
Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
File: 91C6B644DD6D84839ED120FBC00984D60495C8C4.cer (raw, json)
Hash identifier: fZqb00lONsKgYTxEbaoJqwJIPaw0Z8q2E3gpt8BaKnE=
Subject key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 1605860AA284A7DC42D3F3420C90B364ECE9EBEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 13 Apr 2026 01:54:33 +0000
Certificate not after: Mon 12 Apr 2027 01:59:33 +0000
Subordinate resources: AS: 24403 -- 24404
AS: 37967
AS: 38339
AS: 38353
AS: 45099 -- 45100
IP: 42.51.0.0/16
IP: 49.4.132.0 -- 49.4.191.255
IP: 49.5.0.0/16
IP: 58.99.128.0/17
IP: 61.4.82.0/23
IP: 101.36.128.0/17
IP: 106.2.224.0/19
IP: 106.3.32.0 -- 106.3.79.255
IP: 106.3.84.0/22
IP: 106.3.160.0/20
IP: 106.3.208.0 -- 106.3.255.255
IP: 110.173.0.0/21
IP: 110.232.32.0/19
IP: 114.64.0.0 -- 114.66.63.255
IP: 114.66.82.0 -- 114.66.127.255
IP: 114.112.6.0 -- 114.112.13.255
IP: 114.112.16.0/21
IP: 114.112.32.0 -- 114.112.95.255
IP: 114.112.108.0 -- 114.112.135.255
IP: 114.112.152.0 -- 114.112.199.255
IP: 114.112.224.0 -- 114.113.195.255
IP: 114.113.204.0/22
IP: 114.113.216.0/21
IP: 114.113.240.0/20
IP: 115.100.0.0/15
IP: 116.69.0.0/17
IP: 116.90.80.0/20
IP: 116.196.16.0 -- 116.196.63.255
IP: 116.255.128.0/17
IP: 119.40.0.0/18
IP: 119.57.0.0/16
IP: 119.63.32.0/19
IP: 121.52.208.0/20
IP: 121.58.144.0/20
IP: 121.79.128.0/18
IP: 121.101.208.0/20
IP: 121.201.0.0/17
IP: 122.14.192.0/18
IP: 122.49.0.0/18
IP: 122.102.0.0/20
IP: 122.112.0.0/19
IP: 122.112.64.0/18
IP: 122.115.16.0/20
IP: 122.115.64.0 -- 122.115.223.255
IP: 122.115.240.0/20
IP: 122.198.64.0/22
IP: 122.200.96.0/19
IP: 123.58.96.0/19
IP: 123.108.208.0/20
IP: 124.248.32.0/19
IP: 125.61.128.0/18
IP: 175.26.0.0/16
IP: 180.186.0.0/16
IP: 182.50.0.0/22
IP: 203.80.144.0/20
IP: 203.135.160.0/20
IP: 203.171.224.0/20
IP: 203.191.16.0/20
IP: 210.2.16.0/21
IP: 210.14.128.0/19
IP: 210.56.192.0/19
IP: 210.74.0.0/19
IP: 211.100.96.0/19
IP: 211.102.192.0/20
IP: 218.241.0.0/19
IP: 218.241.64.0/19
IP: 218.245.0.0 -- 218.245.47.255
IP: 219.232.224.0/19
IP: 223.252.128.0/18
IP: 223.252.224.0/19
IP: 2401:e00::/32
IP: 2401:ba00::/32
IP: 2401:be00::/32
IP: 2401:c200::/32
IP: 2401:c600::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:05:86:0a:a2:84:a7:dc:42:d3:f3:42:0c:90:b3:64:ec:e9:eb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 13 01:54:33 2026 GMT
Not After : Apr 12 01:59:33 2027 GMT
Subject: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:79:8e:87:d3:bc:b1:f4:56:b2:42:af:fd:
63:97:b9:cc:22:50:19:32:c7:c8:d3:2b:22:f2:04:
82:ec:f7:0c:60:e0:12:1a:43:a4:58:52:e2:87:f5:
92:b7:63:a8:85:b8:71:2b:15:a2:48:40:22:ae:5a:
7e:44:9d:58:43:72:24:81:56:40:49:ff:c9:13:3b:
1e:05:cb:a1:12:36:23:39:83:4a:f4:f8:cf:80:6a:
51:02:b1:89:74:e6:bf:17:7f:c3:46:ef:17:df:b4:
a7:e2:b1:4c:66:cb:96:8c:3d:ff:3b:e7:31:30:ba:
ac:27:c0:9e:92:86:00:c3:18:8b:06:84:44:12:c4:
41:dc:b0:67:e7:41:29:aa:1d:b1:8f:87:f6:7b:43:
07:d8:5a:54:86:70:7e:de:2d:cd:51:9e:d4:14:e6:
d7:23:78:23:57:9d:1f:64:84:37:52:4b:24:03:52:
9d:39:53:36:e2:03:56:b7:a7:05:8c:24:83:e0:ab:
50:b5:81:4b:5f:33:a3:23:c0:c5:46:71:4d:77:52:
fc:a8:32:6f:a0:e8:60:04:0a:de:52:4d:55:2b:14:
5a:d3:3b:6c:25:7e:92:bf:c1:3c:8f:0b:91:fe:a6:
d4:74:8a:f5:b6:3a:89:05:70:d2:92:0f:59:ff:29:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.51.0.0/16
49.4.132.0-49.4.191.255
49.5.0.0/16
58.99.128.0/17
61.4.82.0/23
101.36.128.0/17
106.2.224.0/19
106.3.32.0-106.3.79.255
106.3.84.0/22
106.3.160.0/20
106.3.208.0-106.3.255.255
110.173.0.0/21
110.232.32.0/19
114.64.0.0-114.66.63.255
114.66.82.0-114.66.127.255
114.112.6.0-114.112.13.255
114.112.16.0/21
114.112.32.0-114.112.95.255
114.112.108.0-114.112.135.255
114.112.152.0-114.112.199.255
114.112.224.0-114.113.195.255
114.113.204.0/22
114.113.216.0/21
114.113.240.0/20
115.100.0.0/15
116.69.0.0/17
116.90.80.0/20
116.196.16.0-116.196.63.255
116.255.128.0/17
119.40.0.0/18
119.57.0.0/16
119.63.32.0/19
121.52.208.0/20
121.58.144.0/20
121.79.128.0/18
121.101.208.0/20
121.201.0.0/17
122.14.192.0/18
122.49.0.0/18
122.102.0.0/20
122.112.0.0/19
122.112.64.0/18
122.115.16.0/20
122.115.64.0-122.115.223.255
122.115.240.0/20
122.198.64.0/22
122.200.96.0/19
123.58.96.0/19
123.108.208.0/20
124.248.32.0/19
125.61.128.0/18
175.26.0.0/16
180.186.0.0/16
182.50.0.0/22
203.80.144.0/20
203.135.160.0/20
203.171.224.0/20
203.191.16.0/20
210.2.16.0/21
210.14.128.0/19
210.56.192.0/19
210.74.0.0/19
211.100.96.0/19
211.102.192.0/20
218.241.0.0/19
218.241.64.0/19
218.245.0.0-218.245.47.255
219.232.224.0/19
223.252.128.0/18
223.252.224.0/19
IPv6:
2401:e00::/32
2401:ba00::/32
2401:be00::/32
2401:c200::/32
2401:c600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24403-24404
37967
38339
38353
45099-45100
Signature Algorithm: sha256WithRSAEncryption
60:23:47:ff:c9:21:6b:43:a5:c3:97:34:87:9a:d8:23:63:70:
f7:a3:e5:27:06:ab:0a:99:22:78:98:12:bc:86:a6:c2:3d:ad:
0c:e7:87:9a:c8:f0:17:9a:7f:21:3b:e7:70:20:85:d2:f0:29:
d6:e9:3c:04:7f:4a:3a:33:09:52:55:a3:03:a2:fc:f1:b0:80:
4a:27:df:d4:16:33:6d:12:d9:b2:76:b7:be:3b:bb:b7:bc:7c:
3a:35:0e:a3:d6:71:8e:5e:f4:4d:9e:31:1a:97:c1:57:79:1d:
cd:6f:c7:78:e1:7c:76:4b:24:bd:1b:66:84:86:b6:10:d2:6c:
2b:89:1f:ec:46:dd:cd:f3:32:73:a8:2e:b7:90:e2:eb:1e:c2:
3d:f0:41:5d:7c:8a:39:10:44:72:c8:83:c9:ba:07:dc:5a:f8:
7c:a7:5e:99:0f:93:4c:7a:70:60:ae:ab:b0:3f:07:4b:ae:ba:
ea:36:b6:26:d2:9a:11:6a:f3:50:66:1c:49:f4:69:a8:ef:80:
88:3d:64:f9:35:d5:44:b2:9c:2d:1e:1f:81:52:5d:da:b9:f3:
97:37:23:81:75:d4:f8:46:82:97:0a:b4:a4:fb:fb:79:40:af:
50:83:5e:a3:a5:ed:d9:4a:14:cd:a3:0f:db:b9:11:d4:ec:b0:
4f:64:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:02 2026 by rpki-client