Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer
File:                     BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer (raw, json)
Hash identifier:          7aZDLXo8ug1S+6rL5avj0D4pZhUyy+1eO4kITRARlJk=
Subject key identifier:   BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       596C49886EB5A877B6D1AF0BE35C06EA98E7B551
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 28 May 2026 08:42:18 +0000
Certificate not after:    Thu 27 May 2027 08:47:18 +0000
Subordinate resources:    AS: 56005
                          IP: 103.22.188.0/22
                          IP: 163.53.56.0/22
                          IP: 2404:f00::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6c:49:88:6e:b5:a8:77:b6:d1:af:0b:e3:5c:06:ea:98:e7:b5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 28 08:42:18 2026 GMT
            Not After : May 27 08:47:18 2027 GMT
        Subject: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:db:5e:67:d9:87:29:f1:32:a8:87:07:cf:
                    da:e4:f8:fe:7a:13:c1:46:61:46:e5:05:87:cb:22:
                    48:8b:e6:c5:9c:49:10:bc:26:26:96:0c:ee:2e:88:
                    cb:66:df:f6:79:ac:5d:dd:b3:01:6d:cc:fc:ca:01:
                    ef:a6:7d:2d:e4:47:da:9b:78:c9:e5:91:14:e8:eb:
                    e4:37:43:8f:68:6a:58:a4:13:9e:45:49:ea:89:c2:
                    c0:fe:1e:ff:5e:73:35:68:c5:ad:f5:9a:d8:10:88:
                    a4:a2:88:bd:ec:20:0f:b6:2e:c3:ac:95:3c:99:f6:
                    15:2e:d5:61:a1:c8:6f:4f:22:de:3d:46:8f:2a:79:
                    90:27:16:a8:9d:9f:97:b6:31:31:f6:62:ea:03:c3:
                    df:e0:00:a3:32:6a:1b:ac:80:ca:a8:e7:3d:35:f6:
                    2f:18:62:01:b2:ff:ac:db:60:40:37:ba:e6:c9:e8:
                    12:b3:37:6c:fb:09:9d:cd:1d:91:6e:fb:0a:6f:54:
                    2b:3d:38:f9:a1:11:99:20:38:ba:ca:0a:52:df:48:
                    8c:5a:4d:52:bd:5b:4d:e3:02:fa:7e:4f:93:e7:5b:
                    9b:91:4c:10:71:5d:88:a1:3c:1c:6a:20:12:39:87:
                    cc:48:9d:20:88:ad:5e:01:df:01:67:16:cb:9c:d2:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.188.0/22
                  163.53.56.0/22
                IPv6:
                  2404:f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56005

    Signature Algorithm: sha256WithRSAEncryption
         63:de:99:a9:27:ec:93:1e:e8:27:72:60:b1:ec:31:28:c3:ed:
         4a:69:43:ff:d9:1e:fa:b4:82:d7:f9:0a:59:85:42:91:01:e8:
         5c:f5:06:2d:08:4a:32:38:ae:aa:80:b1:c8:4a:b6:b4:26:67:
         d7:02:d0:66:96:c1:db:56:73:84:51:d9:60:13:35:69:58:14:
         f7:6a:f5:2d:0d:52:e4:96:81:93:77:86:c2:0d:2a:a9:f7:a4:
         02:06:29:c5:80:20:1f:bd:56:95:cf:c7:25:fe:d8:c7:40:35:
         92:ee:08:a9:5c:6a:00:ad:14:a8:68:b4:80:b3:f4:32:2a:e4:
         22:4b:30:38:7d:1b:e3:7b:15:ea:d6:5f:cc:05:1a:7c:f8:6c:
         01:7e:f0:d9:81:66:7d:a8:fe:79:22:38:f4:57:6f:f0:54:00:
         0c:53:de:b9:2a:49:91:7c:55:60:e7:71:f7:6c:ef:13:ea:d9:
         6c:14:b0:b4:e4:e3:ee:dc:22:86:fe:75:63:9c:da:51:0b:c9:
         79:00:27:95:cd:ec:6e:53:57:df:c9:09:b2:91:2d:bd:68:2a:
         98:93:5f:d6:94:2a:42:3f:8a:99:a3:8f:0a:3e:30:fe:47:cf:
         77:f2:01:47:f2:c9:cf:94:6f:92:60:73:d9:90:17:d6:7e:ba:
         ff:a5:25:4c
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUWWxJiG61qHe20a8L41wG6pjntVEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4NDIxOFoX
DTI3MDUyNzA4NDcxOFowMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERB
NTNCMERBQUQyMUNERDlBREIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/b215n2Ycp8TKohwfP2uT4/noTwUZhRuUFh8siSIvmxZxJELwmJpYM7i6I
y2bf9nmsXd2zAW3M/MoB76Z9LeRH2pt4yeWRFOjr5DdDj2hqWKQTnkVJ6onCwP4e
/15zNWjFrfWa2BCIpKKIvewgD7Yuw6yVPJn2FS7VYaHIb08i3j1Gjyp5kCcWqJ2f
l7YxMfZi6gPD3+AAozJqG6yAyqjnPTX2LxhiAbL/rNtgQDe65snoErM3bPsJnc0d
kW77Cm9UKz04+aERmSA4usoKUt9IjFpNUr1bTeMC+n5Pk+dbm5FMEHFdiKE8HGog
EjmHzEidIIitXgHfAWcWy5zSZZMCAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLyo4m6G3CekEN2lOw2q0hzdmtsTMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4MjMzMDM0NzE5MjMyMS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ3MTkyMzIx
LzAvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJnFrwDBAKjNTgwDQQCAAIwBwMFACQEDwAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDANrFMA0GCSqGSIb3DQEBCwUAA4IBAQBj3pmp
J+yTHugncmCx7DEow+1KaUP/2R76tILX+QpZhUKRAehc9QYtCEoyOK6qgLHISra0
JmfXAtBmlsHbVnOEUdlgEzVpWBT3avUtDVLkloGTd4bCDSqp96QCBinFgCAfvVaV
z8cl/tjHQDWS7gipXGoArRSoaLSAs/QyKuQiSzA4fRvjexXq1l/MBRp8+GwBfvDZ
gWZ9qP55Ijj0V2/wVAAMU965KkmRfFVg53H3bO8T6tlsFLC05OPu3CKG/nVjnNpR
C8l5ACeVzexuU1ffyQmykS29aCqYk1/WlCpCP4qZo48KPjD+R8938gFH8snPlG+S
YHPZkBfWfrr/pSVM
-----END CERTIFICATE-----
Generated at Fri May 29 21:12:53 2026 by rpki-client