Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer (raw, json)
Hash identifier: NMC+E75P25hEeyYcGBrgoDGKd8PCzN3NqcZWnZjjn1Y=
Subject key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 50A0BA5CC7A3C3DF1461960541CF9D6DE68405EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 06:31:21 +0000
Certificate not after: Thu 27 May 2027 06:36:21 +0000
Subordinate resources: AS: 38365
AS: 45076
AS: 45085
AS: 55967
AS: 63728 -- 63729
AS: 131138
IP: 42.199.0.0/16
IP: 101.247.0.0/17
IP: 103.6.76.0/22
IP: 106.12.0.0/15
IP: 114.110.64.0/18
IP: 114.111.0.0/19
IP: 117.58.0.0/17
IP: 119.75.208.0/20
IP: 120.48.0.0/15
IP: 122.248.48.0/20
IP: 150.242.120.0/22
IP: 180.76.0.0/16
IP: 182.61.0.0/16
IP: 202.181.112.0/20
IP: 2400:da00::/32
IP: 240c:4000::/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a0:ba:5c:c7:a3:c3:df:14:61:96:05:41:cf:9d:6d:e6:84:05:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 06:31:21 2026 GMT
Not After : May 27 06:36:21 2027 GMT
Subject: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:55:65:ed:08:c1:dc:8d:e3:d4:80:09:c6:
c1:38:ca:a9:cd:99:73:40:fd:2a:bf:7d:ee:80:ae:
eb:eb:53:54:00:e3:b8:dc:9d:09:85:0e:2b:6b:92:
27:7b:47:8d:ca:01:14:9b:f3:8d:cd:5c:80:4a:d8:
f0:e7:70:3e:c2:b8:93:49:71:16:69:1c:f5:0c:a0:
a5:0a:46:90:5a:10:53:c4:b5:91:f5:30:56:8c:24:
31:ae:99:17:f9:ce:84:91:b9:43:37:be:59:0f:d3:
05:53:cc:52:dd:b9:50:a0:e3:b4:31:6f:61:cd:f3:
cc:92:10:54:85:be:d5:80:49:f2:72:e6:14:c6:68:
78:e3:d0:e5:06:3e:95:ec:79:3c:45:0f:f3:fd:c0:
a6:b9:ef:c1:4c:98:14:00:30:e2:a5:4d:f4:b8:d6:
51:97:3e:8a:1b:f4:60:5b:50:d8:2a:24:2b:3e:4f:
3f:d2:52:33:a3:c4:fa:4d:aa:d9:e4:3a:a9:7b:61:
d9:5a:89:46:4e:18:18:39:7b:81:3c:69:ee:ee:81:
20:39:96:40:c9:29:aa:62:a5:4d:7b:d2:f1:2c:3e:
09:de:65:33:de:43:05:dd:dc:7d:41:bb:0a:58:56:
3e:cd:0d:52:b7:d8:ee:18:3d:3c:13:99:30:25:0f:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.199.0.0/16
101.247.0.0/17
103.6.76.0/22
106.12.0.0/15
114.110.64.0/18
114.111.0.0/19
117.58.0.0/17
119.75.208.0/20
120.48.0.0/15
122.248.48.0/20
150.242.120.0/22
180.76.0.0/16
182.61.0.0/16
202.181.112.0/20
IPv6:
2400:da00::/32
240c:4000::/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38365
45076
45085
55967
63728-63729
131138
Signature Algorithm: sha256WithRSAEncryption
7d:64:e4:10:79:7e:f4:99:ae:9b:5e:b8:ac:07:28:4d:8b:ea:
23:38:f1:10:c8:aa:f7:86:93:76:61:6c:4c:54:2c:87:ba:6a:
e7:b6:ec:9f:11:4b:6b:6b:17:50:70:12:ff:ab:2f:af:f0:61:
32:27:61:25:4b:04:42:88:eb:63:e3:cc:68:1e:8b:4a:ee:e0:
e8:7d:c5:89:a4:5d:a3:5f:2f:6a:c2:6f:a3:52:63:85:58:91:
fd:57:5b:4e:98:6a:fe:c8:17:6d:46:5e:2c:fe:a1:68:26:ad:
cc:33:b8:bf:67:c1:08:81:ec:29:c1:81:dd:c3:c9:d3:70:48:
0e:b5:47:9e:cd:26:ad:85:1e:7a:e0:c8:c6:7a:57:a9:ed:26:
c9:11:3e:a2:d9:3e:11:af:b7:d3:b5:80:0b:dd:10:9c:92:af:
c8:9f:9c:0e:e6:c9:b9:5d:4e:ab:0b:be:12:a0:9b:3c:2f:ae:
4b:cb:de:57:7d:8b:b3:c6:b7:a9:99:53:5c:96:99:89:9d:78:
95:fd:7e:ae:47:46:ef:7c:d4:4f:44:ae:76:b2:20:a8:9b:73:
56:b6:21:d1:4e:dc:2f:c2:3d:79:b3:8c:ba:6b:2f:43:17:b7:
e5:00:f5:1c:79:0c:db:0c:4c:ea:5a:c6:e3:dc:82:e2:ad:05:
b5:51:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:14:30 2026 by rpki-client