Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
File: B5148646F2C451864E20696E4F1C926A098BC8D2.cer (raw, json)
Hash identifier: UQtIoYDVCyICgxrkINf91c5DBkedlnKvDp6zS0AhnfI=
Subject key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 6545B6AC6AA5B839B123F60FD8C7F6018B98BFDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 20 May 2026 05:31:54 +0000
Certificate not after: Wed 19 May 2027 05:36:54 +0000
Subordinate resources: AS: 63633
AS: 63639
IP: 45.251.88.0 -- 45.251.103.255
IP: 45.254.0.0/20
IP: 103.8.0.0/22
IP: 103.11.16.0/22
IP: 103.17.64.0/22
IP: 103.24.24.0/22
IP: 103.28.184.0/22
IP: 103.37.188.0/22
IP: 103.53.212.0/22
IP: 103.65.144.0 -- 103.65.175.255
IP: 103.72.224.0 -- 103.73.31.255
IP: 103.220.52.0 -- 103.220.67.255
IP: 103.223.104.0 -- 103.223.119.255
IP: 103.224.0.0/22
IP: 2403:5b40::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:45:b6:ac:6a:a5:b8:39:b1:23:f6:0f:d8:c7:f6:01:8b:98:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 20 05:31:54 2026 GMT
Not After : May 19 05:36:54 2027 GMT
Subject: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:6c:6c:fd:a6:9c:a9:1b:bf:77:c5:4f:7f:
54:a1:2d:47:72:67:92:ce:9d:8e:2d:b3:50:3b:0e:
6c:7e:ce:2e:a3:b1:17:db:89:e3:f5:d6:4c:4a:14:
4e:1e:ec:7f:b5:75:b2:8b:1c:f5:c9:5c:da:bf:ad:
73:d1:14:6b:2e:d4:8c:31:17:aa:18:49:87:4d:d5:
31:43:4d:2f:a3:38:a6:48:bb:d1:63:c2:3e:ec:26:
b5:4e:c4:9b:05:b6:b2:3a:2e:c5:11:6b:44:84:3a:
3b:39:b6:5f:34:8b:24:72:ae:34:5d:c5:21:e5:dd:
79:90:db:a6:4c:c7:3e:e8:0d:75:61:cc:9d:a6:51:
38:d8:11:0f:22:f4:7a:60:d2:45:bc:76:8d:4c:98:
95:b0:1b:85:a2:86:d5:ae:8d:16:30:dd:a4:74:0b:
d0:f4:be:81:b1:91:53:17:25:3f:6a:47:f8:d3:34:
cf:25:2b:79:4e:f7:b2:5b:45:4c:29:4e:3c:7e:96:
20:1d:a9:9b:15:21:24:4b:dd:31:0a:c1:59:fb:a8:
ca:3f:68:f6:83:fc:6c:73:8c:cf:0b:f7:1c:cf:4e:
20:79:34:1c:de:4f:26:ad:34:45:2d:1d:66:39:dc:
b8:4e:60:26:0f:6e:21:6f:e6:9b:d0:ec:e4:46:28:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.88.0-45.251.103.255
45.254.0.0/20
103.8.0.0/22
103.11.16.0/22
103.17.64.0/22
103.24.24.0/22
103.28.184.0/22
103.37.188.0/22
103.53.212.0/22
103.65.144.0-103.65.175.255
103.72.224.0-103.73.31.255
103.220.52.0-103.220.67.255
103.223.104.0-103.223.119.255
103.224.0.0/22
IPv6:
2403:5b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63633
63639
Signature Algorithm: sha256WithRSAEncryption
73:7e:ce:ae:7d:a3:33:2e:4f:db:19:e6:8d:51:b6:17:42:b1:
3e:76:44:96:73:50:5a:1b:81:df:93:32:a3:2a:b3:00:5a:12:
68:74:b5:4e:37:92:be:9d:9f:56:7e:eb:f3:b9:9f:c5:6a:e0:
73:80:96:6f:b1:d3:60:64:a8:ac:53:5f:6f:d5:e3:07:d1:84:
c7:04:97:f6:91:8d:ad:e2:68:ac:58:26:7c:cf:94:ea:6e:6e:
9f:0c:aa:01:84:4c:c7:4a:6c:f3:26:79:f6:97:ce:1a:96:66:
74:cf:5c:21:b4:2a:66:95:bc:3c:ba:8f:c1:79:f2:07:9b:44:
48:30:39:81:1e:14:5f:58:b8:c7:6a:65:a2:dd:bd:20:fd:9d:
c6:2e:59:e4:87:a8:77:d0:28:01:03:31:11:65:e7:22:c2:e8:
d1:6d:ac:06:4b:1c:e1:6b:f0:75:59:24:a6:e1:f7:ed:49:e0:
32:dd:80:8b:33:99:dd:12:b0:ed:5b:82:24:12:e3:38:5c:db:
76:96:c1:29:6f:96:01:73:da:d5:75:29:bb:db:80:81:57:92:
25:d8:27:8e:8a:53:7f:fa:3a:19:d8:f8:9d:6d:4b:18:77:15:
e7:78:e2:6c:d3:f2:d6:ea:dc:81:62:a4:22:b0:43:dd:cf:c7:
4c:0f:95:36
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUZUW2rGqluDmxI/YP2Mf2AYuYv9wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyMDA1MzE1NFoX
DTI3MDUxOTA1MzY1NFowMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2
OTZFNEYxQzkyNkEwOThCQzhEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKcSbGz9ppypG793xU9/VKEtR3Jnks6dji2zUDsObH7OLqOxF9uJ4/XWTEoU
Th7sf7V1sosc9clc2r+tc9EUay7UjDEXqhhJh03VMUNNL6M4pki70WPCPuwmtU7E
mwW2sjouxRFrRIQ6Ozm2XzSLJHKuNF3FIeXdeZDbpkzHPugNdWHMnaZRONgRDyL0
emDSRbx2jUyYlbAbhaKG1a6NFjDdpHQL0PS+gbGRUxclP2pH+NM0zyUreU73sltF
TClOPH6WIB2pmxUhJEvdMQrBWfuoyj9o9oP8bHOMzwv3HM9OIHk0HN5PJq00RS0d
ZjncuE5gJg9uIW/mm9Ds5EYok78CAwEAAaOCA0QwggNAMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLUUhkbyxFGGTiBpbk8ckmoJi8jSMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTEwOTM1NDAzNjg2OTQ2NDA4NS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5MzU0MDM2ODY5NDY0MDg1
LzAvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgacGCCsGAQUF
BwEHAQH/BIGXMIGUMIGCBAIAATB8MAwDBAMt+1gDBAMt+2ADBAQt/gADBAJnCAAD
BAJnCxADBAJnEUADBAJnGBgDBAJnHLgDBAJnJbwDBAJnNdQwDAMEBGdBkAMEBGdB
oDAMAwQFZ0jgAwQFZ0kAMAwDBAJn3DQDBAJn3EAwDAMEA2ffaAMEA2ffcAMEAmfg
ADANBAIAAjAHAwUAJANbQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA+JECAwD4
lzANBgkqhkiG9w0BAQsFAAOCAQEAc37Orn2jMy5P2xnmjVG2F0KxPnZElnNQWhuB
35MyoyqzAFoSaHS1TjeSvp2fVn7r87mfxWrgc4CWb7HTYGSorFNfb9XjB9GExwSX
9pGNreJorFgmfM+U6m5unwyqAYRMx0ps8yZ59pfOGpZmdM9cIbQqZpW8PLqPwXny
B5tESDA5gR4UX1i4x2plot29IP2dxi5Z5Ieod9AoAQMxEWXnIsLo0W2sBksc4Wvw
dVkkpuH37UngMt2AizOZ3RKw7VuCJBLjOFzbdpbBKW+WAXPa1XUpu9uAgVeSJdgn
jopTf/o6Gdj4nW1LGHcV53jibNPy1urcgWKkIrBD3c/HTA+VNg==
-----END CERTIFICATE-----
Generated at Fri May 29 21:11:48 2026 by rpki-client