Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer (raw, json)
Hash identifier: 2N2TK72Re6yiiwSNgkDplhJwGLDtK3h6gEt8r2gafhA=
Subject key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 2528CAFB6EB2A609C50F14FC6C469E219E882889
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 06:37:02 +0000
Certificate not after: Thu 27 May 2027 06:42:02 +0000
Subordinate resources: AS: 45110
IP: 43.254.228.0 -- 43.254.243.255
IP: 43.254.248.0/22
IP: 43.255.0.0/22
IP: 45.125.76.0/22
IP: 45.125.84.0 -- 45.125.103.255
IP: 103.23.160.0/22
IP: 103.103.188.0/22
IP: 103.193.212.0 -- 103.193.239.255
IP: 103.200.220.0 -- 103.201.3.255
IP: 103.201.192.0 -- 103.201.219.255
IP: 103.229.216.0/21
IP: 103.229.228.0/22
IP: 103.229.236.0 -- 103.229.243.255
IP: 111.118.200.0/21
IP: 113.21.232.0/21
IP: 114.31.64.0/21
IP: 114.141.80.0/21
IP: 116.66.120.0/24
IP: 116.66.123.0/24
IP: 119.18.224.0/24
IP: 119.18.226.0/24
IP: 119.18.234.0/24
IP: 119.18.236.0/23
IP: 119.18.239.0/24
IP: 119.161.120.0/21
IP: 120.136.16.0/21
IP: 202.47.104.0/21
IP: 202.57.192.0/20
IP: 202.65.96.0/22
IP: 203.114.244.0/22
IP: 2401:f7c0::/32
IP: 2403:9b00::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:28:ca:fb:6e:b2:a6:09:c5:0f:14:fc:6c:46:9e:21:9e:88:28:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 06:37:02 2026 GMT
Not After : May 27 06:42:02 2027 GMT
Subject: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:3f:4d:67:1b:b3:fd:16:d5:2b:a9:bc:a7:
16:53:ae:1f:53:7c:7b:96:61:7a:00:d8:18:07:d5:
a3:73:a5:19:8f:f5:a1:8f:73:9d:d8:d0:8c:88:bc:
d6:ef:b2:6a:67:0a:26:d3:53:b8:e8:15:3f:51:33:
0b:f4:69:47:0f:ef:ad:25:62:c1:70:1e:08:10:73:
18:50:36:f1:d1:39:fe:1d:8c:91:6c:bf:ce:be:ef:
46:75:9c:a7:f8:be:1b:8d:cc:5c:43:94:51:9e:d5:
0d:ba:43:09:08:34:48:ae:b1:bf:c3:21:88:14:ff:
1d:32:ea:da:92:4a:9b:82:f4:25:f1:37:9d:4c:18:
73:07:7f:52:be:ed:97:e6:e2:57:30:ab:fc:19:78:
a0:3c:dc:41:18:9e:e8:8a:54:68:65:ce:16:24:9c:
a1:b9:75:15:8f:f6:a5:4b:a9:40:a3:0b:7a:56:21:
22:4f:37:aa:fd:d7:f0:54:6d:14:a4:b1:2d:23:b8:
31:2e:de:8c:db:32:39:4a:26:78:4e:98:7c:2e:ad:
eb:92:c1:ab:1c:d7:62:97:27:56:92:76:eb:3b:23:
67:3b:f6:95:46:8d:0a:91:49:66:66:ef:b9:e0:d8:
61:78:53:1f:32:eb:a3:3d:79:8b:9d:87:89:0e:5a:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.228.0-43.254.243.255
43.254.248.0/22
43.255.0.0/22
45.125.76.0/22
45.125.84.0-45.125.103.255
103.23.160.0/22
103.103.188.0/22
103.193.212.0-103.193.239.255
103.200.220.0-103.201.3.255
103.201.192.0-103.201.219.255
103.229.216.0/21
103.229.228.0/22
103.229.236.0-103.229.243.255
111.118.200.0/21
113.21.232.0/21
114.31.64.0/21
114.141.80.0/21
116.66.120.0/24
116.66.123.0/24
119.18.224.0/24
119.18.226.0/24
119.18.234.0/24
119.18.236.0/23
119.18.239.0/24
119.161.120.0/21
120.136.16.0/21
202.47.104.0/21
202.57.192.0/20
202.65.96.0/22
203.114.244.0/22
IPv6:
2401:f7c0::/32
2403:9b00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45110
Signature Algorithm: sha256WithRSAEncryption
76:b9:79:cb:26:ff:e9:7f:c7:90:7d:c0:08:0e:51:ac:da:40:
e6:30:00:de:36:ff:5a:01:e1:99:e7:86:8c:8f:b5:74:32:fb:
1b:bf:e0:a0:b3:00:e7:dd:bc:6c:7b:73:07:18:67:38:b0:ee:
0f:38:74:9f:1b:ef:a2:9e:55:43:3f:0b:e9:f5:89:16:bd:2f:
fe:32:10:0a:15:03:fc:74:f4:d0:28:b0:94:6a:df:68:25:9e:
c0:91:09:bc:19:43:91:d9:d9:1b:e4:04:34:15:87:64:4c:f8:
06:33:a7:7e:41:ea:d4:45:aa:42:bd:e0:57:60:16:9d:66:2a:
31:bf:87:30:ae:23:df:7e:9c:4e:56:2f:1f:31:48:e1:56:f5:
bb:4a:78:46:e7:09:b3:0f:2e:aa:ab:5f:cb:14:83:1f:81:3f:
53:b7:ca:8c:50:0e:fc:0e:13:45:ef:fc:2c:d0:be:59:2d:1f:
7e:8a:04:c7:71:3a:9e:3e:41:ef:70:fd:4b:5a:46:01:c2:da:
51:db:f3:19:b7:6e:74:69:ed:23:ea:b2:10:a2:96:46:96:e9:
66:0b:a6:b4:36:6d:57:78:f0:f7:c9:d2:53:75:29:fc:b2:28:
7e:f7:e8:24:35:86:aa:7a:93:52:6a:f0:58:82:fb:1f:36:4e:
1e:94:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:16 2026 by rpki-client