Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
File: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer (raw, json)
Hash identifier: b1on6mMjwqLcSogGhiSplwzGJvwJ4gHe7gyMMYr6vx0=
Subject key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 09E820FC362F97777113E9FEDA3B86A52EEEC4BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 20 Apr 2026 06:04:04 +0000
Certificate not after: Mon 19 Apr 2027 06:09:04 +0000
Subordinate resources: AS: 151300
IP: 43.226.48.0/24
IP: 43.226.52.0/24
IP: 43.226.55.0 -- 43.226.63.255
IP: 43.226.78.0/23
IP: 43.226.112.0/22
IP: 43.226.128.0/20
IP: 43.227.56.0/21
IP: 43.227.69.0 -- 43.227.71.255
IP: 43.248.104.0/22
IP: 43.248.120.0/21
IP: 43.248.144.0/22
IP: 43.248.208.0/22
IP: 103.183.122.0 -- 103.183.125.255
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e8:20:fc:36:2f:97:77:71:13:e9:fe:da:3b:86:a5:2e:ee:c4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 20 06:04:04 2026 GMT
Not After : Apr 19 06:09:04 2027 GMT
Subject: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:0e:9c:55:65:a3:b3:21:ce:93:4e:bd:49:
31:7d:3c:95:a6:27:69:f2:09:52:12:f2:fc:b5:6d:
23:85:58:dd:c7:3c:e5:eb:c0:16:f9:b7:90:f2:8b:
11:e0:e9:0b:88:59:6e:c6:dd:5c:28:99:65:50:de:
3f:11:41:81:4d:ef:71:05:1e:1f:ce:81:b6:fd:17:
b0:8f:0a:d8:5b:ac:15:72:ca:4b:e2:11:c3:b6:ec:
db:d4:0c:87:0b:4a:25:18:0a:1e:38:94:ed:5f:fc:
2d:37:7e:d3:b2:67:55:f8:35:2c:b1:10:e2:a4:0b:
af:af:fc:51:95:12:f0:c8:cc:59:92:d4:21:dc:c4:
34:a3:7e:fc:91:56:ec:ae:8f:d6:42:1f:fd:7e:7b:
72:e3:f4:5e:83:39:2c:72:7f:98:e1:90:d2:5b:9d:
f2:a4:a3:7c:45:7f:74:e4:8a:29:00:32:89:2c:fc:
23:3e:23:17:e4:e9:29:68:d8:42:ca:3e:75:5c:e6:
85:f9:73:3d:23:d2:ab:7b:9f:d6:cc:b6:c1:ab:8b:
82:26:83:88:83:89:6e:c6:ef:ab:bd:5d:8d:4f:ba:
ff:0a:d7:fb:ec:09:63:93:9b:fd:4c:83:23:f3:a4:
02:e1:c0:31:55:10:8c:f4:f2:7f:14:af:54:be:2e:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.48.0/24
43.226.52.0/24
43.226.55.0-43.226.63.255
43.226.78.0/23
43.226.112.0/22
43.226.128.0/20
43.227.56.0/21
43.227.69.0-43.227.71.255
43.248.104.0/22
43.248.120.0/21
43.248.144.0/22
43.248.208.0/22
103.183.122.0-103.183.125.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151300
Signature Algorithm: sha256WithRSAEncryption
39:2d:40:fc:19:60:be:b4:7c:ca:31:28:7e:ce:7d:bf:10:87:
9d:b1:29:14:7e:3d:15:8c:d4:ea:5f:c8:d7:59:1f:d8:e1:94:
86:d4:2d:50:db:aa:92:2d:b7:3b:8e:32:c4:2e:6a:ab:f5:80:
c7:2e:ca:19:89:17:f9:07:98:a7:2c:4c:d6:17:a1:e5:6b:70:
7e:03:20:a9:44:db:a4:68:5c:83:be:3f:c2:45:67:f4:61:3b:
27:4b:fd:ef:bb:a3:10:95:a6:af:48:11:65:8a:f9:07:ba:e5:
57:38:0b:7f:84:b6:19:88:d1:d1:c3:75:a3:c0:f8:9e:47:e3:
8c:cc:ae:ee:12:1c:06:14:82:ed:13:28:db:3a:7c:e6:f3:5a:
38:7a:9c:16:20:71:e0:c4:3a:10:1b:74:1f:2f:0b:14:78:1a:
de:8b:16:f8:75:ed:03:e2:3c:05:ad:0e:fc:91:5b:ef:7d:79:
4c:23:e2:6c:1f:21:c8:86:51:4f:fd:bc:9a:76:2e:ae:b7:17:
1c:3b:e5:b2:ca:78:06:00:59:17:d0:6c:2d:b4:fa:10:be:82:
fc:c9:61:76:34:99:75:c5:70:99:e5:c7:03:d9:c4:38:2c:48:
6e:2b:14:e5:38:53:03:11:d6:42:46:75:5b:71:88:c3:68:48:
ac:4e:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:07:24 2026 by rpki-client