Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
File: 158B95F55D548B072B42C2C2820ACE7D9908E60F.cer (raw, json)
Hash identifier: M40CgNMvZHxbCPIxmJfBq7bS9P3VZmtnFw+bC29D5dI=
Subject key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 72D2893B533E62CFC601AFE5F3CF6349CD6868BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 26 May 2026 05:55:46 +0000
Certificate not after: Tue 25 May 2027 06:00:46 +0000
Subordinate resources: AS: 59072
IP: 43.247.68.0/22
IP: 43.254.156.0/22
IP: 45.248.128.0/22
IP: 45.248.208.0 -- 45.248.235.255
IP: 45.248.240.0 -- 45.249.7.255
IP: 103.24.176.0/22
IP: 103.61.140.0/22
IP: 103.65.60.0 -- 103.65.75.255
IP: 103.198.156.0/22
IP: 103.207.188.0 -- 103.207.215.255
IP: 103.217.0.0/18
IP: 103.238.188.0/22
IP: 124.150.137.0/24
IP: 137.59.59.0/24
IP: 175.111.144.0 -- 175.111.175.255
IP: 2406:9380::/32
IP: 2406:9480::/32
IP: 2406:9d80::/32
IP: 2406:9e80::/32
IP: 2406:9f80::/32
IP: 2406:a080::/32
IP: 2406:a180::/32
IP: 2406:a280::/32
IP: 2406:a380::/32
IP: 2406:a480::/32
IP: 2406:a580::/32
IP: 2406:a680::/32
IP: 2406:a780::/32
IP: 2406:a880::/32
IP: 2406:a980::/32
IP: 2406:aa80::/32
IP: 2406:ab80::/32
IP: 2406:ac80::/32
IP: 2406:ad80::/32
IP: 2406:ae80::/32
IP: 2406:af80::/32
IP: 2406:b080::/32
IP: 2406:b880::/32
IP: 2406:b980::/32
IP: 2406:ba80::/32
IP: 2406:bb80::/32
IP: 2406:bc80::/32
IP: 2406:bd80::/32
IP: 2406:be80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d2:89:3b:53:3e:62:cf:c6:01:af:e5:f3:cf:63:49:cd:68:68:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 26 05:55:46 2026 GMT
Not After : May 25 06:00:46 2027 GMT
Subject: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:ca:d1:5d:0f:81:26:96:c9:86:ca:75:76:
dd:e0:bf:4f:89:a0:66:b6:f0:1a:f2:6c:09:7b:71:
78:1f:9d:ec:ef:48:d5:54:12:49:8c:0c:82:db:0c:
9e:94:25:b5:85:fc:92:ce:40:39:c3:77:f9:51:2d:
48:8d:49:6e:e5:19:2b:ef:b6:40:61:64:a6:57:c9:
4f:bf:60:71:1a:91:00:41:27:cf:ee:5e:82:68:2c:
87:39:1a:7f:fb:81:08:d8:5f:a0:f8:39:00:85:69:
6c:e5:bb:78:c2:20:21:8d:92:ac:dd:ed:b3:e1:3b:
68:f4:ef:b3:fc:e3:7b:b0:e4:4a:c7:8a:67:a8:d7:
2f:96:4d:70:64:a6:c1:34:e4:e1:9a:00:1e:ab:92:
66:cc:37:6e:39:43:59:0c:47:2a:bd:56:57:61:62:
3f:a5:d0:0e:bd:f6:aa:9b:a5:39:16:0d:92:bc:b3:
c0:18:bc:6f:76:16:bd:6f:e0:1b:8f:78:7b:01:ab:
14:2e:5c:75:49:2b:db:b3:f2:76:33:2a:06:f1:d7:
6a:ba:c9:37:5b:6d:9c:12:d8:cf:07:df:4a:34:db:
43:7a:18:8d:50:e9:67:4f:d2:7f:1e:db:20:7d:d7:
c8:b8:2f:39:42:35:ee:ac:e1:aa:1f:05:e1:05:58:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.68.0/22
43.254.156.0/22
45.248.128.0/22
45.248.208.0-45.248.235.255
45.248.240.0-45.249.7.255
103.24.176.0/22
103.61.140.0/22
103.65.60.0-103.65.75.255
103.198.156.0/22
103.207.188.0-103.207.215.255
103.217.0.0/18
103.238.188.0/22
124.150.137.0/24
137.59.59.0/24
175.111.144.0-175.111.175.255
IPv6:
2406:9380::/32
2406:9480::/32
2406:9d80::/32
2406:9e80::/32
2406:9f80::/32
2406:a080::/32
2406:a180::/32
2406:a280::/32
2406:a380::/32
2406:a480::/32
2406:a580::/32
2406:a680::/32
2406:a780::/32
2406:a880::/32
2406:a980::/32
2406:aa80::/32
2406:ab80::/32
2406:ac80::/32
2406:ad80::/32
2406:ae80::/32
2406:af80::/32
2406:b080::/32
2406:b880::/32
2406:b980::/32
2406:ba80::/32
2406:bb80::/32
2406:bc80::/32
2406:bd80::/32
2406:be80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59072
Signature Algorithm: sha256WithRSAEncryption
4a:f0:58:50:51:5c:8d:3b:f6:56:3c:6f:55:be:8a:c3:23:10:
ba:57:bd:15:c6:9a:5e:a6:96:09:7a:97:41:7e:fa:8a:64:b5:
ce:47:03:96:d0:28:c5:08:c7:e8:99:df:02:7c:ea:d6:ae:9e:
40:c2:c2:59:b1:c8:f4:58:2c:70:7a:53:6a:e6:97:1c:9a:30:
97:5f:46:61:e9:58:f3:84:20:fd:5c:2e:26:f0:19:66:e0:a7:
b4:3c:ca:e2:56:7c:ec:ab:77:d0:4b:c9:69:29:a2:31:cd:20:
17:74:cf:87:c0:72:44:b3:9d:97:e4:fd:79:b7:01:84:35:9c:
dc:5a:16:5a:fe:44:30:22:19:eb:3d:f1:18:b8:62:50:86:e9:
e2:1c:94:4b:a4:2e:2f:8a:14:a7:30:0e:1a:cb:cb:f1:46:01:
3a:d8:70:11:73:ec:d0:0c:b4:bc:a2:c3:72:24:8a:78:d9:ae:
72:87:3d:b4:70:ec:34:44:25:33:02:10:f1:48:bf:80:73:a1:
2e:8a:95:90:2a:22:90:20:1f:c1:04:46:9e:27:4c:34:ed:dc:
dc:a4:5e:ce:34:4b:02:f7:56:55:e9:89:c5:f8:de:bd:44:7f:
a8:c8:77:22:29:41:93:92:df:ff:d5:76:cc:18:0c:3b:d6:ab:
53:e4:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:46:57 2026 by rpki-client