Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
File:                     91C6B644DD6D84839ED120FBC00984D60495C8C4.cer (raw, json)
Hash identifier:          ljN1yH5wL3lBNn3RhMgwgsxXq5uktDMp9aNqIRq1XrA=
Subject key identifier:   91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       58F359C396E9434375AD38031A2B949FDDB9234B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Tue 30 Jun 2026 07:11:15 +0000
Certificate not after:    Tue 29 Jun 2027 07:16:15 +0000
Subordinate resources:    AS: 24403 -- 24404
                          AS: 37967
                          AS: 38339
                          AS: 38353
                          AS: 45099 -- 45100
                          IP: 42.51.0.0/16
                          IP: 49.4.132.0 -- 49.4.191.255
                          IP: 49.5.0.0/16
                          IP: 58.99.128.0/17
                          IP: 61.4.82.0/23
                          IP: 101.36.128.0/17
                          IP: 106.2.224.0/19
                          IP: 106.3.32.0 -- 106.3.79.255
                          IP: 106.3.84.0/22
                          IP: 106.3.160.0/20
                          IP: 106.3.208.0 -- 106.3.255.255
                          IP: 110.173.0.0/21
                          IP: 110.232.32.0/19
                          IP: 114.64.0.0 -- 114.66.63.255
                          IP: 114.66.82.0 -- 114.66.127.255
                          IP: 114.112.6.0 -- 114.112.13.255
                          IP: 114.112.16.0/21
                          IP: 114.112.32.0 -- 114.112.95.255
                          IP: 114.112.108.0 -- 114.112.135.255
                          IP: 114.112.152.0 -- 114.112.199.255
                          IP: 114.112.224.0 -- 114.113.195.255
                          IP: 114.113.204.0/22
                          IP: 114.113.216.0/21
                          IP: 114.113.240.0/20
                          IP: 116.69.0.0/17
                          IP: 116.90.80.0/20
                          IP: 116.196.16.0 -- 116.196.63.255
                          IP: 116.255.128.0/17
                          IP: 119.40.0.0/18
                          IP: 119.57.0.0/16
                          IP: 119.63.32.0/19
                          IP: 121.52.208.0/20
                          IP: 121.58.144.0/20
                          IP: 121.79.128.0/18
                          IP: 121.101.208.0/20
                          IP: 121.201.0.0/17
                          IP: 122.14.192.0/18
                          IP: 122.49.0.0/18
                          IP: 122.102.0.0/20
                          IP: 122.112.0.0/19
                          IP: 122.112.64.0/18
                          IP: 122.115.16.0/20
                          IP: 122.115.64.0 -- 122.115.223.255
                          IP: 122.115.240.0/20
                          IP: 122.198.64.0/22
                          IP: 122.200.96.0/19
                          IP: 123.58.96.0/19
                          IP: 123.108.208.0/20
                          IP: 124.248.32.0/19
                          IP: 125.61.128.0/18
                          IP: 175.26.0.0/16
                          IP: 180.186.0.0/16
                          IP: 182.50.0.0/22
                          IP: 203.80.144.0/20
                          IP: 203.135.160.0/20
                          IP: 203.171.224.0/20
                          IP: 203.191.16.0/20
                          IP: 210.2.16.0/21
                          IP: 210.14.128.0/19
                          IP: 210.56.192.0/19
                          IP: 210.74.0.0/19
                          IP: 211.100.96.0/19
                          IP: 211.102.192.0/20
                          IP: 218.241.0.0/19
                          IP: 218.241.64.0/19
                          IP: 218.245.0.0 -- 218.245.47.255
                          IP: 219.232.224.0/19
                          IP: 223.252.128.0/18
                          IP: 223.252.224.0/19
                          IP: 2401:e00::/32
                          IP: 2401:ba00::/32
                          IP: 2401:be00::/32
                          IP: 2401:c200::/32
                          IP: 2401:c600::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f3:59:c3:96:e9:43:43:75:ad:38:03:1a:2b:94:9f:dd:b9:23:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jun 30 07:11:15 2026 GMT
            Not After : Jun 29 07:16:15 2027 GMT
        Subject: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:79:8e:87:d3:bc:b1:f4:56:b2:42:af:fd:
                    63:97:b9:cc:22:50:19:32:c7:c8:d3:2b:22:f2:04:
                    82:ec:f7:0c:60:e0:12:1a:43:a4:58:52:e2:87:f5:
                    92:b7:63:a8:85:b8:71:2b:15:a2:48:40:22:ae:5a:
                    7e:44:9d:58:43:72:24:81:56:40:49:ff:c9:13:3b:
                    1e:05:cb:a1:12:36:23:39:83:4a:f4:f8:cf:80:6a:
                    51:02:b1:89:74:e6:bf:17:7f:c3:46:ef:17:df:b4:
                    a7:e2:b1:4c:66:cb:96:8c:3d:ff:3b:e7:31:30:ba:
                    ac:27:c0:9e:92:86:00:c3:18:8b:06:84:44:12:c4:
                    41:dc:b0:67:e7:41:29:aa:1d:b1:8f:87:f6:7b:43:
                    07:d8:5a:54:86:70:7e:de:2d:cd:51:9e:d4:14:e6:
                    d7:23:78:23:57:9d:1f:64:84:37:52:4b:24:03:52:
                    9d:39:53:36:e2:03:56:b7:a7:05:8c:24:83:e0:ab:
                    50:b5:81:4b:5f:33:a3:23:c0:c5:46:71:4d:77:52:
                    fc:a8:32:6f:a0:e8:60:04:0a:de:52:4d:55:2b:14:
                    5a:d3:3b:6c:25:7e:92:bf:c1:3c:8f:0b:91:fe:a6:
                    d4:74:8a:f5:b6:3a:89:05:70:d2:92:0f:59:ff:29:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.51.0.0/16
                  49.4.132.0-49.4.191.255
                  49.5.0.0/16
                  58.99.128.0/17
                  61.4.82.0/23
                  101.36.128.0/17
                  106.2.224.0/19
                  106.3.32.0-106.3.79.255
                  106.3.84.0/22
                  106.3.160.0/20
                  106.3.208.0-106.3.255.255
                  110.173.0.0/21
                  110.232.32.0/19
                  114.64.0.0-114.66.63.255
                  114.66.82.0-114.66.127.255
                  114.112.6.0-114.112.13.255
                  114.112.16.0/21
                  114.112.32.0-114.112.95.255
                  114.112.108.0-114.112.135.255
                  114.112.152.0-114.112.199.255
                  114.112.224.0-114.113.195.255
                  114.113.204.0/22
                  114.113.216.0/21
                  114.113.240.0/20
                  116.69.0.0/17
                  116.90.80.0/20
                  116.196.16.0-116.196.63.255
                  116.255.128.0/17
                  119.40.0.0/18
                  119.57.0.0/16
                  119.63.32.0/19
                  121.52.208.0/20
                  121.58.144.0/20
                  121.79.128.0/18
                  121.101.208.0/20
                  121.201.0.0/17
                  122.14.192.0/18
                  122.49.0.0/18
                  122.102.0.0/20
                  122.112.0.0/19
                  122.112.64.0/18
                  122.115.16.0/20
                  122.115.64.0-122.115.223.255
                  122.115.240.0/20
                  122.198.64.0/22
                  122.200.96.0/19
                  123.58.96.0/19
                  123.108.208.0/20
                  124.248.32.0/19
                  125.61.128.0/18
                  175.26.0.0/16
                  180.186.0.0/16
                  182.50.0.0/22
                  203.80.144.0/20
                  203.135.160.0/20
                  203.171.224.0/20
                  203.191.16.0/20
                  210.2.16.0/21
                  210.14.128.0/19
                  210.56.192.0/19
                  210.74.0.0/19
                  211.100.96.0/19
                  211.102.192.0/20
                  218.241.0.0/19
                  218.241.64.0/19
                  218.245.0.0-218.245.47.255
                  219.232.224.0/19
                  223.252.128.0/18
                  223.252.224.0/19
                IPv6:
                  2401:e00::/32
                  2401:ba00::/32
                  2401:be00::/32
                  2401:c200::/32
                  2401:c600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24403-24404
                  37967
                  38339
                  38353
                  45099-45100

    Signature Algorithm: sha256WithRSAEncryption
         00:02:c8:47:88:db:36:0d:51:eb:be:80:94:6d:87:76:34:61:
         f0:09:ac:81:6b:fb:5f:3a:dc:0a:c8:6b:d1:9f:2f:9a:b5:fc:
         38:1e:d9:0f:67:8c:b6:d4:e5:d6:eb:3c:84:3d:97:85:1d:54:
         d6:b3:16:e3:e1:ba:28:17:be:85:68:cc:8f:97:c8:73:bc:01:
         22:69:aa:5e:85:8f:45:0d:dd:1f:80:4f:04:f2:cf:2f:87:e3:
         94:95:9c:15:46:7b:ac:a0:e4:6e:93:e6:97:73:d8:c3:a5:1d:
         b3:85:d3:37:c9:8e:f8:ed:78:2a:8b:9c:94:03:bf:36:03:25:
         b0:45:94:e1:63:ea:a0:c4:fb:17:3d:2a:81:3b:77:43:e3:2f:
         50:fc:88:ad:40:b6:07:79:26:69:71:63:18:1b:f7:ea:51:b1:
         96:8e:90:c6:17:19:a2:e1:65:49:cb:69:ed:73:11:0d:73:08:
         8b:25:56:a2:3c:e1:e5:49:62:a0:bf:de:08:96:54:d2:5b:15:
         72:51:92:6e:ca:94:12:bc:75:57:c0:bb:4a:4e:4d:3e:e8:e6:
         a6:03:cd:aa:c1:7a:9b:fe:bf:8b:c3:9e:57:30:46:5c:f7:e9:
         99:6f:96:23:0e:f5:24:4d:a2:91:04:4f:0f:de:2c:c9:d3:14:
         58:93:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:12:41 2026 by rpki-client