Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
File: A60990A9CA589164050432BD05473DCF9F93F6F8.cer (raw, json)
Hash identifier: VXN/50x5S6Ki+tCqXtibBnGVQbI7smSBUCC8+RqiLCg=
Subject key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0542791CFA6ABD62E2745D581E19358463545890
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 15 May 2026 07:44:25 +0000
Certificate not after: Fri 14 May 2027 07:49:25 +0000
Subordinate resources: AS: 45083
IP: 1.45.0.0/16
IP: 43.229.56.0/22
IP: 43.254.116.0/22
IP: 103.48.52.0/22
IP: 103.154.66.0/23
IP: 103.238.144.0/22
IP: 202.130.224.0/19
IP: 211.144.0.0/19
IP: 211.154.192.0/18
IP: 218.244.32.0/19
IP: 219.232.0.0/19
IP: 219.235.32.0/19
IP: 2403:a80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:42:79:1c:fa:6a:bd:62:e2:74:5d:58:1e:19:35:84:63:54:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 15 07:44:25 2026 GMT
Not After : May 14 07:49:25 2027 GMT
Subject: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:ad:6e:33:ee:fa:bb:4a:02:9a:c0:c8:d8:
40:74:f8:ad:33:e0:1b:9a:95:98:20:75:90:37:e1:
9c:d4:23:9c:11:a4:fa:30:03:34:a5:25:db:aa:73:
a6:76:af:43:74:44:6c:0e:b1:54:28:91:65:36:82:
d3:0d:f4:0c:74:8d:1b:e8:7e:cf:9c:3f:15:cc:eb:
09:99:a5:42:da:44:0a:c6:32:33:c7:7b:5b:61:61:
4f:4a:61:01:84:ab:67:e1:8f:95:c8:e5:c3:cf:76:
22:52:da:62:b6:17:09:a1:40:e0:a8:3d:43:8a:c2:
2f:a5:77:ef:9d:7f:da:e5:19:4d:66:c9:f4:c4:4d:
ec:72:06:c1:0b:e8:c2:46:e5:78:4d:e7:3b:fa:84:
ee:bd:ad:6f:f0:99:fa:c3:46:fc:f7:f7:47:be:91:
e3:5b:4e:57:8a:09:6e:f2:24:ee:b4:23:7a:73:dc:
ba:dd:8c:d6:64:4d:60:b9:35:90:f6:73:55:59:4a:
7b:4e:c7:22:17:87:b2:05:aa:d3:81:e8:cb:b8:ba:
ab:6d:32:9e:28:48:3a:5b:b8:7c:45:ae:b6:26:79:
7d:30:ea:2b:4d:e2:9c:b2:74:56:b2:90:9e:d7:07:
6f:e3:b9:bf:c0:7b:e7:11:ce:d6:5b:52:81:25:9b:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.0.0/16
43.229.56.0/22
43.254.116.0/22
103.48.52.0/22
103.154.66.0/23
103.238.144.0/22
202.130.224.0/19
211.144.0.0/19
211.154.192.0/18
218.244.32.0/19
219.232.0.0/19
219.235.32.0/19
IPv6:
2403:a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45083
Signature Algorithm: sha256WithRSAEncryption
91:f0:10:a7:bb:bb:e5:af:8b:9c:51:38:84:5a:20:e4:fd:6d:
7b:a9:3c:e2:06:b6:06:58:b5:0d:3c:f4:97:73:2e:02:ec:30:
a6:11:62:09:25:69:2c:70:c1:f7:e5:05:7d:3e:3c:78:53:a9:
df:68:98:7e:47:06:1a:46:d6:da:35:4a:44:62:5b:f4:91:c2:
32:1a:55:ff:21:3d:6e:17:f9:1f:8a:2a:e5:0a:24:c3:e0:c4:
8e:60:8b:c0:c3:1e:28:f2:11:f5:aa:a9:9e:61:13:b9:3d:7d:
ef:11:31:15:48:9b:7f:5a:e7:17:8b:16:dd:e0:7b:70:af:6d:
78:31:c1:e0:96:d7:4e:7d:c5:0a:82:97:e9:69:2b:5f:91:55:
04:2f:45:4a:5d:35:ce:93:7f:48:65:2c:41:bc:1e:8f:81:cc:
78:2a:20:39:0b:27:1a:db:88:b4:cd:a0:ce:e5:c9:72:8e:60:
68:6e:04:39:63:a3:25:c3:bb:f3:fb:56:ab:34:29:19:b8:7d:
dc:a2:84:bc:48:85:90:5a:1c:4b:ff:9f:f6:f0:07:3c:3f:e4:
8b:b1:fa:ad:3f:17:36:cb:76:2a:f8:48:d6:fe:d9:1a:a7:fc:
df:52:db:75:55:b6:dd:37:5c:26:56:3b:54:99:14:8e:b2:de:
42:ff:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:12:21 2026 by rpki-client