Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
File:                     56BE48FB7406C26DE662EBF89202C679B0854CE8.cer (raw, json)
Hash identifier:          U+dXaY2jc2yUyZgnw5C0qYZqQJv60kr04xhfDRdWxis=
Subject key identifier:   56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       58ADCC8AD5608B79A70C5DBE80819616D8D48976
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 27 Mar 2026 01:39:48 +0000
Certificate not after:    Fri 26 Mar 2027 01:44:48 +0000
Subordinate resources:    AS: 17965
                          AS: 24136
                          AS: 24151 -- 24152
                          AS: 24406
                          AS: 24408 -- 24409
                          AS: 58858
                          IP: 1.2.8.0/24
                          IP: 42.83.128.0/17
                          IP: 43.254.4.0/22
                          IP: 103.249.188.0/22
                          IP: 125.208.32.0/19
                          IP: 203.99.16.0/22
                          IP: 203.119.24.0 -- 203.119.35.255
                          IP: 218.241.96.0/19
                          IP: 2001:dc7:: -- 2001:dc7:9:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:dc7:c:: -- 2001:dc7:ffff:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:dd8:1::/48
                          IP: 2406:2700::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ad:cc:8a:d5:60:8b:79:a7:0c:5d:be:80:81:96:16:d8:d4:89:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Mar 27 01:39:48 2026 GMT
            Not After : Mar 26 01:44:48 2027 GMT
        Subject: CN=56BE48FB7406C26DE662EBF89202C679B0854CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:87:de:c8:82:9d:53:a5:f5:a0:fe:2a:df:
                    d0:02:4c:12:34:21:ed:19:e3:a8:b5:15:39:66:06:
                    ce:cb:de:1a:32:a8:de:c5:e5:33:6e:56:ce:aa:13:
                    bf:62:fa:8d:4a:cc:87:bd:f3:3e:7f:15:9b:d2:10:
                    36:86:63:b7:f5:36:0c:cc:46:d8:b6:10:5e:17:c4:
                    fb:4a:6c:43:64:0a:2e:2f:b1:87:e1:04:14:34:5c:
                    2c:f3:7f:04:86:e5:05:22:8f:23:cb:04:ca:b8:56:
                    25:b9:aa:f8:cb:d6:2a:6a:1f:f3:b8:b5:e6:f1:66:
                    2b:78:62:76:26:2d:9b:3d:a6:6f:93:06:85:9b:c0:
                    a2:30:ac:d7:33:44:d3:58:aa:08:19:95:86:4c:cb:
                    57:f3:3e:56:93:fd:23:9e:32:80:37:98:87:b5:b2:
                    9d:be:33:3b:e2:b2:3e:54:6a:d6:f4:03:cb:7e:58:
                    d6:2e:79:ff:83:ac:f9:1f:4b:05:8f:e6:80:39:60:
                    7c:a0:0b:5a:81:47:17:d9:d1:6f:17:0e:10:d0:7d:
                    7e:8c:0c:e5:6d:7e:33:bb:ab:bc:d2:88:d2:af:80:
                    dd:dd:e4:2e:3a:97:9c:26:ad:0a:44:80:a6:74:3a:
                    f4:1d:72:05:64:29:7c:5a:cb:14:bc:6d:c4:16:01:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.2.8.0/24
                  42.83.128.0/17
                  43.254.4.0/22
                  103.249.188.0/22
                  125.208.32.0/19
                  203.99.16.0/22
                  203.119.24.0-203.119.35.255
                  218.241.96.0/19
                IPv6:
                  2001:dc7::-2001:dc7:9:ffff:ffff:ffff:ffff:ffff
                  2001:dc7:c::-2001:dc7:ffff:ffff:ffff:ffff:ffff:ffff
                  2001:dd8:1::/48
                  2406:2700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17965
                  24136
                  24151-24152
                  24406
                  24408-24409
                  58858

    Signature Algorithm: sha256WithRSAEncryption
         64:53:fc:f9:bf:92:e6:ae:29:e8:24:8c:f6:83:c6:07:03:52:
         b5:7d:ca:17:4c:ed:54:3e:75:07:bb:53:94:ea:3c:d4:6d:83:
         f1:30:6a:b8:96:a4:87:2b:89:c0:ce:68:ba:66:35:bb:ee:29:
         2a:a8:54:45:59:ae:97:99:22:7f:e4:d5:8d:e1:ef:1f:f3:ac:
         16:6d:81:9e:91:b0:06:81:f6:f5:6c:b8:5d:f0:f8:23:d6:a3:
         1f:0c:b8:08:4a:95:a1:09:07:33:27:90:3b:60:84:00:8d:e1:
         b4:86:79:7c:a9:93:1c:0c:a7:06:71:e3:f8:6d:87:09:b7:33:
         96:10:be:d7:73:ac:fb:47:69:52:33:7d:08:69:e0:36:1e:2a:
         78:b9:07:bc:be:8b:c6:a7:10:6a:54:01:97:34:71:75:e6:fe:
         27:d5:f7:e8:68:f0:1b:6d:52:0d:66:af:be:32:c7:1b:14:b5:
         0b:17:9d:83:65:fd:95:9b:c9:47:5b:fe:3e:bd:1b:c3:6f:5a:
         df:fa:7e:a5:c7:5a:b0:d1:ec:d0:ab:83:24:71:a5:4e:a6:c3:
         33:65:29:3d:35:ad:80:d8:af:37:6d:56:a4:25:e1:17:0b:55:
         32:7d:36:9b:95:02:51:b5:9b:5b:52:b3:5f:99:03:ed:47:72:
         70:87:85:cc
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUWK3MitVgi3mnDF2+gIGWFtjUiXYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDMyNzAxMzk0OFoX
DTI3MDMyNjAxNDQ0OFowMzExMC8GA1UEAxMoNTZCRTQ4RkI3NDA2QzI2REU2NjJF
QkY4OTIwMkM2NzlCMDg1NENFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANKvh97Igp1TpfWg/irf0AJMEjQh7RnjqLUVOWYGzsveGjKo3sXlM25WzqoT
v2L6jUrMh73zPn8Vm9IQNoZjt/U2DMxG2LYQXhfE+0psQ2QKLi+xh+EEFDRcLPN/
BIblBSKPI8sEyrhWJbmq+MvWKmof87i15vFmK3hidiYtmz2mb5MGhZvAojCs1zNE
01iqCBmVhkzLV/M+VpP9I54ygDeYh7Wynb4zO+KyPlRq1vQDy35Y1i55/4Os+R9L
BY/mgDlgfKALWoFHF9nRbxcOENB9fowM5W1+M7urvNKI0q+A3d3kLjqXnCatCkSA
pnQ69B1yBWQpfFrLFLxtxBYBwJsCAwEAAaOCA0UwggNBMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFa+SPt0BsJt5mLr+JICxnmwhUzoMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA4OTcyNjY3ODY3NjAxMzA1Ny8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDg5NzI2Njc4Njc2MDEzMDU3
LzAvNTZCRTQ4RkI3NDA2QzI2REU2NjJFQkY4OTIwMkM2NzlCMDg1NENFOC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgY0GCCsGAQUF
BwEHAQH/BH4wfDA+BAIAATA4AwQAAQIIAwQHKlOAAwQCK/4EAwQCZ/m8AwQFfdAg
AwQCy2MQMAwDBAPLdxgDBALLdyADBAXa8WAwOgQCAAIwNDAQAwUAIAENxwMHASAB
DccACDAQAwcCIAENxwAMAwUDIAENwAMHACABDdgAAQMFACQGJwAwOgYIKwYBBQUH
AQgBAf8EKzApoCcwJQICRi0CAl5IMAgCAl5XAgJeWAICX1YwCAICX1gCAl9ZAgMA
5eowDQYJKoZIhvcNAQELBQADggEBAGRT/Pm/kuauKegkjPaDxgcDUrV9yhdM7VQ+
dQe7U5TqPNRtg/EwariWpIcricDOaLpmNbvuKSqoVEVZrpeZIn/k1Y3h7x/zrBZt
gZ6RsAaB9vVsuF3w+CPWox8MuAhKlaEJBzMnkDtghACN4bSGeXypkxwMpwZx4/ht
hwm3M5YQvtdzrPtHaVIzfQhp4DYeKni5B7y+i8anEGpUAZc0cXXm/ifV9+ho8Btt
Ug1mr74yxxsUtQsXnYNl/ZWbyUdb/j69G8NvWt/6fqXHWrDR7NCrgyRxpU6mwzNl
KT01rYDYrzdtVqQl4RcLVTJ9NpuVAlG1m1tSs1+ZA+1HcnCHhcw=
-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:02 2026 by rpki-client