Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
File: C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer (raw, json)
Hash identifier: tGTKb1KDPbFb9sgC98Syk6BTFAWwcAut2ZMozs0N4yM=
Subject key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 175994795D21C85227DECEADACAB321E781E7B90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 13 Apr 2026 06:41:33 +0000
Certificate not after: Mon 12 Apr 2027 06:46:33 +0000
Subordinate resources: AS: 58993
IP: 27.0.160.0/22
IP: 43.228.116.0/22
IP: 43.243.12.0/22
IP: 43.254.88.0/22
IP: 103.82.224.0/22
IP: 103.208.12.0/22
IP: 103.233.52.0/22
IP: 103.238.132.0/22
IP: 182.50.112.0/20
IP: 223.223.192.0/20
IP: 2404:1c80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 13:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:59:94:79:5d:21:c8:52:27:de:ce:ad:ac:ab:32:1e:78:1e:7b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 13 06:41:33 2026 GMT
Not After : Apr 12 06:46:33 2027 GMT
Subject: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:e2:95:47:11:cc:1e:09:ed:d8:22:a9:13:
67:9b:26:7b:95:e6:0a:3b:01:6e:38:55:58:0a:62:
99:e9:95:0a:fa:e1:55:d1:14:53:c7:03:b9:87:79:
fd:64:d0:82:b0:d7:2d:88:a4:47:54:e7:b6:3b:be:
96:ed:b8:52:da:55:6f:5d:ff:ad:e6:29:ac:af:3b:
6c:b2:1e:85:ec:c6:01:fb:a4:67:d2:c0:de:2e:dd:
86:91:7c:72:a9:b3:9b:51:fd:f2:f1:ef:f0:92:56:
dd:9d:4d:ec:61:07:67:c9:bc:25:5d:88:1a:d8:8f:
8c:48:fc:24:51:2c:c9:b0:0c:c9:9a:ce:4a:ec:a0:
04:75:b2:82:37:16:ee:f6:3f:34:3d:33:b5:78:84:
ff:f1:8a:6e:5d:49:18:35:db:50:cf:08:9d:3b:44:
2b:30:e4:71:ce:c5:a2:08:79:f1:d7:9a:83:89:f2:
f6:d3:1e:1e:90:4d:33:5d:37:6b:8f:f0:44:fd:8a:
e6:0c:76:e0:21:af:d2:58:c1:28:96:27:e7:ed:11:
b4:c0:ad:5f:82:88:10:22:22:fa:4a:42:45:ed:1c:
30:47:db:e4:58:f9:47:5f:a8:f4:be:04:3a:dd:b1:
c4:1c:ed:a3:b7:ed:d2:f0:2b:54:bb:ab:3a:0a:97:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.160.0/22
43.228.116.0/22
43.243.12.0/22
43.254.88.0/22
103.82.224.0/22
103.208.12.0/22
103.233.52.0/22
103.238.132.0/22
182.50.112.0/20
223.223.192.0/20
IPv6:
2404:1c80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58993
Signature Algorithm: sha256WithRSAEncryption
08:b4:0e:8e:88:af:5a:33:3f:96:ae:69:e2:b0:19:33:ab:7c:
1e:1f:fe:54:8d:4a:b4:83:a3:54:60:6a:cb:88:16:90:d4:6b:
d7:f0:b8:bb:f3:95:36:59:ac:ef:2e:13:5f:3f:07:23:9a:e4:
dc:87:88:df:c3:ca:86:2b:cc:95:78:f9:87:72:9d:08:d7:26:
64:98:56:6b:34:15:4b:81:a2:d1:1f:d8:44:be:9c:68:84:4e:
ea:86:06:f4:ca:dd:db:89:7e:f7:e2:e8:ff:47:f1:eb:8a:4c:
44:b1:66:2a:70:25:e1:32:0d:b8:90:04:96:36:1d:1a:6c:fb:
c9:98:c8:5f:41:fa:59:35:9d:50:5f:7c:6a:7d:0a:81:9b:a6:
11:e0:7c:82:bf:2f:a0:6a:35:73:85:10:8a:e4:bf:e2:4c:23:
61:54:07:59:db:c3:73:07:1d:00:be:43:88:e8:94:fa:e5:1c:
ce:19:48:01:be:41:78:37:5e:a7:db:b4:c3:3d:a8:50:7e:a9:
42:6e:71:b3:17:eb:3c:d3:55:b7:da:ca:b8:db:d7:0d:14:c2:
c9:89:c5:5f:c4:f6:9b:30:e8:19:26:ee:a5:5a:36:cd:86:2c:
3a:3e:6b:a9:75:33:a1:cb:7b:bc:99:58:0d:4b:c8:ac:67:a4:
64:4b:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 16:37:45 2026 by rpki-client