Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
File: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer (raw, json)
Hash identifier: URtHLp9N4uW72GhkbrHtKXunFOG6YcNeR4KZnmWro9s=
Subject key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 40A2CD4046A9E10F462766C79FF9461D0B2B8378
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 07:11:56 +0000
Certificate not after: Fri 28 May 2027 07:16:56 +0000
Subordinate resources: AS: 139128
IP: 43.241.248.0/22
IP: 43.243.148.0/22
IP: 60.195.248.0/21
IP: 103.37.176.0/22
IP: 103.38.232.0/22
IP: 103.156.28.0/23
IP: 115.182.0.0/16
IP: 118.144.64.0/19
IP: 118.145.0.0/19
IP: 118.244.192.0 -- 118.244.239.255
IP: 120.54.0.0/16
IP: 123.196.112.0/20
IP: 124.202.128.0/19
IP: 211.103.152.0/21
IP: 211.147.0.0/21
IP: 211.154.160.0/20
IP: 218.241.152.0/21
IP: 219.234.80.0/20
IP: 219.238.148.0/22
IP: 219.238.232.0/21
IP: 219.239.88.0/21
IP: 2401:7d80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a2:cd:40:46:a9:e1:0f:46:27:66:c7:9f:f9:46:1d:0b:2b:83:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 07:11:56 2026 GMT
Not After : May 28 07:16:56 2027 GMT
Subject: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:e5:43:e8:18:45:4f:c1:2b:c0:83:af:58:
49:74:74:7f:3d:a7:bc:7d:90:b9:d0:14:3e:4f:2f:
75:bd:cf:91:bb:9d:e7:0b:ac:79:24:06:a7:71:1c:
b0:ab:4a:4b:a4:78:fb:3f:b8:a2:54:d6:a2:76:8e:
54:a8:59:6f:09:8e:93:b7:04:b0:f2:0a:93:68:d3:
4f:99:58:49:46:26:9c:3f:04:56:ca:d2:cd:ea:f4:
8d:cf:7b:77:33:a4:4c:1c:02:50:23:64:7e:93:12:
38:b1:3c:8e:e3:b4:75:62:b3:ce:11:62:ab:00:03:
37:9a:71:14:18:e6:5d:8f:81:24:9b:55:64:d6:c7:
e9:9a:44:5f:b9:a2:9f:b5:2a:84:0d:81:e6:6b:95:
f9:07:c8:a2:3c:87:e7:ff:14:2b:e2:aa:8a:cd:cf:
4e:67:f8:a3:50:34:f4:4f:ad:f0:78:cb:19:25:9e:
4c:e9:80:58:8f:1b:67:89:55:bc:18:cb:d4:89:f6:
a5:1a:01:b6:fc:48:f1:b6:b4:40:a5:4a:91:96:86:
9a:34:fc:1d:14:ff:ff:b0:1a:5a:2f:51:1f:bf:2d:
37:c8:4e:eb:94:b2:78:ed:92:a0:1d:df:16:a0:0b:
82:59:84:76:e6:d4:20:2a:bb:cd:bf:78:44:10:04:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.248.0/22
43.243.148.0/22
60.195.248.0/21
103.37.176.0/22
103.38.232.0/22
103.156.28.0/23
115.182.0.0/16
118.144.64.0/19
118.145.0.0/19
118.244.192.0-118.244.239.255
120.54.0.0/16
123.196.112.0/20
124.202.128.0/19
211.103.152.0/21
211.147.0.0/21
211.154.160.0/20
218.241.152.0/21
219.234.80.0/20
219.238.148.0/22
219.238.232.0/21
219.239.88.0/21
IPv6:
2401:7d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139128
Signature Algorithm: sha256WithRSAEncryption
88:2a:5e:60:c4:f3:d5:9c:48:99:c3:44:9e:89:07:f6:d4:bd:
92:bc:df:54:6f:45:ff:fe:2d:f0:d4:54:54:1e:d2:5f:66:ca:
69:95:0a:ad:9e:5a:fa:e7:a7:cc:2d:f8:b2:a6:45:ac:dd:9a:
84:13:87:00:5a:a8:f3:be:93:53:06:79:7d:f1:00:62:9a:ed:
4a:16:a1:a9:1d:72:1d:40:0f:40:2a:10:ea:d8:eb:bd:b6:ea:
4f:d4:6b:f3:11:9e:82:d7:e5:7a:cb:ba:4a:5d:d2:12:31:e3:
18:3c:f8:cd:5c:7a:3b:6d:b4:e5:31:4f:7d:be:75:e4:ff:52:
84:39:51:05:e7:53:e7:8b:c6:ae:c6:d9:f6:af:ed:8d:43:eb:
30:58:3d:09:81:5a:f8:25:9b:7f:db:4e:94:3d:a3:29:49:49:
13:03:8b:b2:c1:ca:9e:76:dc:9a:c4:8c:09:72:e6:58:f3:27:
16:31:50:9b:a6:dc:eb:bf:40:f0:8c:d6:01:8d:21:da:dc:e7:
eb:85:c9:59:73:61:9e:63:0f:c6:17:24:e7:07:4c:68:5f:01:
27:86:df:a3:65:10:ca:4f:12:be:7e:37:04:6e:0f:ea:8c:e7:
e4:4f:83:8b:06:26:78:a3:92:c1:67:60:a0:03:55:c6:84:df:
4b:86:f4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:12:34 2026 by rpki-client