Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
File:                     91C6B644DD6D84839ED120FBC00984D60495C8C4.cer (raw, json)
Hash identifier:          fZqb00lONsKgYTxEbaoJqwJIPaw0Z8q2E3gpt8BaKnE=
Subject key identifier:   91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       1605860AA284A7DC42D3F3420C90B364ECE9EBEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 13 Apr 2026 01:54:33 +0000
Certificate not after:    Mon 12 Apr 2027 01:59:33 +0000
Subordinate resources:    AS: 24403 -- 24404
                          AS: 37967
                          AS: 38339
                          AS: 38353
                          AS: 45099 -- 45100
                          IP: 42.51.0.0/16
                          IP: 49.4.132.0 -- 49.4.191.255
                          IP: 49.5.0.0/16
                          IP: 58.99.128.0/17
                          IP: 61.4.82.0/23
                          IP: 101.36.128.0/17
                          IP: 106.2.224.0/19
                          IP: 106.3.32.0 -- 106.3.79.255
                          IP: 106.3.84.0/22
                          IP: 106.3.160.0/20
                          IP: 106.3.208.0 -- 106.3.255.255
                          IP: 110.173.0.0/21
                          IP: 110.232.32.0/19
                          IP: 114.64.0.0 -- 114.66.63.255
                          IP: 114.66.82.0 -- 114.66.127.255
                          IP: 114.112.6.0 -- 114.112.13.255
                          IP: 114.112.16.0/21
                          IP: 114.112.32.0 -- 114.112.95.255
                          IP: 114.112.108.0 -- 114.112.135.255
                          IP: 114.112.152.0 -- 114.112.199.255
                          IP: 114.112.224.0 -- 114.113.195.255
                          IP: 114.113.204.0/22
                          IP: 114.113.216.0/21
                          IP: 114.113.240.0/20
                          IP: 115.100.0.0/15
                          IP: 116.69.0.0/17
                          IP: 116.90.80.0/20
                          IP: 116.196.16.0 -- 116.196.63.255
                          IP: 116.255.128.0/17
                          IP: 119.40.0.0/18
                          IP: 119.57.0.0/16
                          IP: 119.63.32.0/19
                          IP: 121.52.208.0/20
                          IP: 121.58.144.0/20
                          IP: 121.79.128.0/18
                          IP: 121.101.208.0/20
                          IP: 121.201.0.0/17
                          IP: 122.14.192.0/18
                          IP: 122.49.0.0/18
                          IP: 122.102.0.0/20
                          IP: 122.112.0.0/19
                          IP: 122.112.64.0/18
                          IP: 122.115.16.0/20
                          IP: 122.115.64.0 -- 122.115.223.255
                          IP: 122.115.240.0/20
                          IP: 122.198.64.0/22
                          IP: 122.200.96.0/19
                          IP: 123.58.96.0/19
                          IP: 123.108.208.0/20
                          IP: 124.248.32.0/19
                          IP: 125.61.128.0/18
                          IP: 175.26.0.0/16
                          IP: 180.186.0.0/16
                          IP: 182.50.0.0/22
                          IP: 203.80.144.0/20
                          IP: 203.135.160.0/20
                          IP: 203.171.224.0/20
                          IP: 203.191.16.0/20
                          IP: 210.2.16.0/21
                          IP: 210.14.128.0/19
                          IP: 210.56.192.0/19
                          IP: 210.74.0.0/19
                          IP: 211.100.96.0/19
                          IP: 211.102.192.0/20
                          IP: 218.241.0.0/19
                          IP: 218.241.64.0/19
                          IP: 218.245.0.0 -- 218.245.47.255
                          IP: 219.232.224.0/19
                          IP: 223.252.128.0/18
                          IP: 223.252.224.0/19
                          IP: 2401:e00::/32
                          IP: 2401:ba00::/32
                          IP: 2401:be00::/32
                          IP: 2401:c200::/32
                          IP: 2401:c600::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:05:86:0a:a2:84:a7:dc:42:d3:f3:42:0c:90:b3:64:ec:e9:eb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 13 01:54:33 2026 GMT
            Not After : Apr 12 01:59:33 2027 GMT
        Subject: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:79:8e:87:d3:bc:b1:f4:56:b2:42:af:fd:
                    63:97:b9:cc:22:50:19:32:c7:c8:d3:2b:22:f2:04:
                    82:ec:f7:0c:60:e0:12:1a:43:a4:58:52:e2:87:f5:
                    92:b7:63:a8:85:b8:71:2b:15:a2:48:40:22:ae:5a:
                    7e:44:9d:58:43:72:24:81:56:40:49:ff:c9:13:3b:
                    1e:05:cb:a1:12:36:23:39:83:4a:f4:f8:cf:80:6a:
                    51:02:b1:89:74:e6:bf:17:7f:c3:46:ef:17:df:b4:
                    a7:e2:b1:4c:66:cb:96:8c:3d:ff:3b:e7:31:30:ba:
                    ac:27:c0:9e:92:86:00:c3:18:8b:06:84:44:12:c4:
                    41:dc:b0:67:e7:41:29:aa:1d:b1:8f:87:f6:7b:43:
                    07:d8:5a:54:86:70:7e:de:2d:cd:51:9e:d4:14:e6:
                    d7:23:78:23:57:9d:1f:64:84:37:52:4b:24:03:52:
                    9d:39:53:36:e2:03:56:b7:a7:05:8c:24:83:e0:ab:
                    50:b5:81:4b:5f:33:a3:23:c0:c5:46:71:4d:77:52:
                    fc:a8:32:6f:a0:e8:60:04:0a:de:52:4d:55:2b:14:
                    5a:d3:3b:6c:25:7e:92:bf:c1:3c:8f:0b:91:fe:a6:
                    d4:74:8a:f5:b6:3a:89:05:70:d2:92:0f:59:ff:29:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.51.0.0/16
                  49.4.132.0-49.4.191.255
                  49.5.0.0/16
                  58.99.128.0/17
                  61.4.82.0/23
                  101.36.128.0/17
                  106.2.224.0/19
                  106.3.32.0-106.3.79.255
                  106.3.84.0/22
                  106.3.160.0/20
                  106.3.208.0-106.3.255.255
                  110.173.0.0/21
                  110.232.32.0/19
                  114.64.0.0-114.66.63.255
                  114.66.82.0-114.66.127.255
                  114.112.6.0-114.112.13.255
                  114.112.16.0/21
                  114.112.32.0-114.112.95.255
                  114.112.108.0-114.112.135.255
                  114.112.152.0-114.112.199.255
                  114.112.224.0-114.113.195.255
                  114.113.204.0/22
                  114.113.216.0/21
                  114.113.240.0/20
                  115.100.0.0/15
                  116.69.0.0/17
                  116.90.80.0/20
                  116.196.16.0-116.196.63.255
                  116.255.128.0/17
                  119.40.0.0/18
                  119.57.0.0/16
                  119.63.32.0/19
                  121.52.208.0/20
                  121.58.144.0/20
                  121.79.128.0/18
                  121.101.208.0/20
                  121.201.0.0/17
                  122.14.192.0/18
                  122.49.0.0/18
                  122.102.0.0/20
                  122.112.0.0/19
                  122.112.64.0/18
                  122.115.16.0/20
                  122.115.64.0-122.115.223.255
                  122.115.240.0/20
                  122.198.64.0/22
                  122.200.96.0/19
                  123.58.96.0/19
                  123.108.208.0/20
                  124.248.32.0/19
                  125.61.128.0/18
                  175.26.0.0/16
                  180.186.0.0/16
                  182.50.0.0/22
                  203.80.144.0/20
                  203.135.160.0/20
                  203.171.224.0/20
                  203.191.16.0/20
                  210.2.16.0/21
                  210.14.128.0/19
                  210.56.192.0/19
                  210.74.0.0/19
                  211.100.96.0/19
                  211.102.192.0/20
                  218.241.0.0/19
                  218.241.64.0/19
                  218.245.0.0-218.245.47.255
                  219.232.224.0/19
                  223.252.128.0/18
                  223.252.224.0/19
                IPv6:
                  2401:e00::/32
                  2401:ba00::/32
                  2401:be00::/32
                  2401:c200::/32
                  2401:c600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24403-24404
                  37967
                  38339
                  38353
                  45099-45100

    Signature Algorithm: sha256WithRSAEncryption
         60:23:47:ff:c9:21:6b:43:a5:c3:97:34:87:9a:d8:23:63:70:
         f7:a3:e5:27:06:ab:0a:99:22:78:98:12:bc:86:a6:c2:3d:ad:
         0c:e7:87:9a:c8:f0:17:9a:7f:21:3b:e7:70:20:85:d2:f0:29:
         d6:e9:3c:04:7f:4a:3a:33:09:52:55:a3:03:a2:fc:f1:b0:80:
         4a:27:df:d4:16:33:6d:12:d9:b2:76:b7:be:3b:bb:b7:bc:7c:
         3a:35:0e:a3:d6:71:8e:5e:f4:4d:9e:31:1a:97:c1:57:79:1d:
         cd:6f:c7:78:e1:7c:76:4b:24:bd:1b:66:84:86:b6:10:d2:6c:
         2b:89:1f:ec:46:dd:cd:f3:32:73:a8:2e:b7:90:e2:eb:1e:c2:
         3d:f0:41:5d:7c:8a:39:10:44:72:c8:83:c9:ba:07:dc:5a:f8:
         7c:a7:5e:99:0f:93:4c:7a:70:60:ae:ab:b0:3f:07:4b:ae:ba:
         ea:36:b6:26:d2:9a:11:6a:f3:50:66:1c:49:f4:69:a8:ef:80:
         88:3d:64:f9:35:d5:44:b2:9c:2d:1e:1f:81:52:5d:da:b9:f3:
         97:37:23:81:75:d4:f8:46:82:97:0a:b4:a4:fb:fb:79:40:af:
         50:83:5e:a3:a5:ed:d9:4a:14:cd:a3:0f:db:b9:11:d4:ec:b0:
         4f:64:f2:f4
-----BEGIN CERTIFICATE-----
MIIIFTCCBv2gAwIBAgIUFgWGCqKEp9xC0/NCDJCzZOzp6+owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzAxNTQzM1oX
DTI3MDQxMjAxNTkzM1owMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEy
MEZCQzAwOTg0RDYwNDk1QzhDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALO9eY6H07yx9FayQq/9Y5e5zCJQGTLHyNMrIvIEguz3DGDgEhpDpFhS4of1
krdjqIW4cSsVokhAIq5afkSdWENyJIFWQEn/yRM7HgXLoRI2IzmDSvT4z4BqUQKx
iXTmvxd/w0bvF9+0p+KxTGbLlow9/zvnMTC6rCfAnpKGAMMYiwaERBLEQdywZ+dB
KaodsY+H9ntDB9haVIZwft4tzVGe1BTm1yN4I1edH2SEN1JLJANSnTlTNuIDVren
BYwkg+CrULWBS18zoyPAxUZxTXdS/Kgyb6DoYAQK3lJNVSsUWtM7bCV+kr/BPI8L
kf6m1HSK9bY6iQVw0pIPWf8phXcCAwEAAaOCBQgwggUEMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJHGtkTdbYSDntEg+8AJhNYElcjEMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NTg5MDk4NTIyNjg2MjU5NS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1
LzAvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggJPBggrBgEF
BQcBBwEB/wSCAj4wggI6MIICCwQCAAEwggIDAwMAKjMwDAMEAjEEhAMEBjEEgAMD
ADEFAwQHOmOAAwQBPQRSAwQHZSSAAwQFagLgMAwDBAVqAyADBARqA0ADBAJqA1QD
BARqA6AwCwMEBGoD0AMDAmoAAwQDbq0AAwQFbuggMAsDAwZyQAMEBnJCADAMAwQB
ckJSAwQHckIAMAwDBAFycAYDBAFycAwDBANycBAwDAMEBXJwIAMEBXJwQDAMAwQC
cnBsAwQDcnCAMAwDBANycJgDBANycMAwDAMEBXJw4AMEAnJxwAMEAnJxzAMEA3Jx
2AMEBHJx8AMDAXNkAwQHdEUAAwQEdFpQMAwDBAR0xBADBAZ0xAADBAd0/4ADBAZ3
KAADAwB3OQMEBXc/IAMEBHk00AMEBHk6kAMEBnlPgAMEBHll0AMEB3nJAAMEBnoO
wAMEBnoxAAMEBHpmAAMEBXpwAAMEBnpwQAMEBHpzEDAMAwQGenNAAwQFenPAAwQE
enPwAwQCesZAAwQFeshgAwQFezpgAwQEe2zQAwQFfPggAwQGfT2AAwMArxoDAwC0
ugMEArYyAAMEBMtQkAMEBMuHoAMEBMur4AMEBMu/EAMEA9ICEAMEBdIOgAMEBdI4
wAMEBdJKAAMEBdNkYAMEBNNmwAMEBdrxAAMEBdrxQDALAwMA2vUDBATa9SADBAXb
6OADBAbf/IADBAXf/OAwKQQCAAIwIwMFACQBDgADBQAkAboAAwUAJAG+AAMFACQB
wgADBQAkAcYAMDoGCCsGAQUFBwEIAQH/BCswKaAnMCUwCAICX1MCAl9UAgMAlE8C
AwCVwwIDAJXRMAoCAwCwKwIDALAsMA0GCSqGSIb3DQEBCwUAA4IBAQBgI0f/ySFr
Q6XDlzSHmtgjY3D3o+UnBqsKmSJ4mBK8hqbCPa0M54eayPAXmn8hO+dwIIXS8CnW
6TwEf0o6MwlSVaMDovzxsIBKJ9/UFjNtEtmydre+O7u3vHw6NQ6j1nGOXvRNnjEa
l8FXeR3Nb8d44Xx2SyS9G2aEhrYQ0mwriR/sRt3N8zJzqC63kOLrHsI98EFdfIo5
EERyyIPJugfcWvh8p16ZD5NMenBgrquwPwdLrrrqNrYm0poRavNQZhxJ9Gmo74CI
PWT5NdVEspwtHh+BUl3aufOXNyOBddT4RoKXCrSk+/t5QK9Qg16jpe3ZShTNow/b
uRHU7LBPZPL0
-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:02 2026 by rpki-client