Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
File: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer (raw, json)
Hash identifier: 3PlQdNLC9fchxOSrWrPfsCWZOD/ygutA+4zGdWptacg=
Subject key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 7EBAE5B4BA591D04FD65358064589426A4BCB1FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 31 Mar 2026 07:31:30 +0000
Certificate not after: Tue 30 Mar 2027 07:36:30 +0000
Subordinate resources: AS: 146772
IP: 43.254.128.0/22
IP: 45.126.100.0/22
IP: 45.248.108.0/22
IP: 45.250.180.0 -- 45.250.187.255
IP: 45.251.0.0/22
IP: 103.73.244.0 -- 103.73.251.255
IP: 103.161.254.0/23
IP: 103.191.242.0/23
IP: 103.203.100.0/22
IP: 103.216.252.0/22
IP: 103.219.84.0 -- 103.219.91.255
IP: 103.219.100.0/22
IP: 103.236.232.0/22
IP: 103.249.12.0/22
IP: 103.249.192.0/22
IP: 115.31.68.0/22
IP: 124.14.24.0 -- 124.14.51.255
IP: 211.161.108.0/22
IP: 2405:80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Apr 2026 06:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ba:e5:b4:ba:59:1d:04:fd:65:35:80:64:58:94:26:a4:bc:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Mar 31 07:31:30 2026 GMT
Not After : Mar 30 07:36:30 2027 GMT
Subject: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:36:a3:8a:f7:8d:26:68:78:d3:05:34:f2:
b8:27:bd:f0:7f:63:98:19:ca:af:dd:a8:4e:cb:2d:
7d:b6:49:17:d2:f8:76:84:e2:1f:40:4d:88:0b:96:
63:bf:5c:49:a6:a8:73:37:ba:1d:dc:24:24:b4:e1:
6f:f4:85:e6:96:63:da:d5:f8:f9:76:cd:96:a2:e4:
ca:84:01:d6:ab:69:86:c5:1b:41:2d:07:6a:27:fd:
d1:5a:cc:a0:5d:3a:e0:30:2c:85:26:0f:b3:44:12:
2a:5b:9d:61:03:ad:71:5c:1b:97:14:bd:6b:6b:b3:
ee:b5:51:4c:c5:56:e2:8d:d2:fa:9a:2c:c7:b9:b3:
3b:70:83:c3:2c:f0:0b:b1:a8:71:21:f5:63:fb:d1:
b2:cf:09:00:e5:27:2e:28:7a:fb:fb:a9:17:53:ba:
51:b9:39:dd:77:3d:3a:47:ad:aa:1d:05:ed:6e:c1:
0f:a9:61:25:92:8e:31:88:a4:a6:59:4f:9e:a1:f2:
c6:04:39:1b:27:4f:80:15:29:49:8b:fc:54:1c:3a:
0c:6e:21:53:3d:fb:c9:2f:2d:8c:44:83:d5:cf:a7:
ce:f3:db:08:03:5b:08:03:6a:23:af:28:b8:ae:00:
c3:dc:c6:91:3b:f2:9f:70:6e:7e:96:61:ea:bd:a5:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
45.126.100.0/22
45.248.108.0/22
45.250.180.0-45.250.187.255
45.251.0.0/22
103.73.244.0-103.73.251.255
103.161.254.0/23
103.191.242.0/23
103.203.100.0/22
103.216.252.0/22
103.219.84.0-103.219.91.255
103.219.100.0/22
103.236.232.0/22
103.249.12.0/22
103.249.192.0/22
115.31.68.0/22
124.14.24.0-124.14.51.255
211.161.108.0/22
IPv6:
2405:80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146772
Signature Algorithm: sha256WithRSAEncryption
0e:38:05:a0:34:c6:f1:ba:8b:29:37:b8:d4:ab:a7:b9:95:7e:
73:7a:00:07:90:f6:1d:f8:7d:93:68:4e:35:57:5b:50:5c:83:
60:47:d9:b9:c0:2b:1c:be:5f:75:b4:84:eb:84:64:32:63:96:
e6:8e:0a:9c:73:c0:a3:3d:43:86:4a:ca:ac:eb:83:d5:69:b0:
15:ca:66:1b:29:25:2c:de:8a:d1:03:81:80:f6:ab:b8:b6:50:
81:92:6e:f9:32:17:61:6c:98:c6:37:22:34:42:0e:a5:18:f2:
f8:77:2f:2b:22:21:28:2b:79:5d:99:00:1d:57:3d:04:90:6b:
45:96:1d:bd:f3:a2:e8:ec:d9:7c:44:5c:32:fa:0b:3c:2f:38:
11:ad:45:22:f7:81:4b:a9:a9:d6:cb:ad:5a:3c:36:c5:27:ff:
5a:27:44:29:af:bb:e9:77:d9:f0:12:9b:ae:cf:4e:45:b8:24:
a4:51:63:2a:67:a3:ff:a6:39:15:11:29:64:c3:52:2b:ec:61:
5a:e2:3a:cf:a7:fe:79:f9:a8:53:e6:6c:f4:2d:59:66:a7:d4:
de:3e:bd:be:b5:16:22:1c:e0:af:9a:2c:cd:a4:32:ac:72:63:
a4:3c:18:f9:c6:bd:1a:54:b7:9c:06:86:2e:e5:18:c5:07:87:
1b:52:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:14:27 2026 by rpki-client