Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
File:                     6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer (raw, json)
Hash identifier:          +ET9xn94XeSEbXtNLIps/TbS0SkJdpQ4EJZkSIkGCFA=
Subject key identifier:   6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       78C452E7C60E1E15CD79D55425C3232CBEB6835D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 09 Apr 2026 09:12:35 +0000
Certificate not after:    Thu 08 Apr 2027 09:17:35 +0000
Subordinate resources:    AS: 137764
                          IP: 103.98.40.0/22
                          IP: 103.105.200.0/22
                          IP: 103.139.212.0/23
                          IP: 2403:5ec0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c4:52:e7:c6:0e:1e:15:cd:79:d5:54:25:c3:23:2c:be:b6:83:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr  9 09:12:35 2026 GMT
            Not After : Apr  8 09:17:35 2027 GMT
        Subject: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:70:85:c1:0a:5a:c5:4e:1c:5d:a5:57:e0:
                    18:fe:6b:6e:16:87:87:26:db:19:5f:bd:02:b8:2e:
                    87:3d:6e:e4:5d:1e:14:77:0b:a5:64:ad:16:ec:df:
                    ee:a6:dc:90:e7:db:24:28:b4:3e:8d:62:ff:7f:98:
                    ee:6a:a7:3a:3b:f3:91:fd:95:c5:d5:9d:6d:5f:09:
                    e0:26:1a:f7:c9:a5:0d:e2:8e:6c:aa:c4:4f:18:73:
                    0f:46:52:35:db:6a:30:aa:0a:ef:fb:1c:e8:5b:cb:
                    e0:a1:f7:bd:36:cc:ed:61:52:e4:bf:58:05:46:96:
                    04:03:5d:07:3c:b9:ef:d8:bc:a2:0b:7d:7a:ec:e4:
                    01:df:18:7e:e5:c6:17:f8:55:f5:0a:72:ac:c2:23:
                    79:32:91:a2:b7:9d:e6:fc:6f:7b:30:96:6a:63:ab:
                    c4:77:58:bb:df:b4:74:12:97:68:6b:aa:61:29:c4:
                    5b:13:c3:e7:62:1e:d4:ed:f2:6c:eb:4c:27:cc:ae:
                    8c:78:90:31:22:09:b0:c5:98:e2:f5:77:89:64:d7:
                    8c:f6:3d:dd:ad:51:60:6e:b1:d9:4e:4d:82:6b:ad:
                    0c:6a:4a:06:04:99:8d:91:5c:a4:37:91:d0:b0:c6:
                    1c:3f:91:6c:7e:37:2f:76:4d:73:d4:86:b4:62:76:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.40.0/22
                  103.105.200.0/22
                  103.139.212.0/23
                IPv6:
                  2403:5ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137764

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:ef:5f:86:2b:7a:10:87:24:fc:0f:11:00:1d:da:1d:21:
         16:19:5b:46:2c:bc:30:57:5a:4a:1c:90:48:ef:a1:c8:bc:a9:
         33:29:1a:95:e0:4a:d9:34:31:5a:80:71:30:5a:a9:6d:75:5e:
         fc:df:a0:a0:1d:4b:38:1a:3d:fc:a1:03:da:82:b5:96:c7:61:
         e6:3e:cd:75:65:3d:93:fe:d4:b9:9b:b1:da:98:ff:d5:dc:0e:
         e5:3a:0b:b7:13:37:07:9b:37:62:e2:04:3f:99:b6:27:1a:30:
         e8:35:7b:ef:03:44:45:d5:9f:d4:2f:89:80:79:78:a0:5e:c1:
         c1:b5:da:43:d2:e6:7b:3a:2b:e0:c1:a2:4b:43:99:20:a6:c0:
         44:c2:98:98:7e:4b:ba:da:ab:5c:bb:c9:87:d9:1a:55:51:b1:
         3a:3e:c5:ed:db:8c:49:66:26:ee:a1:38:f6:23:aa:6c:da:85:
         98:e3:46:53:61:db:f9:d2:12:ec:2e:b3:6d:12:0e:3a:5d:7e:
         1f:5f:45:e5:30:d6:67:37:5a:b5:77:ad:7b:29:03:28:f9:52:
         95:84:30:a4:75:75:fb:fd:60:55:a2:d6:67:fd:68:cf:5d:9f:
         c2:1b:71:93:b9:aa:f9:bd:02:eb:83:eb:1f:c5:4d:a6:c4:d8:
         b9:53:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:03 2026 by rpki-client