Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
File:                     191E76D74421148B42FA2A7F663270AE7FAD25F9.cer (raw, json)
Hash identifier:          LzwtNjsBkZAEroasvsOnRUFunvTZFaR91wPuUikcRCc=
Subject key identifier:   19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       0B7A36ABB2756209921FD5095C00EA3F2016E618
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 28 May 2026 08:39:40 +0000
Certificate not after:    Thu 27 May 2027 08:44:40 +0000
Subordinate resources:    AS: 137797
                          IP: 103.116.120.0/22
                          IP: 2402:f9c0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7a:36:ab:b2:75:62:09:92:1f:d5:09:5c:00:ea:3f:20:16:e6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 28 08:39:40 2026 GMT
            Not After : May 27 08:44:40 2027 GMT
        Subject: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:11:e8:51:ad:05:06:7e:8c:11:6c:9a:a1:
                    ac:03:a9:c1:92:43:a1:1a:9f:ef:57:da:0c:e8:19:
                    73:ac:d4:74:ae:28:7e:14:f8:6d:4d:f0:e0:c3:43:
                    e4:a0:be:01:c1:d5:a1:57:5b:ce:81:73:cf:a7:97:
                    89:de:c9:55:b4:e2:26:f0:d5:ba:08:cc:f3:1f:72:
                    a3:d4:2f:e2:10:25:b6:f0:6c:74:2a:48:bf:63:94:
                    e5:7f:5a:d8:28:c9:b5:99:e3:8e:8d:af:2f:f4:8a:
                    76:5c:d7:08:3a:cc:03:41:b8:37:14:fe:09:28:b0:
                    8d:6d:ee:48:b3:47:25:e2:2e:16:4d:12:33:90:ee:
                    d6:4d:b2:59:91:c9:7c:5f:e0:2f:b4:09:5b:35:07:
                    8b:ee:1e:47:6f:fa:d9:77:f6:80:fb:42:72:7e:42:
                    d1:d5:5c:4c:7e:5b:8e:2c:89:ba:70:e9:be:cb:83:
                    30:3b:3a:f6:7c:eb:52:56:e1:0e:c1:29:3e:fc:89:
                    cd:95:9e:ec:1a:f5:85:77:cb:a9:77:ea:22:2c:4c:
                    50:06:de:71:57:77:f3:b2:c4:24:cc:53:e8:dd:ce:
                    74:b7:fc:d8:07:56:a7:43:17:3c:bd:fa:2b:aa:00:
                    38:9a:b8:49:f1:58:57:0f:8d:0b:d8:4e:55:9a:42:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.120.0/22
                IPv6:
                  2402:f9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137797

    Signature Algorithm: sha256WithRSAEncryption
         17:a0:95:bf:a0:0a:8d:ed:40:f4:e7:4b:a2:a2:4d:ed:b9:97:
         9b:5c:0d:87:52:cc:82:d2:86:b9:f0:c2:b9:c3:db:c3:c4:36:
         e3:6c:fa:9b:0d:da:4d:7e:fd:b4:3e:cd:83:53:5a:1a:8a:10:
         fc:1f:07:65:76:46:d5:f2:82:20:b1:7e:39:3a:c4:79:0a:0a:
         1e:02:2a:f4:52:d4:2a:be:f5:67:67:90:e7:0f:e5:15:04:97:
         bd:d7:46:c0:c1:3e:1d:43:27:19:63:83:db:65:14:df:8b:8d:
         4a:14:a4:47:70:8d:a9:f3:0d:9d:9e:58:c2:47:f7:e3:18:e1:
         90:37:c5:af:04:3f:c2:00:09:22:cc:52:ed:e6:08:d4:fd:aa:
         9a:32:90:cd:aa:75:f5:33:57:12:ef:8b:f4:63:fd:97:cd:c5:
         7e:10:77:3b:f8:79:6e:34:b0:ad:0d:2f:4c:cb:57:d6:1e:ed:
         31:73:c0:66:46:36:72:21:90:29:d3:7a:56:e1:6c:54:50:7f:
         8a:14:e2:bc:98:03:8f:e3:6e:e8:a8:f5:cc:a9:f9:0f:d2:9f:
         69:8d:ab:5a:2d:d4:30:74:f0:42:32:e7:b7:87:cb:a4:48:14:
         93:84:cd:04:0c:96:47:e2:dd:1a:5a:ca:73:b2:a8:3b:8b:dd:
         b0:73:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:12:32 2026 by rpki-client