Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
File: 54B31AC409DB052FD501B70509D854CCE7B08A0B.cer (raw, json)
Hash identifier: o1p1evXtBtv7mXTTDlvpBeCDg2TzS0lvwVrfURct7L4=
Subject key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 6C65846567E9048323273609B30421B2FC072F7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 21 May 2026 00:58:05 +0000
Certificate not after: Thu 20 May 2027 01:03:05 +0000
Subordinate resources: AS: 17775
AS: 37939
IP: 43.255.208.0/22
IP: 103.239.196.0/22
IP: 119.58.0.0/16
IP: 122.144.128.0/17
IP: 125.215.0.0/18
IP: 203.95.0.0/21
IP: 210.14.64.0/19
IP: 210.73.200.0/21
IP: 211.144.96.0/19
IP: 2403:2040::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:65:84:65:67:e9:04:83:23:27:36:09:b3:04:21:b2:fc:07:2f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 21 00:58:05 2026 GMT
Not After : May 20 01:03:05 2027 GMT
Subject: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:df:f0:09:04:0b:3d:a5:64:70:6e:1f:08:
ea:f1:23:09:2a:5c:a3:1b:48:e7:98:b1:21:c2:30:
2a:58:88:17:df:18:42:09:d0:84:59:a8:fa:5f:27:
f8:5f:58:6e:84:41:da:21:9a:ed:73:fb:82:25:c2:
97:04:c1:e1:e4:b4:a9:64:ab:ff:1c:e1:66:f1:82:
ec:89:c7:60:5f:3c:a1:a4:49:ac:c1:56:75:94:d9:
4f:e9:f0:f7:2f:5a:3c:11:30:ff:63:6b:13:04:1c:
01:0e:81:95:d3:a2:e7:d3:82:b0:1b:45:af:0d:b8:
9a:b2:f5:99:0c:b8:c4:99:27:ea:43:71:bd:a1:41:
87:79:92:60:f6:78:e9:92:aa:05:f2:cd:ee:69:f0:
fc:1f:6a:e8:0e:ee:ba:aa:c1:ad:06:38:54:12:c4:
1f:c5:04:6e:f4:1d:fa:50:52:c9:cb:12:ec:7e:93:
16:4b:8e:23:59:dd:8e:22:fc:e2:37:e2:8d:43:2b:
0d:b3:61:11:ea:d1:f4:68:9b:ae:b4:26:26:c1:68:
2c:49:e8:9b:40:a9:f8:c8:54:6e:2e:f6:61:bf:dc:
6a:3e:34:e8:ba:71:00:23:4e:35:0b:c0:92:e5:aa:
fa:9e:f7:28:bd:22:c5:38:1e:91:db:f6:d7:da:58:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.208.0/22
103.239.196.0/22
119.58.0.0/16
122.144.128.0/17
125.215.0.0/18
203.95.0.0/21
210.14.64.0/19
210.73.200.0/21
211.144.96.0/19
IPv6:
2403:2040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17775
37939
Signature Algorithm: sha256WithRSAEncryption
09:9e:3a:c9:19:16:42:f4:ef:eb:64:89:9e:c8:1b:44:88:e7:
be:c0:e4:3f:fe:7d:c6:84:19:26:73:cc:4f:fd:8f:43:85:59:
11:58:4c:44:82:db:46:be:2f:38:42:76:65:2e:9f:c8:56:de:
8e:a2:1a:e9:33:54:58:48:84:2b:7f:8c:02:76:b9:be:2b:9d:
5f:c5:c6:b5:fa:fd:0d:ce:9c:38:07:c3:93:ba:ad:37:93:37:
37:2a:6c:4c:3e:dd:2c:12:30:d4:c6:a0:96:b7:e2:40:c7:9a:
df:98:f3:32:ee:a9:1a:b7:f0:f1:c1:28:a5:d2:a1:c9:7f:9c:
4d:51:8f:1f:2f:45:d6:dd:6e:cb:d8:a2:ce:46:ea:0c:da:38:
f8:7a:32:69:d4:43:6b:3a:22:71:e9:56:bd:f7:f5:60:da:f8:
70:21:2d:e1:44:2d:11:3a:c0:da:68:f5:16:48:79:85:28:cf:
82:32:56:9f:b2:f6:6f:87:ff:6c:33:12:26:3c:9e:d1:d0:b5:
b1:3f:70:a5:25:72:bb:ef:3d:7d:27:85:ae:65:1d:a7:c6:f1:
49:59:b0:a0:d7:df:ea:4b:44:14:33:02:1e:9a:ea:20:9e:c3:
82:d9:19:07:9d:d3:0d:2d:43:57:b7:fb:f9:59:15:72:60:c4:
36:2e:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:11:45 2026 by rpki-client