
Certificate
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
File: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer (raw, json)
Hash identifier: m0tBx1QE3VkBvoBCauIljXhMb/19Sdst7wRQsJua0qY=
Subject key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0A991AFDB02B58098F030869A2F9DF9A75B7B588
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 17 Aug 2026 04:04:14 +0000
Certificate not after: Mon 16 Aug 2027 04:09:14 +0000
Subordinate resources: AS: 137718
IP: 1.93.0.0/16
IP: 14.103.0.0/16
IP: 27.54.192.0/18
IP: 27.103.0.0/16
IP: 27.109.32.0/19
IP: 36.0.64.0/18
IP: 42.157.64.0/18
IP: 43.236.0.0/16
IP: 43.239.0.0/19
IP: 43.247.200.0/22
IP: 45.255.0.0/18
IP: 49.4.192.0/18
IP: 59.109.0.0/16
IP: 60.55.0.0/16
IP: 61.45.128.0/18
IP: 101.78.32.0/19
IP: 101.96.160.0 -- 101.96.255.255
IP: 101.126.0.0/16
IP: 101.238.0.0/16
IP: 101.251.96.0/19
IP: 103.35.0.0/19
IP: 103.64.32.0 -- 103.64.127.255
IP: 103.159.142.0/23
IP: 103.223.32.0/19
IP: 103.238.20.0/22
IP: 106.2.160.0 -- 106.2.223.255
IP: 112.75.0.0/16
IP: 113.31.0.0 -- 113.31.95.255
IP: 113.209.0.0/17
IP: 115.47.0.0/16
IP: 115.100.0.0/15
IP: 115.103.0.0/16
IP: 115.172.64.0/19
IP: 115.172.192.0/18
IP: 115.173.128.0/17
IP: 115.181.0.0/16
IP: 115.190.0.0/15
IP: 116.70.0.0/18
IP: 116.213.64.0 -- 116.213.255.255
IP: 117.76.0.0/15
IP: 117.78.64.0 -- 117.78.255.255
IP: 117.121.0.0/19
IP: 117.121.64.0/18
IP: 117.122.128.0/18
IP: 118.126.0.0/19
IP: 118.145.32.0 -- 118.145.255.255
IP: 118.196.0.0/15
IP: 118.199.0.0/16
IP: 119.10.0.0/17
IP: 119.16.0.0/16
IP: 119.27.64.0/18
IP: 119.90.0.0/17
IP: 120.128.0.0 -- 120.130.255.255
IP: 123.100.0.0/19
IP: 123.137.0.0/16
IP: 123.199.160.0 -- 123.199.255.255
IP: 124.6.64.0/18
IP: 124.15.192.0/18
IP: 124.174.0.0/15
IP: 124.242.0.0/16
IP: 125.61.192.0/18
IP: 125.169.0.0/16
IP: 175.106.128.0/17
IP: 180.184.0.0/15
IP: 182.238.0.0 -- 182.239.31.255
IP: 202.70.0.0/19
IP: 203.100.96.0/19
IP: 203.128.32.0/19
IP: 203.128.96.0/19
IP: 203.175.192.0 -- 203.176.63.255
IP: 210.16.128.0/19
IP: 210.78.96.0/19
IP: 220.112.64.0/18
IP: 221.136.0.0/16
IP: 223.255.0.0/17
IP: 2406:d440::/32
IP: 240b:6000::/20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:99:1a:fd:b0:2b:58:09:8f:03:08:69:a2:f9:df:9a:75:b7:b5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Aug 17 04:04:14 2026 GMT
Not After : Aug 16 04:09:14 2027 GMT
Subject: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:86:10:ad:6f:56:6c:a0:ba:cc:2d:18:99:
6f:3b:a9:ac:cd:fe:08:e0:72:4e:7d:ad:a0:0f:53:
1d:1b:f8:b0:e5:a7:97:78:e7:36:8f:e4:9d:71:cf:
44:e1:8e:87:39:7e:f5:03:5c:f3:8c:8b:dd:26:d2:
e0:c1:30:69:20:b0:a8:07:23:bd:ef:0f:2b:80:df:
b9:9a:29:73:22:b0:29:5f:10:d9:7c:ab:8e:f2:0f:
ca:eb:e4:1e:1b:c6:bc:ae:1f:8b:82:a4:45:01:5c:
70:7c:8a:92:30:b2:51:cd:82:b6:35:46:a4:7a:86:
0e:2c:42:e0:90:44:f4:46:eb:85:f8:64:f9:00:2c:
6d:2e:c8:6e:f7:40:fd:ad:04:c8:92:52:3d:64:cc:
75:a7:1e:87:a7:70:e5:8d:e7:dc:96:c4:62:6f:f4:
ea:9c:d5:36:da:f9:54:d3:16:b4:9b:86:7a:7d:c5:
44:b6:62:8f:79:ff:d3:97:20:11:4a:77:1c:47:aa:
23:64:18:7f:1d:d1:68:2b:91:e6:e7:bb:9f:f5:3b:
d6:10:c7:68:cb:11:c0:68:0e:f3:4b:f1:88:60:d4:
c7:94:ec:08:63:10:24:09:c8:36:89:95:59:52:48:
a1:71:02:55:57:8b:71:7f:d6:05:67:a2:80:63:0d:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.93.0.0/16
14.103.0.0/16
27.54.192.0/18
27.103.0.0/16
27.109.32.0/19
36.0.64.0/18
42.157.64.0/18
43.236.0.0/16
43.239.0.0/19
43.247.200.0/22
45.255.0.0/18
49.4.192.0/18
59.109.0.0/16
60.55.0.0/16
61.45.128.0/18
101.78.32.0/19
101.96.160.0-101.96.255.255
101.126.0.0/16
101.238.0.0/16
101.251.96.0/19
103.35.0.0/19
103.64.32.0-103.64.127.255
103.159.142.0/23
103.223.32.0/19
103.238.20.0/22
106.2.160.0-106.2.223.255
112.75.0.0/16
113.31.0.0-113.31.95.255
113.209.0.0/17
115.47.0.0/16
115.100.0.0/15
115.103.0.0/16
115.172.64.0/19
115.172.192.0/18
115.173.128.0/17
115.181.0.0/16
115.190.0.0/15
116.70.0.0/18
116.213.64.0-116.213.255.255
117.76.0.0/15
117.78.64.0-117.78.255.255
117.121.0.0/19
117.121.64.0/18
117.122.128.0/18
118.126.0.0/19
118.145.32.0-118.145.255.255
118.196.0.0/15
118.199.0.0/16
119.10.0.0/17
119.16.0.0/16
119.27.64.0/18
119.90.0.0/17
120.128.0.0-120.130.255.255
123.100.0.0/19
123.137.0.0/16
123.199.160.0-123.199.255.255
124.6.64.0/18
124.15.192.0/18
124.174.0.0/15
124.242.0.0/16
125.61.192.0/18
125.169.0.0/16
175.106.128.0/17
180.184.0.0/15
182.238.0.0-182.239.31.255
202.70.0.0/19
203.100.96.0/19
203.128.32.0/19
203.128.96.0/19
203.175.192.0-203.176.63.255
210.16.128.0/19
210.78.96.0/19
220.112.64.0/18
221.136.0.0/16
223.255.0.0/17
IPv6:
2406:d440::/32
240b:6000::/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137718
Signature Algorithm: sha256WithRSAEncryption
23:e9:ce:fc:75:83:68:87:25:69:3e:4c:05:e3:73:1e:04:a8:
68:cb:0b:2c:c6:ac:d1:e0:c0:88:fa:c0:49:e7:a2:4b:9b:5d:
ab:98:1a:5a:94:48:6c:82:0b:49:e7:5e:b0:3c:0c:9f:6f:98:
7f:58:ea:81:20:15:83:1a:91:6a:06:7e:f3:b3:84:15:65:f6:
03:79:5d:97:4d:0e:7f:07:b2:ac:9e:00:ed:d2:2c:69:eb:a8:
b4:45:6a:ba:3c:22:c1:88:25:1b:28:06:70:11:68:85:80:8b:
df:b2:c8:3d:a8:54:eb:84:5c:9d:aa:70:59:78:92:1e:b9:48:
47:f8:8c:c2:9b:ce:3f:f0:69:40:c7:46:0a:4e:38:80:aa:ee:
be:71:c2:13:da:b1:b3:b7:c6:98:5a:49:47:ed:8a:24:a6:3c:
a9:98:f3:44:12:3e:58:6a:0a:72:23:47:9e:9b:fa:ce:da:5f:
5b:2a:01:e5:5d:7a:50:e8:f8:f2:6a:5a:ee:cb:ac:6d:88:73:
2f:7e:1f:3a:61:44:8c:dd:16:42:65:6e:50:88:b1:3e:d8:63:
33:76:5b:a7:e2:0e:30:89:be:e2:fa:1c:36:26:66:83:63:e2:
13:e9:aa:61:a3:e6:fb:4b:2f:5b:e1:04:38:eb:3d:95:a1:f8:
50:8b:ce:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:10:00 2026 by rpki-client