Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
File: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer (raw, json)
Hash identifier: +eat3OBhLS96vzzo6Gpd1PZ4RpR4ZxPB4L3+HlXXmlo=
Subject key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 6B2E7C72AAF539F185F7740EAA48003C85148A0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 09 Apr 2026 05:42:45 +0000
Certificate not after: Thu 08 Apr 2027 05:47:45 +0000
Subordinate resources: AS: 55985
IP: 43.247.152.0/22
IP: 43.247.232.0/22
IP: 45.251.144.0/21
IP: 103.30.96.0/22
IP: 103.220.108.0/22
IP: 103.220.116.0/22
IP: 103.252.104.0/22
IP: 182.49.0.0/16
IP: 2405:9700::/32
IP: 2405:9880::/32
IP: 2405:9980::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2e:7c:72:aa:f5:39:f1:85:f7:74:0e:aa:48:00:3c:85:14:8a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 9 05:42:45 2026 GMT
Not After : Apr 8 05:47:45 2027 GMT
Subject: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:db:29:aa:ab:b5:85:63:d4:67:5a:ce:0f:
95:9b:99:fb:e8:c8:02:10:75:c6:58:bf:77:f9:9a:
0b:80:06:4f:da:b1:01:d3:00:14:8d:b7:a3:63:7e:
24:d3:19:da:5e:32:5a:50:e9:4b:8c:af:d1:d1:28:
8a:c9:35:4a:17:ac:da:0a:3e:c5:dc:24:e4:a5:c6:
77:97:67:cf:2b:30:3b:99:56:eb:65:01:70:eb:23:
da:e9:9c:82:84:e2:26:5a:e3:c6:f5:fe:26:a5:95:
8f:57:3f:87:fa:1e:76:51:f7:11:ee:04:5f:a9:2f:
ef:58:77:c9:cd:98:be:90:f2:d8:90:d0:82:9e:55:
8c:8a:8e:9b:6e:49:19:3b:a4:44:3b:4f:55:a1:44:
79:1d:86:3d:f3:ea:ec:8c:19:59:72:30:00:1b:c2:
38:73:a2:6c:f2:9d:e5:ce:42:c3:67:11:8a:09:b6:
06:53:52:bc:fa:df:7a:8b:d7:7c:bc:69:51:43:5a:
06:ac:6e:c9:59:86:78:11:a6:86:86:6a:31:47:6e:
4c:12:9c:a7:b6:76:a7:9e:58:e7:bf:9a:f2:e0:ed:
5a:b1:bf:92:4e:a3:4f:cc:aa:46:2a:8f:99:da:48:
e1:cf:6e:75:02:3d:a0:f3:2a:f7:36:c8:be:82:cd:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.152.0/22
43.247.232.0/22
45.251.144.0/21
103.30.96.0/22
103.220.108.0/22
103.220.116.0/22
103.252.104.0/22
182.49.0.0/16
IPv6:
2405:9700::/32
2405:9880::/32
2405:9980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55985
Signature Algorithm: sha256WithRSAEncryption
6a:22:66:74:48:3e:d0:a4:63:7b:aa:01:d8:e3:5d:37:21:95:
27:ec:1b:f6:3f:44:f9:f7:ae:aa:68:81:0a:f1:ec:29:3d:17:
24:ad:d2:1e:47:f5:68:0a:49:cd:7b:08:7c:9d:18:57:94:41:
3a:67:e4:52:8f:d3:19:65:9f:6a:35:1e:a5:80:2b:b2:9d:96:
a9:b5:71:8b:7e:3a:aa:32:c2:a3:ce:27:13:52:51:e0:15:58:
18:fb:58:fd:e1:9c:4e:f2:f5:76:37:1f:2c:5c:54:0e:8c:10:
99:18:67:ef:4a:6e:7c:19:05:22:44:fe:0f:8c:50:75:9f:ba:
a3:53:29:54:fd:13:ae:e5:b9:e6:cb:e5:0c:79:63:b3:f8:72:
5a:d0:f6:4d:e2:4c:d3:bb:29:10:1e:7f:a0:8d:74:f5:53:34:
15:45:ee:8a:67:cd:80:57:61:1b:8d:ed:75:63:7a:04:40:c5:
3e:a6:ea:7b:a5:6c:22:2f:4f:eb:af:08:74:6f:16:23:14:0e:
0c:13:97:77:2f:b2:17:d1:3f:24:f2:e9:cb:14:a1:94:67:68:
ef:d7:e9:9f:34:ca:6c:fe:d4:c5:98:e7:89:84:1e:dc:79:d7:
fb:f2:27:93:67:1e:b0:7b:ef:3e:a9:35:40:27:07:dd:88:04:
ba:00:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:05 2026 by rpki-client