Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
File:                     727633DA248F6AC4626E0DF9B33145B74FD58F03.cer (raw, json)
Hash identifier:          QTyRnP+ryY03F78LOqUDnWWFefXDuRBiy/+YSkZ/Kxg=
Subject key identifier:   72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       69966324EC92BFB9AD75542A68ED636397BA5925
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 09 Apr 2026 08:41:15 +0000
Certificate not after:    Thu 08 Apr 2027 08:46:15 +0000
Subordinate resources:    AS: 146841
                          IP: 59.83.0.0/17
                          IP: 59.83.144.0 -- 59.83.175.255
                          IP: 103.171.214.0/23
                          IP: 218.98.128.0 -- 218.98.223.255
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:96:63:24:ec:92:bf:b9:ad:75:54:2a:68:ed:63:63:97:ba:59:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr  9 08:41:15 2026 GMT
            Not After : Apr  8 08:46:15 2027 GMT
        Subject: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:08:06:6d:37:38:89:1a:ce:33:a5:6a:05:
                    92:e6:2b:ae:72:61:b3:d9:06:4a:c4:3c:8d:58:8e:
                    27:f0:e9:5c:aa:ad:2b:5f:c3:fd:b2:37:c8:84:dc:
                    b9:65:a4:be:4e:21:ca:c4:4b:22:4b:26:d2:b5:81:
                    5f:46:f0:a7:1a:34:9e:dd:cd:9e:2e:60:d9:33:bb:
                    a9:5a:79:c2:6e:30:a1:a8:18:64:eb:46:99:56:7a:
                    0b:a6:d7:7f:ca:35:49:f1:7d:7c:92:c8:62:da:52:
                    db:63:51:f1:ec:29:e2:31:45:58:4a:3c:79:8c:e0:
                    1e:6e:8f:0e:57:88:7d:27:8b:4d:9d:f4:ca:74:f0:
                    92:f9:7f:7d:fa:38:63:3c:f6:08:ef:96:1d:3e:b1:
                    fd:b6:73:11:0a:26:75:49:a7:bb:b1:28:d7:3c:43:
                    5e:c1:ea:72:a9:b5:e0:d6:fa:2e:0b:e3:26:1e:b5:
                    1e:32:8e:f5:4d:e6:90:88:47:45:40:df:ac:1f:93:
                    57:54:89:ac:99:aa:7b:23:7b:93:b7:87:1f:69:a9:
                    67:08:fd:be:28:04:96:e1:9e:01:97:13:90:e8:0e:
                    e3:c0:0e:63:a1:70:ef:77:f3:03:8e:1c:e0:82:5d:
                    0e:d4:eb:96:a3:e9:b0:3d:29:95:39:cd:58:63:ab:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.83.0.0/17
                  59.83.144.0-59.83.175.255
                  103.171.214.0/23
                  218.98.128.0-218.98.223.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146841

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:10:89:bd:e1:83:32:4c:40:6a:89:30:18:d1:69:f6:dd:
         1d:ad:58:42:53:b6:ca:da:5d:60:36:cd:85:94:18:e5:6b:02:
         fd:ff:5b:65:8d:21:ab:55:a0:76:48:95:f3:81:3b:f6:13:2e:
         68:8a:c3:fb:07:ee:ea:e5:2c:ce:de:0f:cc:d6:aa:96:5f:36:
         10:18:ee:b5:d5:96:c2:da:b4:73:74:43:e4:0a:47:a5:4f:42:
         36:22:4b:61:04:83:b6:80:73:25:f3:d2:3f:cd:17:e5:9c:5b:
         a9:33:7e:72:f2:85:c9:72:09:45:d1:9a:2d:0f:dc:5c:22:ca:
         28:00:f0:58:b7:56:26:cc:1e:74:cd:92:61:38:d9:47:ef:f9:
         e7:88:93:03:ba:3b:a6:7b:45:7f:d9:ef:fc:f3:6d:a8:e0:7f:
         c6:15:a7:57:a4:eb:5e:7f:cb:06:20:e7:f6:80:07:5e:32:79:
         ba:0f:0f:5d:e1:3f:b3:b3:29:97:f0:54:4d:81:d3:c7:f0:00:
         38:6b:61:12:22:0a:f4:60:de:fe:54:f7:0a:c1:36:31:f7:30:
         83:7e:b1:57:60:d3:7f:45:7a:15:d1:55:41:f1:50:31:c2:e5:
         c1:e6:8c:cf:26:6a:45:01:49:8e:f9:ae:e9:2b:61:12:ce:1b:
         ff:b8:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:36 2026 by rpki-client