Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
File: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer (raw, json)
Hash identifier: kZuRA/W/F7OryTNV3V4U6Ii/sE2Xmg3zArCDGFNAoKk=
Subject key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 3792F8AD4087576149F27ADBBBA7FEF2D342D700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 21 May 2026 01:38:16 +0000
Certificate not after: Thu 20 May 2027 01:43:16 +0000
Subordinate resources: AS: 59016
IP: 103.237.176.0 -- 103.237.247.255
IP: 2401:3880::/32
IP: 2401:3980::/32
IP: 2401:3a80::/32
IP: 2401:3b80::/32
IP: 2401:3c80::/32
IP: 2401:3d80::/32
IP: 2401:3e80::/32
IP: 2401:3f80::/32
IP: 2401:4080::/32
IP: 2401:4180::/32
IP: 2401:4280::/32
IP: 2401:4380::/32
IP: 2401:4480::/32
IP: 2401:4580::/32
IP: 2401:4680::/32
IP: 2401:4780::/32
IP: 2401:4880::/32
IP: 2401:4a80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:92:f8:ad:40:87:57:61:49:f2:7a:db:bb:a7:fe:f2:d3:42:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 21 01:38:16 2026 GMT
Not After : May 20 01:43:16 2027 GMT
Subject: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:f9:ae:74:e3:dd:ba:f7:85:6a:61:0f:df:
01:33:fb:ec:2e:66:46:e1:07:d0:c7:18:0c:23:7d:
f6:76:6e:16:cb:5d:7f:ca:15:a4:59:a3:41:a6:4d:
70:e3:8c:5d:22:92:64:63:cf:00:71:da:e2:53:df:
91:e0:04:78:7c:0d:27:b5:2a:3d:6d:50:e9:13:4b:
cd:ea:b8:ce:35:ed:67:54:4d:32:1a:74:73:4a:46:
9b:47:de:52:99:83:fe:4e:05:4f:6a:06:21:08:dd:
5d:20:f1:a1:64:43:26:b5:65:f2:4f:3a:b8:2c:79:
7d:63:29:e0:fb:3f:b8:b2:a4:8e:99:69:ed:b3:a9:
df:55:7e:a4:e4:a3:6e:aa:b6:b1:35:39:29:bb:9a:
91:0b:fb:f7:1f:4e:ea:8a:dd:24:a2:f9:87:df:a6:
58:72:62:21:1b:e2:b7:82:23:6a:c6:3e:ba:6b:10:
51:85:11:23:6a:34:65:a9:c6:c2:77:06:71:37:76:
5b:ab:0d:27:5e:97:cc:50:f9:22:09:c4:b9:de:1e:
41:5a:a4:4d:77:35:60:02:a0:04:a3:3d:f4:e1:46:
cd:38:91:6a:53:e0:ac:38:9e:c1:b3:d2:8d:59:0b:
f6:89:32:63:96:51:7b:c7:10:6c:e3:11:65:8f:34:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.237.176.0-103.237.247.255
IPv6:
2401:3880::/32
2401:3980::/32
2401:3a80::/32
2401:3b80::/32
2401:3c80::/32
2401:3d80::/32
2401:3e80::/32
2401:3f80::/32
2401:4080::/32
2401:4180::/32
2401:4280::/32
2401:4380::/32
2401:4480::/32
2401:4580::/32
2401:4680::/32
2401:4780::/32
2401:4880::/32
2401:4a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59016
Signature Algorithm: sha256WithRSAEncryption
5c:a3:a7:e0:63:5f:89:f0:95:ad:60:a6:80:b2:21:80:33:5a:
ce:17:23:a7:6c:61:f6:e8:fd:e6:ca:93:d6:9d:92:a8:04:5a:
06:b7:34:57:45:b0:e7:1b:4b:53:65:05:28:0c:50:ca:fc:28:
f1:ea:2e:2b:17:7c:7f:34:69:1d:65:52:56:e8:12:40:11:e9:
fd:4c:a8:02:f7:98:43:b1:9c:f4:2a:5b:ac:41:3b:fe:57:74:
a4:2d:91:06:08:9c:6d:8b:15:4c:55:c0:b7:db:14:06:ee:86:
31:cc:81:17:60:98:25:0c:9b:8b:b5:32:f5:b2:16:43:78:3f:
75:61:e6:1b:b8:82:ab:9a:b3:3b:50:12:7b:87:c2:cc:06:ae:
cf:b2:aa:51:58:d0:e5:f0:fb:e8:33:9f:20:69:7e:f8:55:17:
dc:c4:4c:66:07:54:5d:62:99:61:c8:d7:4a:84:59:c1:d5:23:
fc:af:57:f0:32:09:eb:ac:94:e3:75:67:16:0a:c7:4d:22:39:
19:99:cf:86:df:3e:d8:82:bc:5f:88:a0:db:f5:98:89:07:e9:
30:45:91:84:db:9f:db:cf:12:73:e5:bd:20:41:d8:5e:3f:ba:
47:88:67:11:76:0a:8f:2d:67:ff:6d:74:b3:1d:d6:2a:87:c8:
ec:d0:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:11:24 2026 by rpki-client