Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
File: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer (raw, json)
Hash identifier: 9fGpKKLQForFn4ExYlXDXxDYxsE8iADPEs8HkVry2IM=
Subject key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 3895AE8C9EDAAD926E7366D665CE95CB086A1E5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 07:20:53 +0000
Certificate not after: Thu 27 May 2027 07:25:53 +0000
Subordinate resources: AS: 56282
IP: 14.102.180.0/22
IP: 45.252.120.0/22
IP: 45.252.128.0/22
IP: 45.252.140.0/22
IP: 45.252.148.0/22
IP: 45.252.164.0 -- 45.252.179.255
IP: 45.254.160.0/22
IP: 45.254.168.0/21
IP: 45.255.168.0/22
IP: 45.255.192.0/20
IP: 45.255.212.0/22
IP: 103.17.40.0/22
IP: 103.26.0.0/22
IP: 103.64.240.0 -- 103.65.7.255
IP: 103.65.76.0 -- 103.65.95.255
IP: 103.65.100.0 -- 103.65.115.255
IP: 103.221.144.0 -- 103.221.155.255
IP: 103.221.160.0 -- 103.221.179.255
IP: 103.222.152.0 -- 103.222.163.255
IP: 103.227.76.0 -- 103.227.83.255
IP: 103.231.64.0/21
IP: 103.235.220.0 -- 103.235.255.255
IP: 103.237.0.0/20
IP: 103.243.252.0/22
IP: 103.249.252.0/22
IP: 114.66.64.0/20
IP: 114.67.0.0/18
IP: 150.129.192.0/22
IP: 163.47.4.0/22
IP: 163.53.40.0/22
IP: 163.53.88.0 -- 163.53.139.255
IP: 202.20.126.0/24
IP: 202.27.12.0/24
IP: 202.27.14.0/24
IP: 202.36.226.0/24
IP: 202.44.97.0/24
IP: 202.52.33.0 -- 202.52.34.255
IP: 202.52.47.0/24
IP: 202.52.143.0/24
IP: 202.53.140.0/24
IP: 202.53.143.0/24
IP: 202.59.1.0/24
IP: 202.59.240.0/24
IP: 202.61.123.0/24
IP: 202.61.127.0/24
IP: 202.63.80.0/24
IP: 202.63.253.0/24
IP: 202.74.36.0/24
IP: 202.74.42.0/24
IP: 202.74.52.0/24
IP: 202.84.22.0/24
IP: 202.89.119.0/24
IP: 202.90.37.0/24
IP: 202.90.193.0/24
IP: 202.90.205.0/24
IP: 202.94.74.0/24
IP: 202.94.81.0/24
IP: 202.125.109.0/24
IP: 202.129.208.0/24
IP: 202.130.39.0/24
IP: 202.146.186.0/24
IP: 202.151.33.0/24
IP: 203.185.189.0/24
IP: 203.191.5.0/24
IP: 203.191.133.0/24
IP: 203.201.182.0/24
IP: 211.155.80.0/20
IP: 2406:4d00::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:95:ae:8c:9e:da:ad:92:6e:73:66:d6:65:ce:95:cb:08:6a:1e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 07:20:53 2026 GMT
Not After : May 27 07:25:53 2027 GMT
Subject: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:96:a2:70:43:0c:e7:e4:c8:b2:0a:90:63:
af:75:44:90:e7:f6:e1:e9:02:94:55:e1:14:45:b2:
8e:98:8f:5e:c2:eb:76:2e:42:13:81:da:9a:1b:1e:
32:c9:1a:32:64:84:d1:e0:b8:95:6b:d5:62:f8:66:
fc:87:62:74:98:1d:9e:93:be:2c:e5:e0:74:22:48:
ca:f9:ec:e1:44:b9:40:91:e1:6c:70:28:45:ff:a9:
31:f9:11:14:5d:2c:c6:83:c7:80:f3:00:2e:42:3e:
dc:aa:0e:42:70:28:78:3f:77:15:07:cf:d6:82:ab:
c2:86:fe:be:d4:5b:c3:da:91:a3:49:34:71:e1:2b:
e8:02:38:7b:38:9d:17:eb:91:f9:ec:ca:b6:36:3a:
f3:0d:36:c5:c3:da:70:e5:b6:2c:c8:5b:bc:77:54:
63:d3:6a:b8:40:ef:a7:fd:d6:5f:50:ff:0f:eb:74:
e9:a5:19:64:20:88:3e:16:fa:38:91:aa:77:7f:2b:
53:3b:13:9e:36:7b:24:c0:5d:c4:b1:6e:ac:1f:35:
ef:08:0a:87:90:ba:ef:44:d6:ba:4b:0b:04:3e:3e:
22:34:b2:39:2c:eb:b4:49:39:c6:66:57:08:de:32:
ae:14:10:ee:e8:82:bc:eb:83:86:a3:4e:81:7d:25:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.180.0/22
45.252.120.0/22
45.252.128.0/22
45.252.140.0/22
45.252.148.0/22
45.252.164.0-45.252.179.255
45.254.160.0/22
45.254.168.0/21
45.255.168.0/22
45.255.192.0/20
45.255.212.0/22
103.17.40.0/22
103.26.0.0/22
103.64.240.0-103.65.7.255
103.65.76.0-103.65.95.255
103.65.100.0-103.65.115.255
103.221.144.0-103.221.155.255
103.221.160.0-103.221.179.255
103.222.152.0-103.222.163.255
103.227.76.0-103.227.83.255
103.231.64.0/21
103.235.220.0-103.235.255.255
103.237.0.0/20
103.243.252.0/22
103.249.252.0/22
114.66.64.0/20
114.67.0.0/18
150.129.192.0/22
163.47.4.0/22
163.53.40.0/22
163.53.88.0-163.53.139.255
202.20.126.0/24
202.27.12.0/24
202.27.14.0/24
202.36.226.0/24
202.44.97.0/24
202.52.33.0-202.52.34.255
202.52.47.0/24
202.52.143.0/24
202.53.140.0/24
202.53.143.0/24
202.59.1.0/24
202.59.240.0/24
202.61.123.0/24
202.61.127.0/24
202.63.80.0/24
202.63.253.0/24
202.74.36.0/24
202.74.42.0/24
202.74.52.0/24
202.84.22.0/24
202.89.119.0/24
202.90.37.0/24
202.90.193.0/24
202.90.205.0/24
202.94.74.0/24
202.94.81.0/24
202.125.109.0/24
202.129.208.0/24
202.130.39.0/24
202.146.186.0/24
202.151.33.0/24
203.185.189.0/24
203.191.5.0/24
203.191.133.0/24
203.201.182.0/24
211.155.80.0/20
IPv6:
2406:4d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56282
Signature Algorithm: sha256WithRSAEncryption
23:b9:6d:1b:4a:3b:cd:99:c2:50:69:44:54:cf:4b:c2:b7:aa:
26:79:65:22:f7:12:05:04:bf:43:e0:95:0b:86:94:a7:d8:a1:
fd:3d:cb:19:d5:98:68:4a:95:dd:fb:31:5a:be:61:5e:39:8c:
8e:e1:db:49:45:26:29:81:fb:cc:e1:c8:f4:08:ee:5d:9f:2e:
88:ed:8b:04:eb:33:b7:e1:85:0d:e2:ec:74:cb:d2:a2:c6:0b:
f1:78:8b:8d:e6:bd:29:74:96:34:fb:89:c6:59:05:48:f6:f3:
cb:f2:d9:40:d0:29:35:79:b5:5d:f9:29:74:ef:bb:66:14:0c:
44:81:c0:05:4d:b6:c5:47:fe:db:38:5b:51:12:de:54:77:1c:
bd:6a:ea:1e:91:6d:6c:46:5d:33:89:54:4f:6b:a5:8a:74:ae:
ba:d7:aa:03:c1:81:59:90:13:6b:97:33:56:02:ee:0f:ff:a6:
e9:68:c0:4b:74:6e:84:e7:58:da:08:3e:3d:98:84:70:52:b6:
cc:cc:81:fc:8b:55:f0:33:31:d3:c0:2b:dd:60:31:d7:48:de:
dc:58:f2:69:c1:3d:51:33:b2:e9:db:84:f3:6d:e3:df:55:d8:
3a:36:e8:b3:bd:61:84:55:3d:0d:dd:56:2e:e7:cb:fa:15:31:
ba:02:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:20 2026 by rpki-client