
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
File: 727633DA248F6AC4626E0DF9B33145B74FD58F03.cer (raw, json)
Hash identifier: QTyRnP+ryY03F78LOqUDnWWFefXDuRBiy/+YSkZ/Kxg=
Subject key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 69966324EC92BFB9AD75542A68ED636397BA5925
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 09 Apr 2026 08:41:15 +0000
Certificate not after: Thu 08 Apr 2027 08:46:15 +0000
Subordinate resources: AS: 146841
IP: 59.83.0.0/17
IP: 59.83.144.0 -- 59.83.175.255
IP: 103.171.214.0/23
IP: 218.98.128.0 -- 218.98.223.255
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:96:63:24:ec:92:bf:b9:ad:75:54:2a:68:ed:63:63:97:ba:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 9 08:41:15 2026 GMT
Not After : Apr 8 08:46:15 2027 GMT
Subject: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:08:06:6d:37:38:89:1a:ce:33:a5:6a:05:
92:e6:2b:ae:72:61:b3:d9:06:4a:c4:3c:8d:58:8e:
27:f0:e9:5c:aa:ad:2b:5f:c3:fd:b2:37:c8:84:dc:
b9:65:a4:be:4e:21:ca:c4:4b:22:4b:26:d2:b5:81:
5f:46:f0:a7:1a:34:9e:dd:cd:9e:2e:60:d9:33:bb:
a9:5a:79:c2:6e:30:a1:a8:18:64:eb:46:99:56:7a:
0b:a6:d7:7f:ca:35:49:f1:7d:7c:92:c8:62:da:52:
db:63:51:f1:ec:29:e2:31:45:58:4a:3c:79:8c:e0:
1e:6e:8f:0e:57:88:7d:27:8b:4d:9d:f4:ca:74:f0:
92:f9:7f:7d:fa:38:63:3c:f6:08:ef:96:1d:3e:b1:
fd:b6:73:11:0a:26:75:49:a7:bb:b1:28:d7:3c:43:
5e:c1:ea:72:a9:b5:e0:d6:fa:2e:0b:e3:26:1e:b5:
1e:32:8e:f5:4d:e6:90:88:47:45:40:df:ac:1f:93:
57:54:89:ac:99:aa:7b:23:7b:93:b7:87:1f:69:a9:
67:08:fd:be:28:04:96:e1:9e:01:97:13:90:e8:0e:
e3:c0:0e:63:a1:70:ef:77:f3:03:8e:1c:e0:82:5d:
0e:d4:eb:96:a3:e9:b0:3d:29:95:39:cd:58:63:ab:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.83.0.0/17
59.83.144.0-59.83.175.255
103.171.214.0/23
218.98.128.0-218.98.223.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146841
Signature Algorithm: sha256WithRSAEncryption
64:f2:10:89:bd:e1:83:32:4c:40:6a:89:30:18:d1:69:f6:dd:
1d:ad:58:42:53:b6:ca:da:5d:60:36:cd:85:94:18:e5:6b:02:
fd:ff:5b:65:8d:21:ab:55:a0:76:48:95:f3:81:3b:f6:13:2e:
68:8a:c3:fb:07:ee:ea:e5:2c:ce:de:0f:cc:d6:aa:96:5f:36:
10:18:ee:b5:d5:96:c2:da:b4:73:74:43:e4:0a:47:a5:4f:42:
36:22:4b:61:04:83:b6:80:73:25:f3:d2:3f:cd:17:e5:9c:5b:
a9:33:7e:72:f2:85:c9:72:09:45:d1:9a:2d:0f:dc:5c:22:ca:
28:00:f0:58:b7:56:26:cc:1e:74:cd:92:61:38:d9:47:ef:f9:
e7:88:93:03:ba:3b:a6:7b:45:7f:d9:ef:fc:f3:6d:a8:e0:7f:
c6:15:a7:57:a4:eb:5e:7f:cb:06:20:e7:f6:80:07:5e:32:79:
ba:0f:0f:5d:e1:3f:b3:b3:29:97:f0:54:4d:81:d3:c7:f0:00:
38:6b:61:12:22:0a:f4:60:de:fe:54:f7:0a:c1:36:31:f7:30:
83:7e:b1:57:60:d3:7f:45:7a:15:d1:55:41:f1:50:31:c2:e5:
c1:e6:8c:cf:26:6a:45:01:49:8e:f9:ae:e9:2b:61:12:ce:1b:
ff:b8:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:36 2026 by rpki-client