Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
File:                     B361C757B6D70C317FD018CE921CC13F568B00D8.cer (raw, json)
Hash identifier:          R8CmYpiGLgRoo/b7M8UqHGiME4vHuIKMYuxEcdYnrAM=
Subject key identifier:   B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       75689D8841382AE46CBD666F635D3485534CE30E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 29 May 2026 01:15:20 +0000
Certificate not after:    Fri 28 May 2027 01:20:20 +0000
Subordinate resources:    AS: 151231
                          IP: 103.104.152.0/22
                          IP: 2402:2e60::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:68:9d:88:41:38:2a:e4:6c:bd:66:6f:63:5d:34:85:53:4c:e3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 29 01:15:20 2026 GMT
            Not After : May 28 01:20:20 2027 GMT
        Subject: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:ee:2b:97:89:f4:86:be:08:80:40:bd:e8:
                    5a:2b:bd:30:ea:86:c2:5f:11:2d:bc:9e:7a:70:d1:
                    b9:c0:f3:ff:2d:8c:d3:f7:a8:74:13:f4:7a:a7:68:
                    ae:df:73:1b:de:64:ca:4d:9f:18:d5:48:04:79:1f:
                    f4:4c:74:51:1e:0b:be:9a:55:21:ea:fa:d9:b3:e4:
                    6e:c0:38:4b:e6:f6:51:71:b1:9b:f2:2d:86:ec:09:
                    32:32:c4:26:24:85:e0:c4:18:e6:02:aa:b7:e2:b2:
                    1f:4b:8b:ce:c0:e0:99:d0:4f:44:6b:a8:9b:e2:87:
                    01:75:c0:85:5f:63:fd:13:b9:57:a5:a5:60:4c:70:
                    42:5e:5e:27:9a:c4:2c:1e:93:84:a9:79:ae:4d:2f:
                    a6:20:f7:8e:a4:a6:ae:fe:d3:af:df:41:b6:58:0a:
                    ef:9d:8c:eb:21:ef:5e:7d:d0:44:3a:dc:02:fd:d0:
                    e6:79:33:a6:2a:1a:44:77:6d:ad:50:76:18:9c:7d:
                    b2:6a:9e:8d:26:b3:61:d0:9f:57:b1:b4:5e:8c:3e:
                    e4:c8:68:bd:92:e0:05:17:a3:c2:98:69:2e:ba:bd:
                    98:d4:11:2e:6b:2c:06:66:7d:16:9f:9b:48:1c:59:
                    f1:f2:98:e7:b4:d6:c6:c3:5d:19:1e:33:eb:6c:a5:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.152.0/22
                IPv6:
                  2402:2e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151231

    Signature Algorithm: sha256WithRSAEncryption
         3e:10:2d:ac:f9:84:92:18:d8:1c:e1:32:18:6d:80:c6:1c:a1:
         a2:c6:90:3c:2e:ae:42:a2:bd:59:b6:38:c9:93:22:2f:5d:b1:
         6b:c3:e0:a8:33:30:98:e5:9a:19:c5:eb:ad:d1:96:62:ac:50:
         44:3a:d0:40:42:cf:20:24:a2:9e:a1:8d:8f:a2:37:d1:3e:58:
         9c:ff:3b:ca:c7:58:47:6d:d2:d2:3a:30:83:5a:9e:1d:86:7b:
         a9:af:e3:22:51:bf:3f:cf:77:0c:fd:a1:ca:56:a4:2a:20:b1:
         ed:f6:47:c6:34:a1:13:5d:cd:51:41:30:60:63:1b:fe:45:fa:
         46:a5:cc:62:4b:21:90:e6:91:ea:fc:9c:ae:33:eb:4d:2c:54:
         7c:d5:83:51:d4:34:2a:f1:a3:38:93:dd:0b:39:9a:e1:af:30:
         78:ae:50:45:d7:fa:69:a5:3a:e8:04:77:c0:e6:48:9d:d7:fc:
         91:64:76:30:eb:24:e4:9d:24:e0:ab:c5:15:18:2c:d6:42:74:
         c7:a2:60:3e:3d:9e:c5:48:3f:a0:ae:30:9b:e2:66:67:09:be:
         7b:5a:d6:d3:a7:e4:bd:e5:b3:2d:ef:bf:a7:28:e4:38:61:fe:
         46:23:be:c7:88:ea:a0:31:28:87:83:59:67:af:0e:18:68:69:
         dd:f5:6a:60
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIUdWidiEE4KuRsvWZvY100hVNM4w4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMTUyMFoX
DTI3MDUyODAxMjAyMFowMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAx
OENFOTIxQ0MxM0Y1NjhCMDBEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkF7iuXifSGvgiAQL3oWiu9MOqGwl8RLbyeenDRucDz/y2M0/eodBP0eqdo
rt9zG95kyk2fGNVIBHkf9Ex0UR4LvppVIer62bPkbsA4S+b2UXGxm/IthuwJMjLE
JiSF4MQY5gKqt+KyH0uLzsDgmdBPRGuom+KHAXXAhV9j/RO5V6WlYExwQl5eJ5rE
LB6ThKl5rk0vpiD3jqSmrv7Tr99BtlgK752M6yHvXn3QRDrcAv3Q5nkzpioaRHdt
rVB2GJx9smqejSazYdCfV7G0Xow+5MhovZLgBRejwphpLrq9mNQRLmssBmZ9Fp+b
SBxZ8fKY57TWxsNdGR4z62ylMhMCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLNhx1e21wwxf9AYzpIcwT9WiwDYMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4MzIyMTk3MjAwODk2My8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMDA4OTYz
LzAvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAJnaJgwDQQCAAIwBwMFACQCLmAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAk6/MA0GCSqGSIb3DQEBCwUAA4IBAQA+EC2s+YSSGNgc
4TIYbYDGHKGixpA8Lq5Cor1ZtjjJkyIvXbFrw+CoMzCY5ZoZxeut0ZZirFBEOtBA
Qs8gJKKeoY2PojfRPlic/zvKx1hHbdLSOjCDWp4dhnupr+MiUb8/z3cM/aHKVqQq
ILHt9kfGNKETXc1RQTBgYxv+RfpGpcxiSyGQ5pHq/JyuM+tNLFR81YNR1DQq8aM4
k90LOZrhrzB4rlBF1/pppTroBHfA5kid1/yRZHYw6yTknSTgq8UVGCzWQnTHomA+
PZ7FSD+grjCb4mZnCb57WtbTp+S95bMt77+nKOQ4Yf5GI77HiOqgMSiHg1lnrw4Y
aGnd9Wpg
-----END CERTIFICATE-----
Generated at Fri May 29 21:13:51 2026 by rpki-client