Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
File:                     A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer (raw, json)
Hash identifier:          gRMzCaIYnmiEpUN5/Xdfs9bkmnVbFy2e4Sf7R2WEzZY=
Subject key identifier:   A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       0E964242062D2858659AB5735FD1CB7FEC96D269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 29 May 2026 01:19:20 +0000
Certificate not after:    Fri 28 May 2027 01:24:20 +0000
Subordinate resources:    AS: 59012
                          IP: 103.110.136.0/22
                          IP: 2402:8bc0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:96:42:42:06:2d:28:58:65:9a:b5:73:5f:d1:cb:7f:ec:96:d2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 29 01:19:20 2026 GMT
            Not After : May 28 01:24:20 2027 GMT
        Subject: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:a4:57:a4:f4:3f:a0:65:c8:ae:91:f0:98:
                    9f:c2:69:a2:6f:9a:48:ab:e0:08:28:61:cf:2f:23:
                    c0:20:d5:9f:91:d4:9d:29:99:c2:44:7f:bf:05:48:
                    e7:7c:3e:a6:3b:79:82:79:23:cf:89:28:14:db:e9:
                    8c:3a:9a:d1:94:36:49:78:38:9a:bf:fd:5e:7c:78:
                    4c:2d:6c:92:3f:01:f9:27:62:29:27:dd:e5:c0:86:
                    c1:85:bc:9d:70:a4:f1:44:23:39:c3:bd:b0:3e:e1:
                    2d:0c:4b:26:90:cb:a7:4d:6f:a4:fd:5d:b1:a4:e6:
                    be:fa:d0:84:a3:c6:67:95:66:ea:14:d6:97:a8:82:
                    e3:69:2d:5d:62:c4:66:88:b9:dd:ac:87:50:60:30:
                    74:b6:0d:f6:20:33:59:da:23:9a:8e:24:9f:4e:55:
                    0b:c8:95:88:eb:2a:8b:2a:40:f5:15:d5:33:8e:5e:
                    f6:6d:74:44:64:23:ec:44:12:24:4e:a2:51:2e:ad:
                    47:92:47:6e:1c:85:bd:17:89:7e:32:41:04:e8:20:
                    ea:f4:d1:e6:4e:d2:a5:c7:92:51:fc:22:4f:b2:1f:
                    57:ee:28:53:ee:cd:5d:3f:a8:32:c0:93:3e:fe:58:
                    0c:c6:03:bf:da:11:9e:06:96:7e:ba:51:3a:b1:69:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.136.0/22
                IPv6:
                  2402:8bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59012

    Signature Algorithm: sha256WithRSAEncryption
         88:1a:de:82:ac:46:19:f3:06:c9:8b:c3:41:1b:9e:da:8f:3e:
         64:40:9a:34:96:5f:a9:eb:78:20:79:09:65:d1:f7:fe:4e:1a:
         e8:06:d6:a0:6e:b0:c4:a1:ec:e2:c1:83:c3:40:8b:77:5f:f2:
         9e:aa:32:90:b6:a0:65:c2:6f:9a:4d:45:59:38:ce:6e:41:5e:
         3a:35:b1:cd:f8:dc:e9:70:44:fb:2d:e9:95:13:64:c1:d3:9a:
         df:84:5a:5a:0b:f2:9d:ab:9c:e7:96:66:61:b1:ab:46:1d:33:
         d7:c0:26:9a:b6:a3:69:26:c1:c1:ce:cf:b5:a8:ee:25:02:ff:
         a1:07:97:92:a7:99:5c:de:95:fd:4b:99:ec:aa:a8:24:09:fd:
         0a:e2:52:fc:6e:0e:12:33:98:ef:a4:5e:d8:c1:d0:c2:e0:54:
         ff:b6:43:04:9b:42:3c:ac:48:dd:16:a4:50:e4:49:f8:01:7a:
         32:71:30:f5:bb:76:b4:e4:78:6a:12:16:a7:8e:95:7b:dc:71:
         e0:d7:80:19:48:2c:5c:f0:8d:72:2a:0e:b2:c7:db:9d:a7:5f:
         c2:9a:25:ba:a4:69:7b:12:ab:f9:da:a8:27:9e:87:ed:c4:b5:
         a6:91:b9:6e:bc:d2:9f:c3:41:e7:40:15:2b:bb:89:12:5c:d0:
         fd:16:db:8b
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIUDpZCQgYtKFhlmrVzX9HLf+yW0mkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMTkyMFoX
DTI3MDUyODAxMjQyMFowMzExMC8GA1UEAxMoQTZFRjRFQTI3QUE2REQzQUVERTdG
ODJBQkYxMTgwREJFMTgwODVGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7xpFek9D+gZciukfCYn8Jpom+aSKvgCChhzy8jwCDVn5HUnSmZwkR/vwVI
53w+pjt5gnkjz4koFNvpjDqa0ZQ2SXg4mr/9Xnx4TC1skj8B+SdiKSfd5cCGwYW8
nXCk8UQjOcO9sD7hLQxLJpDLp01vpP1dsaTmvvrQhKPGZ5Vm6hTWl6iC42ktXWLE
Zoi53ayHUGAwdLYN9iAzWdojmo4kn05VC8iViOsqiypA9RXVM45e9m10RGQj7EQS
JE6iUS6tR5JHbhyFvReJfjJBBOgg6vTR5k7SpceSUfwiT7IfV+4oU+7NXT+oMsCT
Pv5YDMYDv9oRngaWfrpROrFpxtkCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKbvTqJ6pt067ef4Kr8RgNvhgIX5MB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4MzIyMTk3MjE0MDAzNS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMTQwMDM1
LzAvQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJFMTgwODVGOS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAJnbogwDQQCAAIwBwMFACQCi8AwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAOaEMA0GCSqGSIb3DQEBCwUAA4IBAQCIGt6CrEYZ8wbJ
i8NBG57ajz5kQJo0ll+p63ggeQll0ff+ThroBtagbrDEoeziwYPDQIt3X/KeqjKQ
tqBlwm+aTUVZOM5uQV46NbHN+NzpcET7LemVE2TB05rfhFpaC/Kdq5znlmZhsatG
HTPXwCaatqNpJsHBzs+1qO4lAv+hB5eSp5lc3pX9S5nsqqgkCf0K4lL8bg4SM5jv
pF7YwdDC4FT/tkMEm0I8rEjdFqRQ5En4AXoycTD1u3a05HhqEhanjpV73HHg14AZ
SCxc8I1yKg6yx9udp1/CmiW6pGl7Eqv52qgnnoftxLWmkbluvNKfw0HnQBUru4kS
XND9FtuL
-----END CERTIFICATE-----
Generated at Fri May 29 21:12:50 2026 by rpki-client