Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
File: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer (raw, json)
Hash identifier: pvRhyhUfvZHnOTy6sJwsKDoViWPJFkVuYOSnOny60PY=
Subject key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 644CEFBC4449BB1CCD87A8A7922E99C66BE0F049
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 08:32:30 +0000
Certificate not after: Fri 28 May 2027 08:37:30 +0000
Subordinate resources: AS: 17781
IP: 202.84.0.0/22
IP: 202.84.16.0/23
IP: 202.123.96.0 -- 202.123.106.255
IP: 202.123.108.0/23
IP: 202.123.111.0/24
IP: 203.192.0.0/24
IP: 203.192.3.0/24
IP: 203.192.5.0/24
IP: 203.192.11.0 -- 203.192.31.255
IP: 2407:e800::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4c:ef:bc:44:49:bb:1c:cd:87:a8:a7:92:2e:99:c6:6b:e0:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 08:32:30 2026 GMT
Not After : May 28 08:37:30 2027 GMT
Subject: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:57:99:72:47:da:7c:dd:c7:92:c2:48:1a:f5:
33:c3:dd:56:10:81:e4:72:ed:74:63:5c:ab:b4:25:
6a:95:b4:70:ec:28:8c:b4:3b:d6:70:96:c4:eb:83:
6a:aa:c4:6c:bb:19:b2:0d:4e:eb:3c:a4:61:7c:26:
08:ff:4f:7d:83:dd:10:11:e5:21:b8:63:e4:ca:8c:
aa:f1:f3:b6:0f:91:c4:6f:83:d5:e2:6e:9d:4d:78:
a0:5d:82:bc:aa:e0:00:b3:37:af:bd:cb:c7:ac:84:
61:64:99:5f:19:91:5b:f3:8e:fc:d6:19:b5:7d:65:
62:37:41:b1:8b:0a:f0:d1:df:37:38:ff:5f:10:51:
5a:76:8c:25:1f:02:6e:ce:51:bd:cf:05:aa:37:a0:
19:e7:36:83:42:fc:7c:4a:7f:8d:60:55:db:2b:2e:
00:8c:4b:40:4b:a5:6f:99:98:22:fa:2e:24:88:d7:
63:6c:8c:db:49:15:30:f2:45:e6:35:d8:ed:7a:cd:
c4:47:67:bc:32:0e:8e:ad:fe:e2:db:3e:5d:4a:b8:
48:e3:e2:cb:9b:30:7e:8c:58:27:52:1f:52:ff:ba:
a8:49:b8:1c:e5:4f:b1:2a:d2:71:94:cf:7f:51:11:
a9:7d:a2:81:23:fa:b6:5e:b2:e6:a5:75:60:e8:b8:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.84.0.0/22
202.84.16.0/23
202.123.96.0-202.123.106.255
202.123.108.0/23
202.123.111.0/24
203.192.0.0/24
203.192.3.0/24
203.192.5.0/24
203.192.11.0-203.192.31.255
IPv6:
2407:e800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17781
Signature Algorithm: sha256WithRSAEncryption
3f:f6:84:ea:86:ea:09:24:c7:5e:15:fc:62:22:22:b9:5e:b8:
b4:86:e8:64:e6:5a:8d:4d:17:52:db:c8:ab:8d:c3:60:7c:ed:
76:04:1c:6c:27:d8:3d:b7:39:99:56:67:56:f5:8e:13:94:5f:
78:bd:81:47:63:77:1b:59:9d:e4:42:5a:4e:21:52:18:d4:8a:
f7:81:a0:e5:28:46:16:96:16:ca:f4:b7:34:6d:29:9b:5f:a4:
00:03:c4:37:84:ee:3d:91:f3:bf:f7:4d:ea:d6:6c:6b:a0:10:
bd:fa:b0:84:0d:c1:0f:56:9d:52:cf:82:e2:3f:b6:50:85:3b:
1d:3f:85:04:43:14:ed:7f:80:2a:c3:10:c8:8c:94:10:29:23:
70:6f:79:76:c8:25:16:24:85:1b:d3:3f:ae:e5:3f:18:e1:de:
6a:23:f2:74:f7:c4:18:bc:a8:9e:4e:9b:5f:d1:56:b6:f8:e6:
00:2d:c7:aa:d5:7d:bb:f8:f6:95:49:e6:ed:31:6a:83:50:79:
dc:02:18:c9:e1:cf:ea:02:85:65:71:f4:a2:1c:bb:bf:8d:18:
df:1e:dc:06:b9:24:d2:2e:7f:ae:25:df:c6:2c:1a:f0:d4:68:
da:9f:ba:62:08:82:c5:33:32:0c:3e:35:59:dd:58:0b:07:c4:
3b:1a:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:11:22 2026 by rpki-client