Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer (raw, json)
Hash identifier: XSwGqtqfd1oSi67GOeIxqcsunIYEV5xurdKYkNB9sm8=
Subject key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5B4AAE8C78EBD333C864CFA7FCF4EB8CF23CD4F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 07:56:05 +0000
Certificate not after: Thu 27 May 2027 08:01:05 +0000
Subordinate resources: AS: 59057
AS: 63701
IP: 45.116.208.0/22
IP: 45.123.128.0/22
IP: 103.57.12.0/22
IP: 103.63.244.0/22
IP: 103.75.104.0/22
IP: 103.88.96.0/22
IP: 103.125.236.0/22
IP: 103.152.208.0/23
IP: 218.246.48.0/22
IP: 2402:9a80::/32
IP: 2407:37c0::/32
IP: 2407:4980::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4a:ae:8c:78:eb:d3:33:c8:64:cf:a7:fc:f4:eb:8c:f2:3c:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 07:56:05 2026 GMT
Not After : May 27 08:01:05 2027 GMT
Subject: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:14:61:ae:24:60:0e:b5:9e:9e:d4:e8:aa:
99:99:9f:a2:fa:b8:96:29:0b:57:ad:02:04:e4:a3:
87:fa:aa:93:aa:e2:e1:9b:65:ff:f2:44:e9:10:c0:
f5:f0:28:06:5f:3f:cd:e7:2e:42:14:0b:13:8d:4c:
78:e2:8f:2a:52:e1:f5:3a:0b:d7:08:ab:6f:c2:c4:
0a:42:67:93:33:2a:46:58:a1:4a:c7:4b:b8:2c:63:
44:d4:c9:86:1e:0f:fc:bb:9d:92:28:75:65:97:3c:
5d:f9:4c:96:41:c2:99:92:db:16:21:6a:f1:79:9b:
74:ec:17:5d:6b:08:f0:33:77:c2:aa:0d:86:32:97:
57:75:a4:bc:79:f9:ce:3a:2a:0c:87:64:ae:b1:35:
7a:b8:73:29:55:ea:36:cb:89:c6:f9:26:ed:9e:4b:
a1:b8:bd:40:fe:94:23:b0:03:47:e4:b5:71:93:5c:
1d:49:91:fb:fb:20:ea:e0:70:04:23:98:5e:08:cb:
af:4d:aa:a5:6d:7b:32:ea:97:14:8b:b8:17:63:68:
a9:77:08:70:1e:bc:ad:2c:62:f2:f2:bc:21:b9:14:
6f:35:0b:11:ad:4e:1c:ea:6b:80:25:af:a2:ae:f5:
9b:b5:ab:27:29:31:f5:55:d2:2b:7a:7b:02:a5:d3:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.208.0/22
45.123.128.0/22
103.57.12.0/22
103.63.244.0/22
103.75.104.0/22
103.88.96.0/22
103.125.236.0/22
103.152.208.0/23
218.246.48.0/22
IPv6:
2402:9a80::/32
2407:37c0::/32
2407:4980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59057
63701
Signature Algorithm: sha256WithRSAEncryption
96:df:85:7c:ee:56:28:18:0b:d8:77:a9:f8:48:1a:80:82:51:
af:8c:85:61:af:fd:d5:f4:32:51:d6:19:e0:e2:1e:99:d8:1c:
0d:ed:49:0b:7f:b5:6f:32:e2:09:ff:65:44:04:cc:fb:f7:f5:
1f:b0:c8:ac:3e:00:b1:e4:3c:55:0f:08:66:41:0e:e4:bf:cb:
29:2b:f3:99:7b:3f:b4:22:9d:1c:d8:6d:38:ce:5f:c9:33:49:
8b:8a:7a:73:82:1e:f3:e6:3b:bd:b3:30:c7:8a:51:fd:d7:e2:
c4:2f:56:64:c8:1b:a7:20:80:10:71:ef:ef:39:d3:af:e2:dc:
e3:53:52:35:da:4a:51:5b:6f:b1:ef:66:b5:e0:52:05:c5:af:
a9:62:d8:55:81:68:78:28:b7:6d:03:58:47:c4:57:aa:42:85:
c1:ff:68:20:69:d1:94:a2:33:f9:e8:19:e1:35:8f:fb:1d:10:
42:7b:16:c8:3d:63:96:82:71:f7:b7:ef:83:10:43:0a:7e:53:
6b:67:5c:5a:ab:89:30:c1:c3:34:3d:87:da:7a:64:98:cb:c8:
19:31:a2:e1:0f:08:6e:64:68:c9:a7:aa:e2:16:20:df:c9:03:
f9:34:6b:ce:aa:7d:58:e7:0f:df:ce:93:37:b1:b0:c7:e4:41:
27:c9:4a:e4
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUW0qujHjr0zPIZM+n/PTrjPI81PAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA3NTYwNVoX
DTI3MDUyNzA4MDEwNVowMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEy
QkMzRjc1OTcxQ0ZEQ0I5NjM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJV8FGGuJGAOtZ6e1OiqmZmfovq4likLV60CBOSjh/qqk6ri4Ztl//JE6RDA
9fAoBl8/zecuQhQLE41MeOKPKlLh9ToL1wirb8LECkJnkzMqRlihSsdLuCxjRNTJ
hh4P/Ludkih1ZZc8XflMlkHCmZLbFiFq8XmbdOwXXWsI8DN3wqoNhjKXV3WkvHn5
zjoqDIdkrrE1erhzKVXqNsuJxvkm7Z5Lobi9QP6UI7ADR+S1cZNcHUmR+/sg6uBw
BCOYXgjLr02qpW17MuqXFIu4F2NoqXcIcB68rSxi8vK8IbkUbzULEa1OHOprgCWv
oq71m7WrJykx9VXSK3p7AqXT+lkCAwEAAaOCAwgwggMEMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFCbyedeRNtA1pErw/dZcc/cuWNXMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU3OTc5NjcxNDY4NDQxNy8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0Njg0NDE3
LzAvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwbAYIKwYBBQUH
AQcBAf8EXTBbMDwEAgABMDYDBAItdNADBAIte4ADBAJnOQwDBAJnP/QDBAJnS2gD
BAJnWGADBAJnfewDBAFnmNADBALa9jAwGwQCAAIwFQMFACQCmoADBQAkBzfAAwUA
JAdJgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA5rECAwD41TANBgkqhkiG9w0B
AQsFAAOCAQEAlt+FfO5WKBgL2Hep+EgagIJRr4yFYa/91fQyUdYZ4OIemdgcDe1J
C3+1bzLiCf9lRATM+/f1H7DIrD4AseQ8VQ8IZkEO5L/LKSvzmXs/tCKdHNhtOM5f
yTNJi4p6c4Ie8+Y7vbMwx4pR/dfixC9WZMgbpyCAEHHv7znTr+Lc41NSNdpKUVtv
se9mteBSBcWvqWLYVYFoeCi3bQNYR8RXqkKFwf9oIGnRlKIz+egZ4TWP+x0QQnsW
yD1jloJx97fvgxBDCn5Ta2dcWquJMMHDND2H2npkmMvIGTGi4Q8IbmRoyaeq4hYg
38kD+TRrzqp9WOcP386TN7Gwx+RBJ8lK5A==
-----END CERTIFICATE-----
Generated at Fri May 29 21:13:09 2026 by rpki-client