Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
File:                     9E09269F04335C992685B10E8709F2C95DC5E8DE.cer (raw, json)
Hash identifier:          vdhcaG+/OgjqjZJvezyho4Vm8EXrUvrMLp807pBPeNI=
Subject key identifier:   9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       54F77C7FCA704F37CCCF1E0C76FD0E950EBF838E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 01 Jun 2026 01:22:11 +0000
Certificate not after:    Mon 31 May 2027 01:27:11 +0000
Subordinate resources:    AS: 55990
                          AS: 63727
                          AS: 139124
                          AS: 139144
                          IP: 1.92.0.0/16
                          IP: 1.94.0.0/15
                          IP: 14.130.0.0/15
                          IP: 42.196.0.0 -- 42.198.255.255
                          IP: 43.226.168.0 -- 43.226.215.255
                          IP: 43.226.240.0 -- 43.227.7.255
                          IP: 43.227.36.0 -- 43.227.51.255
                          IP: 43.227.96.0/21
                          IP: 43.249.152.0 -- 43.249.167.255
                          IP: 43.254.0.0/22
                          IP: 49.4.0.0/17
                          IP: 49.220.0.0/16
                          IP: 49.222.0.0/16
                          IP: 60.201.0.0 -- 60.204.255.255
                          IP: 101.54.0.0/16
                          IP: 101.104.0.0/17
                          IP: 101.105.0.0 -- 101.107.255.255
                          IP: 101.245.0.0/16
                          IP: 103.31.200.0/22
                          IP: 103.39.160.0/19
                          IP: 103.40.16.0 -- 103.40.47.255
                          IP: 103.45.80.0/20
                          IP: 103.45.192.0/19
                          IP: 103.46.0.0/22
                          IP: 103.46.152.0 -- 103.46.167.255
                          IP: 103.46.172.0 -- 103.46.183.255
                          IP: 103.161.220.0/23
                          IP: 110.41.0.0/16
                          IP: 113.44.0.0/14
                          IP: 114.115.128.0 -- 114.116.255.255
                          IP: 115.32.0.0/14
                          IP: 115.120.0.0/16
                          IP: 115.173.0.0/17
                          IP: 115.175.0.0/16
                          IP: 116.61.0.0/16
                          IP: 116.63.0.0/16
                          IP: 116.196.192.0/18
                          IP: 116.204.0.0/17
                          IP: 116.205.0.0/16
                          IP: 116.216.0.0/16
                          IP: 116.218.0.0/16
                          IP: 116.243.0.0/16
                          IP: 117.78.0.0/18
                          IP: 117.100.0.0/17
                          IP: 117.101.0.0/16
                          IP: 118.198.0.0/16
                          IP: 118.207.0.0/16
                          IP: 118.244.0.0/17
                          IP: 118.246.0.0/16
                          IP: 119.3.0.0/16
                          IP: 120.46.0.0/16
                          IP: 121.36.0.0/15
                          IP: 121.71.0.0/16
                          IP: 122.9.0.0/16
                          IP: 122.112.128.0/17
                          IP: 123.60.0.0/16
                          IP: 123.196.128.0 -- 123.197.127.255
                          IP: 123.249.0.0/17
                          IP: 124.15.0.0/17
                          IP: 124.70.0.0/15
                          IP: 124.203.0.0/17
                          IP: 175.189.0.0/16
                          IP: 175.190.128.0 -- 175.191.255.255
                          IP: 180.86.0.0/16
                          IP: 180.89.128.0 -- 180.90.255.255
                          IP: 218.245.64.0/18
                          IP: 220.114.0.0/16
                          IP: 223.20.0.0/15
                          IP: 223.201.0.0/16
                          IP: 223.208.0.0/15
                          IP: 2407:c080::/32
                          IP: 2409:1000:: -- 2409:27ff:ffff:ffff:ffff:ffff:ffff:ffff
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f7:7c:7f:ca:70:4f:37:cc:cf:1e:0c:76:fd:0e:95:0e:bf:83:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jun  1 01:22:11 2026 GMT
            Not After : May 31 01:27:11 2027 GMT
        Subject: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:d8:85:48:ed:4c:67:56:8f:ef:30:c5:ae:
                    0f:ae:95:42:0b:af:08:19:03:7d:99:49:a0:2b:ea:
                    32:6e:36:48:a3:ec:8a:4b:3a:ab:26:1b:56:cd:63:
                    65:f1:16:09:c9:2a:a6:58:40:b6:4a:5c:55:ba:a7:
                    44:33:ad:58:10:15:de:6a:b7:91:db:19:38:da:61:
                    2d:16:26:fb:5c:e7:cf:d1:81:44:f7:15:58:2d:cb:
                    e4:0b:52:e1:e7:8f:a5:7b:cb:61:01:7d:5e:96:69:
                    ff:7e:fa:32:f6:d4:d8:81:4d:6b:4a:7d:34:15:e3:
                    84:ff:2e:bf:44:cf:4c:1e:fa:d6:8a:ff:6e:9d:2b:
                    49:5a:cd:7d:3f:ef:2d:03:e0:a3:b8:f3:86:be:d2:
                    92:c8:36:27:3d:90:00:da:21:9b:88:55:80:6e:f3:
                    e9:92:19:0b:03:7f:db:b6:9e:68:13:d4:a3:7f:23:
                    da:19:46:c6:07:64:1d:44:da:e2:fd:ee:d6:9c:bc:
                    3a:3d:22:ef:ea:c6:ab:42:bf:31:76:10:b0:c2:83:
                    a9:bf:d1:bf:e1:97:77:0f:9d:4e:40:2d:d3:7a:4e:
                    86:50:60:d4:52:a9:7b:e4:e1:c7:4c:c6:c2:ea:e9:
                    ea:fa:da:d4:24:c6:b2:04:19:9d:d6:fe:68:f0:8a:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.92.0.0/16
                  1.94.0.0/15
                  14.130.0.0/15
                  42.196.0.0-42.198.255.255
                  43.226.168.0-43.226.215.255
                  43.226.240.0-43.227.7.255
                  43.227.36.0-43.227.51.255
                  43.227.96.0/21
                  43.249.152.0-43.249.167.255
                  43.254.0.0/22
                  49.4.0.0/17
                  49.220.0.0/16
                  49.222.0.0/16
                  60.201.0.0-60.204.255.255
                  101.54.0.0/16
                  101.104.0.0/17
                  101.105.0.0-101.107.255.255
                  101.245.0.0/16
                  103.31.200.0/22
                  103.39.160.0/19
                  103.40.16.0-103.40.47.255
                  103.45.80.0/20
                  103.45.192.0/19
                  103.46.0.0/22
                  103.46.152.0-103.46.167.255
                  103.46.172.0-103.46.183.255
                  103.161.220.0/23
                  110.41.0.0/16
                  113.44.0.0/14
                  114.115.128.0-114.116.255.255
                  115.32.0.0/14
                  115.120.0.0/16
                  115.173.0.0/17
                  115.175.0.0/16
                  116.61.0.0/16
                  116.63.0.0/16
                  116.196.192.0/18
                  116.204.0.0/17
                  116.205.0.0/16
                  116.216.0.0/16
                  116.218.0.0/16
                  116.243.0.0/16
                  117.78.0.0/18
                  117.100.0.0/17
                  117.101.0.0/16
                  118.198.0.0/16
                  118.207.0.0/16
                  118.244.0.0/17
                  118.246.0.0/16
                  119.3.0.0/16
                  120.46.0.0/16
                  121.36.0.0/15
                  121.71.0.0/16
                  122.9.0.0/16
                  122.112.128.0/17
                  123.60.0.0/16
                  123.196.128.0-123.197.127.255
                  123.249.0.0/17
                  124.15.0.0/17
                  124.70.0.0/15
                  124.203.0.0/17
                  175.189.0.0/16
                  175.190.128.0-175.191.255.255
                  180.86.0.0/16
                  180.89.128.0-180.90.255.255
                  218.245.64.0/18
                  220.114.0.0/16
                  223.20.0.0/15
                  223.201.0.0/16
                  223.208.0.0/15
                IPv6:
                  2407:c080::/32
                  2409:1000::-2409:27ff:ffff:ffff:ffff:ffff:ffff:ffff

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55990
                  63727
                  139124
                  139144

    Signature Algorithm: sha256WithRSAEncryption
         07:27:fb:b8:e8:81:cc:c1:8c:0b:9c:42:53:cb:df:eb:c4:df:
         ed:79:f7:31:08:50:4e:e7:5b:d1:63:ce:af:29:b7:e7:f3:35:
         c4:53:42:f6:71:7f:a9:97:2e:67:08:fc:dc:f5:9c:35:f6:51:
         df:2d:93:de:cc:1f:90:13:df:7b:82:f6:f1:1a:37:73:68:87:
         35:ca:9e:5b:9f:23:fd:d5:05:7b:3d:32:a6:48:99:45:79:5b:
         6f:aa:cb:60:e5:29:74:8a:55:9c:d7:3e:66:fc:1a:ba:47:49:
         9d:2b:f5:71:7e:04:99:a3:21:14:2a:ad:e7:bd:0e:b0:23:23:
         81:f1:9c:3a:df:89:73:ab:af:ca:45:b2:44:31:47:67:0f:44:
         48:f7:63:91:7a:aa:9f:d0:54:c4:db:a5:80:56:0f:d1:37:96:
         6c:06:a5:1f:1b:c5:a6:3d:c1:4d:ef:d5:5a:86:e8:55:93:95:
         44:97:4c:62:13:06:79:20:f5:01:99:15:4d:26:6c:d1:80:61:
         31:bb:fe:87:3c:cf:b5:30:33:d3:2d:44:07:76:40:0a:87:e6:
         eb:22:c8:ea:60:fc:a2:59:c9:80:15:19:22:d6:df:40:a3:5b:
         20:aa:97:93:14:5a:9e:75:e5:02:49:8e:93:f8:b7:46:fc:5e:
         eb:50:4e:af
-----BEGIN CERTIFICATE-----
MIIH2zCCBsOgAwIBAgIUVPd8f8pwTzfMzx4Mdv0OlQ6/g44wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAxMjIxMVoX
DTI3MDUzMTAxMjcxMVowMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVC
MTBFODcwOUYyQzk1REM1RThERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL192IVI7UxnVo/vMMWuD66VQguvCBkDfZlJoCvqMm42SKPsiks6qyYbVs1j
ZfEWCckqplhAtkpcVbqnRDOtWBAV3mq3kdsZONphLRYm+1znz9GBRPcVWC3L5AtS
4eePpXvLYQF9XpZp/376MvbU2IFNa0p9NBXjhP8uv0TPTB761or/bp0rSVrNfT/v
LQPgo7jzhr7Sksg2Jz2QANohm4hVgG7z6ZIZCwN/27aeaBPUo38j2hlGxgdkHUTa
4v3u1py8Oj0i7+rGq0K/MXYQsMKDqb/Rv+GXdw+dTkAt03pOhlBg1FKpe+Thx0zG
wurp6vra1CTGsgQZndb+aPCKcaMCAwEAAaOCBM4wggTKMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJ4JJp8EM1yZJoWxDocJ8sldxejeMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4NTM4OTI2NTIyMzY4MS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgx
LzAvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggImBggrBgEF
BQcBBwEB/wSCAhUwggIRMIIB8AQCAAEwggHoAwMAAVwDAwEBXgMDAQ6CMAoDAwIq
xAMDACrGMAwDBAMr4qgDBAMr4tAwDAMEBCvi8AMEAyvjADAMAwQCK+MkAwQCK+Mw
AwQDK+NgMAwDBAMr+ZgDBAMr+aADBAIr/gADBAcxBAADAwAx3AMDADHeMAoDAwA8
yQMDADzMAwMAZTYDBAdlaAAwCgMDAGVpAwMCZWgDAwBl9QMEAmcfyAMEBWcnoDAM
AwQEZygQAwQEZyggAwQEZy1QAwQFZy3AAwQCZy4AMAwDBANnLpgDBANnLqAwDAME
AmcurAMEA2cusAMEAWeh3AMDAG4pAwMCcSwwCwMEB3JzgAMDAHJ0AwMCcyADAwBz
eAMEB3OtAAMDAHOvAwMAdD0DAwB0PwMEBnTEwAMEB3TMAAMDAHTNAwMAdNgDAwB0
2gMDAHTzAwQGdU4AAwQHdWQAAwMAdWUDAwB2xgMDAHbPAwQHdvQAAwMAdvYDAwB3
AwMDAHguAwMBeSQDAwB5RwMDAHoJAwQHenCAAwMAezwwDAMEB3vEgAMEB3vFAAME
B3v5AAMEB3wPAAMDAXxGAwQHfMsAAwMAr70wCwMEB6++gAMDBq+AAwMAtFYwCwME
B7RZgAMDALRaAwQG2vVAAwMA3HIDAwHfFAMDAN/JAwMB39AwGwQCAAIwFQMFACQH
wIAwDAMEBCQJEAMEAyQJIDApBggrBgEFBQcBCAEB/wQaMBigFjAUAgMA2rYCAwD4
7wIDAh90AgMCH4gwDQYJKoZIhvcNAQELBQADggEBAAcn+7jogczBjAucQlPL3+vE
3+159zEIUE7nW9Fjzq8pt+fzNcRTQvZxf6mXLmcI/Nz1nDX2Ud8tk97MH5AT33uC
9vEaN3NohzXKnlufI/3VBXs9MqZImUV5W2+qy2DlKXSKVZzXPmb8GrpHSZ0r9XF+
BJmjIRQqree9DrAjI4HxnDrfiXOrr8pFskQxR2cPREj3Y5F6qp/QVMTbpYBWD9E3
lmwGpR8bxaY9wU3v1VqG6FWTlUSXTGITBnkg9QGZFU0mbNGAYTG7/oc8z7UwM9Mt
RAd2QAqH5usiyOpg/KJZyYAVGSLW30CjWyCql5MUWp515QJJjpP4t0b8XutQTq8=
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:56:31 2026 by rpki-client