Certificate

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
File:                     30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer (raw, json)
Hash identifier:          m0tBx1QE3VkBvoBCauIljXhMb/19Sdst7wRQsJua0qY=
Subject key identifier:   30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       0A991AFDB02B58098F030869A2F9DF9A75B7B588
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 17 Aug 2026 04:04:14 +0000
Certificate not after:    Mon 16 Aug 2027 04:09:14 +0000
Subordinate resources:    AS: 137718
                          IP: 1.93.0.0/16
                          IP: 14.103.0.0/16
                          IP: 27.54.192.0/18
                          IP: 27.103.0.0/16
                          IP: 27.109.32.0/19
                          IP: 36.0.64.0/18
                          IP: 42.157.64.0/18
                          IP: 43.236.0.0/16
                          IP: 43.239.0.0/19
                          IP: 43.247.200.0/22
                          IP: 45.255.0.0/18
                          IP: 49.4.192.0/18
                          IP: 59.109.0.0/16
                          IP: 60.55.0.0/16
                          IP: 61.45.128.0/18
                          IP: 101.78.32.0/19
                          IP: 101.96.160.0 -- 101.96.255.255
                          IP: 101.126.0.0/16
                          IP: 101.238.0.0/16
                          IP: 101.251.96.0/19
                          IP: 103.35.0.0/19
                          IP: 103.64.32.0 -- 103.64.127.255
                          IP: 103.159.142.0/23
                          IP: 103.223.32.0/19
                          IP: 103.238.20.0/22
                          IP: 106.2.160.0 -- 106.2.223.255
                          IP: 112.75.0.0/16
                          IP: 113.31.0.0 -- 113.31.95.255
                          IP: 113.209.0.0/17
                          IP: 115.47.0.0/16
                          IP: 115.100.0.0/15
                          IP: 115.103.0.0/16
                          IP: 115.172.64.0/19
                          IP: 115.172.192.0/18
                          IP: 115.173.128.0/17
                          IP: 115.181.0.0/16
                          IP: 115.190.0.0/15
                          IP: 116.70.0.0/18
                          IP: 116.213.64.0 -- 116.213.255.255
                          IP: 117.76.0.0/15
                          IP: 117.78.64.0 -- 117.78.255.255
                          IP: 117.121.0.0/19
                          IP: 117.121.64.0/18
                          IP: 117.122.128.0/18
                          IP: 118.126.0.0/19
                          IP: 118.145.32.0 -- 118.145.255.255
                          IP: 118.196.0.0/15
                          IP: 118.199.0.0/16
                          IP: 119.10.0.0/17
                          IP: 119.16.0.0/16
                          IP: 119.27.64.0/18
                          IP: 119.90.0.0/17
                          IP: 120.128.0.0 -- 120.130.255.255
                          IP: 123.100.0.0/19
                          IP: 123.137.0.0/16
                          IP: 123.199.160.0 -- 123.199.255.255
                          IP: 124.6.64.0/18
                          IP: 124.15.192.0/18
                          IP: 124.174.0.0/15
                          IP: 124.242.0.0/16
                          IP: 125.61.192.0/18
                          IP: 125.169.0.0/16
                          IP: 175.106.128.0/17
                          IP: 180.184.0.0/15
                          IP: 182.238.0.0 -- 182.239.31.255
                          IP: 202.70.0.0/19
                          IP: 203.100.96.0/19
                          IP: 203.128.32.0/19
                          IP: 203.128.96.0/19
                          IP: 203.175.192.0 -- 203.176.63.255
                          IP: 210.16.128.0/19
                          IP: 210.78.96.0/19
                          IP: 220.112.64.0/18
                          IP: 221.136.0.0/16
                          IP: 223.255.0.0/17
                          IP: 2406:d440::/32
                          IP: 240b:6000::/20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 00:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:99:1a:fd:b0:2b:58:09:8f:03:08:69:a2:f9:df:9a:75:b7:b5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Aug 17 04:04:14 2026 GMT
            Not After : Aug 16 04:09:14 2027 GMT
        Subject: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:86:10:ad:6f:56:6c:a0:ba:cc:2d:18:99:
                    6f:3b:a9:ac:cd:fe:08:e0:72:4e:7d:ad:a0:0f:53:
                    1d:1b:f8:b0:e5:a7:97:78:e7:36:8f:e4:9d:71:cf:
                    44:e1:8e:87:39:7e:f5:03:5c:f3:8c:8b:dd:26:d2:
                    e0:c1:30:69:20:b0:a8:07:23:bd:ef:0f:2b:80:df:
                    b9:9a:29:73:22:b0:29:5f:10:d9:7c:ab:8e:f2:0f:
                    ca:eb:e4:1e:1b:c6:bc:ae:1f:8b:82:a4:45:01:5c:
                    70:7c:8a:92:30:b2:51:cd:82:b6:35:46:a4:7a:86:
                    0e:2c:42:e0:90:44:f4:46:eb:85:f8:64:f9:00:2c:
                    6d:2e:c8:6e:f7:40:fd:ad:04:c8:92:52:3d:64:cc:
                    75:a7:1e:87:a7:70:e5:8d:e7:dc:96:c4:62:6f:f4:
                    ea:9c:d5:36:da:f9:54:d3:16:b4:9b:86:7a:7d:c5:
                    44:b6:62:8f:79:ff:d3:97:20:11:4a:77:1c:47:aa:
                    23:64:18:7f:1d:d1:68:2b:91:e6:e7:bb:9f:f5:3b:
                    d6:10:c7:68:cb:11:c0:68:0e:f3:4b:f1:88:60:d4:
                    c7:94:ec:08:63:10:24:09:c8:36:89:95:59:52:48:
                    a1:71:02:55:57:8b:71:7f:d6:05:67:a2:80:63:0d:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.93.0.0/16
                  14.103.0.0/16
                  27.54.192.0/18
                  27.103.0.0/16
                  27.109.32.0/19
                  36.0.64.0/18
                  42.157.64.0/18
                  43.236.0.0/16
                  43.239.0.0/19
                  43.247.200.0/22
                  45.255.0.0/18
                  49.4.192.0/18
                  59.109.0.0/16
                  60.55.0.0/16
                  61.45.128.0/18
                  101.78.32.0/19
                  101.96.160.0-101.96.255.255
                  101.126.0.0/16
                  101.238.0.0/16
                  101.251.96.0/19
                  103.35.0.0/19
                  103.64.32.0-103.64.127.255
                  103.159.142.0/23
                  103.223.32.0/19
                  103.238.20.0/22
                  106.2.160.0-106.2.223.255
                  112.75.0.0/16
                  113.31.0.0-113.31.95.255
                  113.209.0.0/17
                  115.47.0.0/16
                  115.100.0.0/15
                  115.103.0.0/16
                  115.172.64.0/19
                  115.172.192.0/18
                  115.173.128.0/17
                  115.181.0.0/16
                  115.190.0.0/15
                  116.70.0.0/18
                  116.213.64.0-116.213.255.255
                  117.76.0.0/15
                  117.78.64.0-117.78.255.255
                  117.121.0.0/19
                  117.121.64.0/18
                  117.122.128.0/18
                  118.126.0.0/19
                  118.145.32.0-118.145.255.255
                  118.196.0.0/15
                  118.199.0.0/16
                  119.10.0.0/17
                  119.16.0.0/16
                  119.27.64.0/18
                  119.90.0.0/17
                  120.128.0.0-120.130.255.255
                  123.100.0.0/19
                  123.137.0.0/16
                  123.199.160.0-123.199.255.255
                  124.6.64.0/18
                  124.15.192.0/18
                  124.174.0.0/15
                  124.242.0.0/16
                  125.61.192.0/18
                  125.169.0.0/16
                  175.106.128.0/17
                  180.184.0.0/15
                  182.238.0.0-182.239.31.255
                  202.70.0.0/19
                  203.100.96.0/19
                  203.128.32.0/19
                  203.128.96.0/19
                  203.175.192.0-203.176.63.255
                  210.16.128.0/19
                  210.78.96.0/19
                  220.112.64.0/18
                  221.136.0.0/16
                  223.255.0.0/17
                IPv6:
                  2406:d440::/32
                  240b:6000::/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137718

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:ce:fc:75:83:68:87:25:69:3e:4c:05:e3:73:1e:04:a8:
         68:cb:0b:2c:c6:ac:d1:e0:c0:88:fa:c0:49:e7:a2:4b:9b:5d:
         ab:98:1a:5a:94:48:6c:82:0b:49:e7:5e:b0:3c:0c:9f:6f:98:
         7f:58:ea:81:20:15:83:1a:91:6a:06:7e:f3:b3:84:15:65:f6:
         03:79:5d:97:4d:0e:7f:07:b2:ac:9e:00:ed:d2:2c:69:eb:a8:
         b4:45:6a:ba:3c:22:c1:88:25:1b:28:06:70:11:68:85:80:8b:
         df:b2:c8:3d:a8:54:eb:84:5c:9d:aa:70:59:78:92:1e:b9:48:
         47:f8:8c:c2:9b:ce:3f:f0:69:40:c7:46:0a:4e:38:80:aa:ee:
         be:71:c2:13:da:b1:b3:b7:c6:98:5a:49:47:ed:8a:24:a6:3c:
         a9:98:f3:44:12:3e:58:6a:0a:72:23:47:9e:9b:fa:ce:da:5f:
         5b:2a:01:e5:5d:7a:50:e8:f8:f2:6a:5a:ee:cb:ac:6d:88:73:
         2f:7e:1f:3a:61:44:8c:dd:16:42:65:6e:50:88:b1:3e:d8:63:
         33:76:5b:a7:e2:0e:30:89:be:e2:fa:1c:36:26:66:83:63:e2:
         13:e9:aa:61:a3:e6:fb:4b:2f:5b:e1:04:38:eb:3d:95:a1:f8:
         50:8b:ce:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:20:59 2026 by rpki-client