Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
File:                     4F94A5F36F866F21180775DFFF3827990F956B62.cer (raw, json)
Hash identifier:          U9FtQKVrV3BUgEuCkjNluSAUMckyA3dJHgyHQpt7hho=
Subject key identifier:   4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       7F862E0568F0C1A864E5A999E75FDAB0833BDF44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 29 May 2026 09:05:39 +0000
Certificate not after:    Fri 28 May 2027 09:10:39 +0000
Subordinate resources:    AS: 58835
                          IP: 1.12.0.0/14
                          IP: 1.116.0.0/15
                          IP: 14.196.0.0 -- 14.197.127.255
                          IP: 42.187.128.0/17
                          IP: 42.192.0.0/15
                          IP: 42.194.128.0/17
                          IP: 43.242.252.0/22
                          IP: 49.51.0.0/16
                          IP: 49.223.0.0/16
                          IP: 49.232.0.0/14
                          IP: 58.87.64.0/18
                          IP: 101.130.0.0/15
                          IP: 101.244.0.0/16
                          IP: 101.246.0.0/17
                          IP: 103.38.116.0/22
                          IP: 103.234.0.0/22
                          IP: 106.50.0.0/16
                          IP: 106.52.0.0/14
                          IP: 110.40.128.0/17
                          IP: 110.42.128.0/17
                          IP: 111.229.0.0 -- 111.231.255.255
                          IP: 114.117.0.0/17
                          IP: 114.132.0.0/16
                          IP: 115.159.0.0/16
                          IP: 117.75.0.0/16
                          IP: 118.89.0.0/16
                          IP: 118.126.64.0/18
                          IP: 118.205.0.0 -- 118.206.255.255
                          IP: 119.27.160.0/19
                          IP: 119.28.0.0/15
                          IP: 119.45.0.0/16
                          IP: 119.91.0.0/16
                          IP: 120.53.0.0/16
                          IP: 121.4.0.0/15
                          IP: 121.68.0.0/16
                          IP: 122.51.0.0/16
                          IP: 122.152.192.0/18
                          IP: 123.197.128.0/17
                          IP: 123.206.0.0/15
                          IP: 124.220.0.0/14
                          IP: 175.24.0.0/16
                          IP: 175.27.0.0/16
                          IP: 175.178.0.0/16
                          IP: 175.188.0.0/17
                          IP: 180.91.0.0/17
                          IP: 182.254.128.0/17
                          IP: 203.195.128.0/17
                          IP: 210.73.160.0/19
                          IP: 210.74.48.0/20
                          IP: 211.159.128.0/17
                          IP: 223.210.128.0 -- 223.211.255.255
                          IP: 2402:4e00::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 16:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:86:2e:05:68:f0:c1:a8:64:e5:a9:99:e7:5f:da:b0:83:3b:df:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 29 09:05:39 2026 GMT
            Not After : May 28 09:10:39 2027 GMT
        Subject: CN=4F94A5F36F866F21180775DFFF3827990F956B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:42:e3:0e:1f:d4:50:36:ff:4f:88:05:38:
                    92:24:95:8c:ac:ce:3a:b5:2b:2f:b7:a6:9f:6e:e4:
                    62:cf:14:e6:41:0e:04:d9:0f:de:72:8a:fa:76:7c:
                    07:f9:da:a1:11:e6:81:03:42:73:38:4b:ee:ba:7e:
                    92:7a:4f:bd:cd:c3:06:dd:92:cb:03:c9:7d:77:e1:
                    d3:7b:65:ff:2c:33:1a:89:19:f0:49:23:a6:48:f1:
                    3f:e2:36:07:31:31:09:fa:d8:3f:82:20:5c:77:6f:
                    e2:6a:7d:73:bf:16:47:82:ec:77:06:eb:ea:f2:9a:
                    06:0e:1e:f7:bb:65:9e:26:40:aa:86:ca:35:69:d6:
                    ca:71:57:3f:b1:18:f5:45:d4:dd:96:d9:fa:e6:7f:
                    02:2e:01:ac:5c:97:8c:16:78:72:6f:ce:41:b1:d0:
                    02:90:29:92:e6:85:8c:e5:10:f8:3e:dd:59:6f:b4:
                    5a:61:65:f8:d5:ed:8d:4d:6c:3e:3d:e4:45:72:7d:
                    f6:c8:d5:9f:35:fe:13:11:9d:59:c9:60:8c:62:53:
                    28:c7:07:91:ee:34:a0:47:ba:a4:4f:02:c1:a0:e9:
                    b3:bc:b7:67:99:45:b8:d9:c5:b5:f1:d1:6c:5a:07:
                    9e:20:57:de:38:d5:fc:85:30:29:2c:3a:0b:c3:af:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.12.0.0/14
                  1.116.0.0/15
                  14.196.0.0-14.197.127.255
                  42.187.128.0/17
                  42.192.0.0/15
                  42.194.128.0/17
                  43.242.252.0/22
                  49.51.0.0/16
                  49.223.0.0/16
                  49.232.0.0/14
                  58.87.64.0/18
                  101.130.0.0/15
                  101.244.0.0/16
                  101.246.0.0/17
                  103.38.116.0/22
                  103.234.0.0/22
                  106.50.0.0/16
                  106.52.0.0/14
                  110.40.128.0/17
                  110.42.128.0/17
                  111.229.0.0-111.231.255.255
                  114.117.0.0/17
                  114.132.0.0/16
                  115.159.0.0/16
                  117.75.0.0/16
                  118.89.0.0/16
                  118.126.64.0/18
                  118.205.0.0-118.206.255.255
                  119.27.160.0/19
                  119.28.0.0/15
                  119.45.0.0/16
                  119.91.0.0/16
                  120.53.0.0/16
                  121.4.0.0/15
                  121.68.0.0/16
                  122.51.0.0/16
                  122.152.192.0/18
                  123.197.128.0/17
                  123.206.0.0/15
                  124.220.0.0/14
                  175.24.0.0/16
                  175.27.0.0/16
                  175.178.0.0/16
                  175.188.0.0/17
                  180.91.0.0/17
                  182.254.128.0/17
                  203.195.128.0/17
                  210.73.160.0/19
                  210.74.48.0/20
                  211.159.128.0/17
                  223.210.128.0-223.211.255.255
                IPv6:
                  2402:4e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58835

    Signature Algorithm: sha256WithRSAEncryption
         26:ed:4f:5a:7d:71:0b:ce:d6:31:fd:86:d7:0a:fa:4d:df:9f:
         b2:2b:b4:3b:c7:ef:b7:7e:03:84:e1:c1:01:4f:67:68:33:09:
         bb:1c:39:bb:78:00:66:20:2f:9e:a8:70:f0:b5:19:f7:2c:30:
         6a:2c:c4:fc:07:a4:b2:d0:dd:bc:42:4e:95:09:7a:59:94:4d:
         c2:3d:97:e7:70:26:86:c5:86:4d:67:ef:16:8d:a0:0f:b6:0d:
         d8:77:d4:d2:6b:a4:10:22:52:5b:66:09:3c:09:17:17:91:c3:
         70:fe:7a:99:b8:4d:84:2a:e8:42:18:41:35:86:85:35:93:ac:
         78:e7:68:3d:fd:14:98:ae:28:7d:ed:11:e4:59:00:fe:14:d1:
         f6:15:3b:54:8c:87:ab:ba:6e:d9:ad:42:2c:24:57:37:26:5e:
         bd:a5:06:02:82:0b:c6:e2:5d:f0:63:89:51:13:33:95:59:cb:
         90:6f:33:4c:8e:c6:d5:1c:ba:35:41:96:ab:a1:e1:35:e2:1f:
         7e:8b:d3:44:64:45:83:59:e3:5f:8d:1b:ae:91:ba:cc:3c:b5:
         ee:df:66:48:50:e8:b4:b2:37:bb:a9:33:7f:cc:77:7b:50:41:
         fa:7f:f1:af:38:ae:3a:71:b3:b6:02:52:86:8f:5a:dc:14:f9:
         4a:0d:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:29:49 2026 by rpki-client