:21:d8:21:8b:96:4b:f3:ad:bf:06:88:fc:1c:
12:94:8e:d1:62:e1:04:4c:b5:77:71:62:2c:0d:cd:e0:68:76:
f7:f8:aa:75:45:05:6d:10:9d:98:cd:1d:90:ec:58:8d:72:96:
ad:75:99:2c:b3:89:4d:a1:2b:a3:f3:67:45:ee:d7:07:66:bb:
eb:85:cb:b3:fa:c5:71:c3:c4:6d:39:c9:04:9b:a1:22:97:9f:
d8:b5:ad:57:07:7c:e5:3e:8c:9a:cb:3a:b5:9b:45:a4:7e:32:
ba:d0:d3:b9:cb:c0:14:fc:02:71:f4:83:a2:c8:00:0e:b6:ef:
a2:5a:c2:60:76:25:5f:21:e0:40:53:9e:63:d4:99:3d:65:a0:
b2:16:93:b4:7b:af:3e:7c:0d:17:0b:11:1d:36:02:4e:05:62:
cb:b0:8a:81:1e:aa:20:f2:7f:a2:61:a1:35:d8:67:62:b1:9b:
c4:81:36:61:07:6d:13:70:05:c3:59:d8:47:26:5e:b0:53:c5:
8d:33:82:05:2c:84:8e:54:de:d5:b3:4c:74:87:18:e9:dc:14:
54:35:06:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:03:01 2026 by rpki-client