
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer
File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer (raw, json)
Hash identifier: XU0MvHciABEFG8khlGYm3ZZU/72CP2imuHMp64xIcPc=
Subject key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 2C1188221E0196010B37662D8B5FE7C0E2CDA3DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 02:48:13 +0000
Certificate not after: Fri 28 May 2027 02:53:13 +0000
Subordinate resources: AS: 131577
IP: 103.163.180.0/23
IP: 2407:2ac0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:11:88:22:1e:01:96:01:0b:37:66:2d:8b:5f:e7:c0:e2:cd:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 02:48:13 2026 GMT
Not After : May 28 02:53:13 2027 GMT
Subject: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:c6:8c:44:a0:c3:f1:18:bd:88:bf:12:b7:
8b:01:88:10:4a:39:5a:be:a9:92:70:59:6e:d7:54:
39:1f:fe:9b:21:1d:1a:54:aa:68:c1:cf:0f:fa:be:
3e:c9:12:ca:1a:66:20:05:1a:fd:37:c0:aa:ed:40:
fd:92:3c:e9:3e:ef:92:1d:2b:aa:d7:3a:86:0a:5f:
a9:67:8e:ce:99:69:a4:99:56:f5:15:b2:a3:d6:96:
09:f2:8c:f9:55:20:6d:6c:4e:a3:c2:35:c0:dd:ef:
af:e0:ab:e8:c7:35:65:d3:e6:2c:60:8d:87:e2:0f:
7f:8f:41:ee:83:3e:99:29:8b:bc:58:69:2e:00:3e:
11:0b:44:7a:24:28:3e:db:90:7c:f5:c4:06:43:79:
5c:8b:91:c1:42:96:e8:40:7b:2d:20:c1:8d:f1:a4:
14:d0:ce:df:4b:9b:76:d1:55:7d:5b:96:96:04:13:
42:3e:1e:85:c7:29:ca:2b:59:15:3c:02:a1:dc:9d:
76:70:61:58:90:45:90:4c:49:ed:c0:0f:e2:24:1e:
c7:ac:d3:6a:14:19:40:19:35:e2:a9:20:f3:18:cb:
ee:9d:5a:b7:77:4c:a6:f4:45:81:95:db:ad:e6:ff:
17:14:8f:16:36:ea:39:94:eb:90:1a:ed:39:a4:95:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.180.0/23
IPv6:
2407:2ac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131577
Signature Algorithm: sha256WithRSAEncryption
8d:91:6e:fa:cb:82:fe:74:84:97:83:c1:36:b8:cc:27:e6:8d:
49:c4:02:d0:8b:4a:3f:8f:5f:a4:9d:e6:31:d5:cc:d0:d0:2e:
84:c6:8e:cd:44:d9:7f:2b:a5:da:d3:26:27:a0:1d:0c:8a:59:
f6:09:39:5c:79:6c:05:8d:3f:a1:42:67:1e:ca:be:30:5c:9d:
0f:69:a9:a1:59:da:cb:51:aa:ff:05:4a:ad:a2:45:6e:82:6a:
d1:be:68:be:9b:b3:3c:4b:18:5e:30:9f:6a:d5:7b:61:ce:94:
00:08:7f:ab:0f:0b:81:e1:d5:a1:16:6f:b1:d2:eb:fe:f2:50:
6e:b5:a6:24:4e:40:2f:fa:12:dd:d2:45:ed:94:a7:0e:47:04:
58:32:b9:08:e3:13:9d:07:e4:de:63:11:dc:a1:36:0b:e5:e1:
b7:27:5d:85:4e:a5:84:db:91:11:26:54:b8:f2:bc:2c:63:79:
75:da:e9:dc:80:14:0d:8f:79:c9:59:d9:0b:8b:53:c6:b2:c7:
d2:67:dc:b1:94:3a:b7:d8:f1:56:b7:11:45:6e:1a:5d:18:c2:
94:cb:78:bf:af:00:19:72:8e:39:c3:36:95:9a:ee:ac:c7:19:
10:e0:ad:ad:fc:63:96:43:1e:19:75:c2:9d:87:c6:5e:e7:e7:
6b:35:aa:67
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIULBGIIh4BlgELN2Yti1/nwOLNo9swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAyNDgxM1oX
DTI3MDUyODAyNTMxM1owMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTky
MkZBOEU1NTlFQ0RDRkRBODIxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANVZxoxEoMPxGL2IvxK3iwGIEEo5Wr6pknBZbtdUOR/+myEdGlSqaMHPD/q+
PskSyhpmIAUa/TfAqu1A/ZI86T7vkh0rqtc6hgpfqWeOzplppJlW9RWyo9aWCfKM
+VUgbWxOo8I1wN3vr+Cr6Mc1ZdPmLGCNh+IPf49B7oM+mSmLvFhpLgA+EQtEeiQo
PtuQfPXEBkN5XIuRwUKW6EB7LSDBjfGkFNDO30ubdtFVfVuWlgQTQj4ehccpyitZ
FTwCodyddnBhWJBFkExJ7cAP4iQex6zTahQZQBk14qkg8xjL7p1at3dMpvRFgZXb
reb/FxSPFjbqOZTrkBrtOaSVRBECAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKDrACSyP4xGvFki+o5Vns3P2oIaMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4NTkxMTIxNzA2MTg5MS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MDYxODkx
LzAvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAFno7QwDQQCAAIwBwMFACQHKsAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAgH5MA0GCSqGSIb3DQEBCwUAA4IBAQCNkW76y4L+dISX
g8E2uMwn5o1JxALQi0o/j1+kneYx1czQ0C6Exo7NRNl/K6Xa0yYnoB0Miln2CTlc
eWwFjT+hQmceyr4wXJ0PaamhWdrLUar/BUqtokVugmrRvmi+m7M8SxheMJ9q1Xth
zpQACH+rDwuB4dWhFm+x0uv+8lButaYkTkAv+hLd0kXtlKcORwRYMrkI4xOdB+Te
YxHcoTYL5eG3J12FTqWE25ERJlS48rwsY3l12uncgBQNj3nJWdkLi1PGssfSZ9yx
lDq32PFWtxFFbhpdGMKUy3i/rwAZco45wzaVmu6sxxkQ4K2t/GOWQx4ZdcKdh8Ze
5+drNapn
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:55:01 2026 by rpki-client