
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer
File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer (raw, json)
Hash identifier: 7aZDLXo8ug1S+6rL5avj0D4pZhUyy+1eO4kITRARlJk=
Subject key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 596C49886EB5A877B6D1AF0BE35C06EA98E7B551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 08:42:18 +0000
Certificate not after: Thu 27 May 2027 08:47:18 +0000
Subordinate resources: AS: 56005
IP: 103.22.188.0/22
IP: 163.53.56.0/22
IP: 2404:f00::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6c:49:88:6e:b5:a8:77:b6:d1:af:0b:e3:5c:06:ea:98:e7:b5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 08:42:18 2026 GMT
Not After : May 27 08:47:18 2027 GMT
Subject: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:db:5e:67:d9:87:29:f1:32:a8:87:07:cf:
da:e4:f8:fe:7a:13:c1:46:61:46:e5:05:87:cb:22:
48:8b:e6:c5:9c:49:10:bc:26:26:96:0c:ee:2e:88:
cb:66:df:f6:79:ac:5d:dd:b3:01:6d:cc:fc:ca:01:
ef:a6:7d:2d:e4:47:da:9b:78:c9:e5:91:14:e8:eb:
e4:37:43:8f:68:6a:58:a4:13:9e:45:49:ea:89:c2:
c0:fe:1e:ff:5e:73:35:68:c5:ad:f5:9a:d8:10:88:
a4:a2:88:bd:ec:20:0f:b6:2e:c3:ac:95:3c:99:f6:
15:2e:d5:61:a1:c8:6f:4f:22:de:3d:46:8f:2a:79:
90:27:16:a8:9d:9f:97:b6:31:31:f6:62:ea:03:c3:
df:e0:00:a3:32:6a:1b:ac:80:ca:a8:e7:3d:35:f6:
2f:18:62:01:b2:ff:ac:db:60:40:37:ba:e6:c9:e8:
12:b3:37:6c:fb:09:9d:cd:1d:91:6e:fb:0a:6f:54:
2b:3d:38:f9:a1:11:99:20:38:ba:ca:0a:52:df:48:
8c:5a:4d:52:bd:5b:4d:e3:02:fa:7e:4f:93:e7:5b:
9b:91:4c:10:71:5d:88:a1:3c:1c:6a:20:12:39:87:
cc:48:9d:20:88:ad:5e:01:df:01:67:16:cb:9c:d2:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.22.188.0/22
163.53.56.0/22
IPv6:
2404:f00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56005
Signature Algorithm: sha256WithRSAEncryption
63:de:99:a9:27:ec:93:1e:e8:27:72:60:b1:ec:31:28:c3:ed:
4a:69:43:ff:d9:1e:fa:b4:82:d7:f9:0a:59:85:42:91:01:e8:
5c:f5:06:2d:08:4a:32:38:ae:aa:80:b1:c8:4a:b6:b4:26:67:
d7:02:d0:66:96:c1:db:56:73:84:51:d9:60:13:35:69:58:14:
f7:6a:f5:2d:0d:52:e4:96:81:93:77:86:c2:0d:2a:a9:f7:a4:
02:06:29:c5:80:20:1f:bd:56:95:cf:c7:25:fe:d8:c7:40:35:
92:ee:08:a9:5c:6a:00:ad:14:a8:68:b4:80:b3:f4:32:2a:e4:
22:4b:30:38:7d:1b:e3:7b:15:ea:d6:5f:cc:05:1a:7c:f8:6c:
01:7e:f0:d9:81:66:7d:a8:fe:79:22:38:f4:57:6f:f0:54:00:
0c:53:de:b9:2a:49:91:7c:55:60:e7:71:f7:6c:ef:13:ea:d9:
6c:14:b0:b4:e4:e3:ee:dc:22:86:fe:75:63:9c:da:51:0b:c9:
79:00:27:95:cd:ec:6e:53:57:df:c9:09:b2:91:2d:bd:68:2a:
98:93:5f:d6:94:2a:42:3f:8a:99:a3:8f:0a:3e:30:fe:47:cf:
77:f2:01:47:f2:c9:cf:94:6f:92:60:73:d9:90:17:d6:7e:ba:
ff:a5:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:12:53 2026 by rpki-client