
Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
File: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer (raw, json)
Hash identifier: w7X801WUL7QCYkKatUDNwsggZnHx0QxJnoAuJOUfQAw=
Subject key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 387C6B230AC984111276174C32C145EAC52750E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 05 Feb 2026 03:16:10 +0000
Certificate not after: Thu 04 Feb 2027 03:21:10 +0000
Subordinate resources: AS: 139128
IP: 43.241.248.0/22
IP: 43.243.148.0/22
IP: 60.195.248.0/21
IP: 103.37.176.0/22
IP: 103.38.232.0/22
IP: 103.156.28.0/23
IP: 115.182.0.0/16
IP: 118.144.64.0/19
IP: 118.145.0.0/19
IP: 118.244.192.0 -- 118.244.239.255
IP: 120.54.0.0/16
IP: 123.196.112.0/20
IP: 124.202.128.0/19
IP: 211.103.152.0/21
IP: 211.147.0.0/21
IP: 211.154.160.0/20
IP: 218.241.152.0/21
IP: 219.234.80.0/20
IP: 219.238.148.0/22
IP: 219.238.232.0/21
IP: 219.239.88.0/21
IP: 2401:7d80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7c:6b:23:0a:c9:84:11:12:76:17:4c:32:c1:45:ea:c5:27:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Feb 5 03:16:10 2026 GMT
Not After : Feb 4 03:21:10 2027 GMT
Subject: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:e5:43:e8:18:45:4f:c1:2b:c0:83:af:58:
49:74:74:7f:3d:a7:bc:7d:90:b9:d0:14:3e:4f:2f:
75:bd:cf:91:bb:9d:e7:0b:ac:79:24:06:a7:71:1c:
b0:ab:4a:4b:a4:78:fb:3f:b8:a2:54:d6:a2:76:8e:
54:a8:59:6f:09:8e:93:b7:04:b0:f2:0a:93:68:d3:
4f:99:58:49:46:26:9c:3f:04:56:ca:d2:cd:ea:f4:
8d:cf:7b:77:33:a4:4c:1c:02:50:23:64:7e:93:12:
38:b1:3c:8e:e3:b4:75:62:b3:ce:11:62:ab:00:03:
37:9a:71:14:18:e6:5d:8f:81:24:9b:55:64:d6:c7:
e9:9a:44:5f:b9:a2:9f:b5:2a:84:0d:81:e6:6b:95:
f9:07:c8:a2:3c:87:e7:ff:14:2b:e2:aa:8a:cd:cf:
4e:67:f8:a3:50:34:f4:4f:ad:f0:78:cb:19:25:9e:
4c:e9:80:58:8f:1b:67:89:55:bc:18:cb:d4:89:f6:
a5:1a:01:b6:fc:48:f1:b6:b4:40:a5:4a:91:96:86:
9a:34:fc:1d:14:ff:ff:b0:1a:5a:2f:51:1f:bf:2d:
37:c8:4e:eb:94:b2:78:ed:92:a0:1d:df:16:a0:0b:
82:59:84:76:e6:d4:20:2a:bb:cd:bf:78:44:10:04:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.248.0/22
43.243.148.0/22
60.195.248.0/21
103.37.176.0/22
103.38.232.0/22
103.156.28.0/23
115.182.0.0/16
118.144.64.0/19
118.145.0.0/19
118.244.192.0-118.244.239.255
120.54.0.0/16
123.196.112.0/20
124.202.128.0/19
211.103.152.0/21
211.147.0.0/21
211.154.160.0/20
218.241.152.0/21
219.234.80.0/20
219.238.148.0/22
219.238.232.0/21
219.239.88.0/21
IPv6:
2401:7d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139128
Signature Algorithm: sha256WithRSAEncryption
7f:ee:36:dd:15:a6:9b:ba:90:e9:1d:1f:a6:0e:8f:05:2d:d9:
3b:ee:41:80:04:4c:74:ea:ae:b8:21:25:7f:00:1b:5a:13:dd:
b2:9e:93:04:7a:03:c8:d5:3e:85:56:bf:75:df:b0:8c:97:5a:
8c:00:99:d1:e6:a2:4c:09:14:00:43:0e:de:90:a8:7d:b3:3f:
62:7c:16:31:cf:79:4d:ca:22:e5:f3:cd:03:64:40:11:5f:05:
39:1f:de:b9:d3:5c:8b:a7:6a:7e:22:bb:0f:ea:24:b7:ad:6c:
af:5c:17:f2:b7:bd:da:8d:17:74:d5:51:2c:cb:89:40:ca:49:
3c:4a:98:23:ae:c8:a4:17:05:8c:3c:45:c2:2f:84:d5:bd:3b:
69:46:f3:da:f3:fa:37:fd:00:68:e4:59:36:66:f6:50:69:14:
93:32:7e:4b:fd:ec:aa:80:98:d6:2d:ae:4a:f5:24:b5:f4:8a:
03:4e:36:90:61:79:86:2a:41:c8:1d:61:98:b0:3c:91:ce:cd:
15:29:e4:47:9a:96:b9:76:b6:aa:81:3d:32:53:3c:36:84:6a:
9f:f4:a3:63:55:37:21:85:f8:07:b4:0c:d8:df:0b:88:29:ba:
19:ca:bb:7d:3e:64:00:84:e4:02:ce:fb:66:14:16:49:ca:98:
18:1a:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:53:39 2026 by rpki-client