$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer (raw, json) Hash identifier: yRda3R/6pOA55WdEU5UBGagpnUmX1bOMs5/DiALSHrU= Subject key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 632C61578A6C1471BE00E4D5D7C125500EB9CDD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 21 Apr 2026 06:59:10 +0000 Certificate not after: Tue 20 Apr 2027 07:04:10 +0000 Subordinate resources: AS: 45073 IP: 103.108.244.0/22 IP: 2402:7540::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2c:61:57:8a:6c:14:71:be:00:e4:d5:d7:c1:25:50:0e:b9:cd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 21 06:59:10 2026 GMT Not After : Apr 20 07:04:10 2027 GMT Subject: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:85:b2:73:24:89:a3:41:56:ff:b0:63:65: ce:09:4d:56:ae:10:72:ad:b4:d1:4b:88:a6:a4:dc: 98:10:de:d4:17:72:ab:48:62:04:89:3d:49:14:e8: fa:9f:b5:50:7b:83:38:de:f6:37:72:61:55:43:72: 0f:67:8d:a4:af:bc:6f:cd:9e:2f:22:7a:6e:30:df: 25:16:39:0c:f2:72:77:90:da:bd:e1:8a:a0:57:a4: de:1f:6d:2c:41:0f:a9:89:58:86:c2:d4:2d:84:cd: 61:88:9e:a5:68:49:b8:35:e6:6f:58:5c:75:f4:93: fe:bd:c4:33:c8:29:21:0b:3b:92:8a:d7:0c:00:1e: be:bf:75:c3:b6:d6:d9:6d:7e:a1:77:54:ff:dd:9b: 6c:67:e3:0c:a6:da:d4:83:ed:65:3a:86:cf:c0:f0: b5:31:8f:26:a6:73:34:d8:6d:01:0c:1a:bc:9e:d0: 34:fa:30:89:f9:8a:49:5e:83:ef:5c:4b:ac:63:1b: ad:1d:94:42:85:7f:40:46:c3:da:a9:4e:91:b4:00: 84:5e:75:8e:21:f2:af:4e:29:19:5a:bb:35:db:f6: 07:24:e3:e0:0b:10:92:6e:d4:9c:31:a2:bc:c4:1d: ce:d9:d2:13:27:dc:f1:ce:4d:43:3d:a2:52:cf:35: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.244.0/22 IPv6: 2402:7540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45073 Signature Algorithm: sha256WithRSAEncryption 75:50:7b:26:23:a4:f3:1d:12:86:70:b5:04:15:07:ff:18:06: cc:40:f0:da:e6:60:48:2f:37:80:f0:5b:1e:6e:7c:59:2d:e9: 4b:da:4a:87:a9:57:7a:52:cd:79:1a:34:b7:52:ef:6d:db:df: 32:5a:af:d5:63:0e:5f:9f:0c:d6:9d:90:77:84:b4:e0:61:ea: a4:75:a2:69:aa:da:89:bf:53:e0:c7:6e:b2:0f:78:5a:f7:25: ed:6a:e8:bc:3e:c3:e2:2f:bd:ba:bd:fb:f3:56:d9:5b:64:65: 2a:32:9e:f8:23:34:75:31:c2:84:bc:90:83:50:8e:c3:c8:f2: ab:bd:fb:b3:cd:f3:48:b9:12:fc:bd:bd:08:79:2b:48:31:c0: 1b:06:57:57:36:e3:9c:2c:79:d0:ec:48:1e:9e:97:3c:79:90: 08:21:e3:a9:c5:e4:3c:cf:cb:de:8b:67:e5:0a:83:fd:14:40: 83:27:60:c5:d1:76:6a:a1:f9:08:95:34:1d:c0:83:f9:f9:39: e5:ce:0a:ff:ec:11:3e:53:64:36:1b:51:80:b8:78:75:cc:6c: 80:b0:de:be:da:ed:b9:0e:95:6b:91:33:2e:54:41:d3:cb:73: 92:16:90:6d:86:e9:e4:1e:58:1a:aa:98:7c:ef:27:a3:9f:87: 03:4a:d8:05 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUYyxhV4psFHG+AOTV18ElUA65zdQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMTA2NTkxMFoX DTI3MDQyMDA3MDQxMFowMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1 NjIzMDU4QkJCNkMyRTBDNkY5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD/hbJzJImjQVb/sGNlzglNVq4Qcq200UuIpqTcmBDe1Bdyq0hiBIk9SRTo +p+1UHuDON72N3JhVUNyD2eNpK+8b82eLyJ6bjDfJRY5DPJyd5DaveGKoFek3h9t LEEPqYlYhsLULYTNYYiepWhJuDXmb1hcdfST/r3EM8gpIQs7korXDAAevr91w7bW 2W1+oXdU/92bbGfjDKba1IPtZTqGz8DwtTGPJqZzNNhtAQwavJ7QNPowifmKSV6D 71xLrGMbrR2UQoV/QEbD2qlOkbQAhF51jiHyr04pGVq7Ndv2ByTj4AsQkm7UnDGi vMQdztnSEyfc8c5NQz2iUs81jeECAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJlboBwLCSVzyt1WIwWLu2wuDG+cMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODg2Njc0ODMyMjQ4MDEyOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4ODY2NzQ4MzIyNDgwMTI5 LzAvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnbPQwDQQCAAIwBwMFACQCdUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALARMA0GCSqGSIb3DQEBCwUAA4IBAQB1UHsmI6TzHRKG cLUEFQf/GAbMQPDa5mBILzeA8FsebnxZLelL2kqHqVd6Us15GjS3Uu9t298yWq/V Yw5fnwzWnZB3hLTgYeqkdaJpqtqJv1Pgx26yD3ha9yXtaui8PsPiL726vfvzVtlb ZGUqMp74IzR1McKEvJCDUI7DyPKrvfuzzfNIuRL8vb0IeStIMcAbBldXNuOcLHnQ 7Egenpc8eZAIIeOpxeQ8z8vei2flCoP9FECDJ2DF0XZqofkIlTQdwIP5+Tnlzgr/ 7BE+U2Q2G1GAuHh1zGyAsN6+2u25DpVrkTMuVEHTy3OSFpBthunkHlgaqph87yej n4cDStgF -----END CERTIFICATE-----Generated at Mon Apr 27 14:57:00 2026 by rpki-client