Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
File: D55490FB885552307A1D271E02513B4D423A90AE.cer (raw, json)
Hash identifier: RwAIOo5OEPuDASv6Nxa/GsyUQiJBSNN8t/r7hQlLP9o=
Subject key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 40D7BF31733C790566904832ED52542C211004C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 06:28:15 +0000
Certificate not after: Thu 27 May 2027 06:33:15 +0000
Subordinate resources: AS: 17442
IP: 43.243.232.0/22
IP: 45.250.12.0 -- 45.250.19.255
IP: 45.250.76.0 -- 45.250.99.255
IP: 45.250.104.0 -- 45.250.151.255
IP: 61.29.128.0/18
IP: 103.75.144.0/22
IP: 103.218.8.0 -- 103.218.23.255
IP: 103.218.28.0 -- 103.218.91.255
IP: 103.254.188.0/22
IP: 121.201.128.0/17
IP: 123.103.0.0 -- 123.103.23.255
IP: 123.103.28.0 -- 123.103.127.255
IP: 125.171.0.0/16
IP: 203.130.34.0 -- 203.130.63.255
IP: 203.212.0.0/20
IP: 210.185.192.0/18
IP: 210.192.96.0/19
IP: 211.156.176.0/20
IP: 220.242.0.0 -- 220.243.137.255
IP: 220.243.139.0 -- 220.243.255.255
IP: 2400:7680::/32
IP: 2406:cd80::/32
IP: 2406:ce80::/32
IP: 2406:cf80::/32
IP: 2406:d080::/32
IP: 2406:d180::/32
IP: 2406:d280::/32
IP: 2406:d380::/32
IP: 2406:d480::/32
IP: 2406:d580::/32
IP: 2406:d680::/32
IP: 2406:d780::/32
IP: 2406:d880::/32
IP: 2406:d980::/32
IP: 2406:db80::/32
IP: 2406:dc80::/32
IP: 2406:de80::/32
IP: 2406:df80::/32
IP: 2406:e080::/32
IP: 2406:e180::/32
IP: 2406:e380::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d7:bf:31:73:3c:79:05:66:90:48:32:ed:52:54:2c:21:10:04:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 06:28:15 2026 GMT
Not After : May 27 06:33:15 2027 GMT
Subject: CN=D55490FB885552307A1D271E02513B4D423A90AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:fc:85:08:cb:99:0b:32:3d:62:d7:34:d6:
1f:96:e2:f8:cd:28:b9:1f:43:34:a1:c0:c4:45:88:
c9:99:2b:71:91:b6:1e:9d:24:fa:20:73:fe:be:b6:
2a:a3:5a:5a:61:e2:52:a0:70:ab:e1:37:87:1d:75:
d1:60:74:fb:dc:ba:73:5a:4e:cf:5e:5a:4d:61:f3:
3c:4b:88:36:5d:10:f2:d4:f0:ee:2c:ca:30:b0:19:
51:0c:79:49:a6:61:e6:0f:51:7b:b9:10:23:19:59:
e0:e6:36:95:a5:1c:df:48:f9:b7:ca:00:57:bb:23:
17:e6:db:fc:7f:91:cd:17:d2:b8:ad:f2:6e:21:fe:
e9:55:59:c2:c3:25:da:e9:87:33:1d:5c:00:a9:8e:
3c:23:5d:09:45:7d:b1:2a:72:bd:3a:c2:b5:8f:2f:
f9:44:c0:5c:c2:3f:78:fb:6b:ee:ce:9c:06:7e:8f:
98:f4:ce:1d:6e:69:c1:d5:a0:68:56:5d:24:05:e7:
7a:7e:6d:90:f7:d8:f8:5e:ee:be:80:f4:04:b9:9f:
d8:eb:39:05:16:d2:13:b0:a1:43:ff:13:14:cf:df:
e8:f4:d6:7b:78:95:de:a3:91:10:05:e3:17:85:10:
5c:95:01:ff:de:3c:38:9c:36:20:7b:f0:c3:32:b6:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.243.232.0/22
45.250.12.0-45.250.19.255
45.250.76.0-45.250.99.255
45.250.104.0-45.250.151.255
61.29.128.0/18
103.75.144.0/22
103.218.8.0-103.218.23.255
103.218.28.0-103.218.91.255
103.254.188.0/22
121.201.128.0/17
123.103.0.0-123.103.23.255
123.103.28.0-123.103.127.255
125.171.0.0/16
203.130.34.0-203.130.63.255
203.212.0.0/20
210.185.192.0/18
210.192.96.0/19
211.156.176.0/20
220.242.0.0-220.243.137.255
220.243.139.0-220.243.255.255
IPv6:
2400:7680::/32
2406:cd80::/32
2406:ce80::/32
2406:cf80::/32
2406:d080::/32
2406:d180::/32
2406:d280::/32
2406:d380::/32
2406:d480::/32
2406:d580::/32
2406:d680::/32
2406:d780::/32
2406:d880::/32
2406:d980::/32
2406:db80::/32
2406:dc80::/32
2406:de80::/32
2406:df80::/32
2406:e080::/32
2406:e180::/32
2406:e380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17442
Signature Algorithm: sha256WithRSAEncryption
4c:05:31:8f:12:b5:5b:58:8a:4c:ab:30:59:49:aa:5a:0c:86:
06:59:06:ac:01:fc:94:2d:f9:f2:02:ef:6e:9b:4c:e2:f7:c9:
08:f1:f1:f6:f8:d6:2c:32:bf:5c:6c:80:97:86:08:40:30:9c:
0e:7e:27:0b:04:1a:1e:57:e4:ca:4a:fc:80:97:42:ba:f5:cc:
88:9a:f0:86:68:36:5d:e7:ad:52:ea:17:75:7c:8b:c9:58:0a:
e1:c5:2b:6b:b8:51:22:a1:e2:ea:2c:a4:6b:1c:e9:dc:b8:a5:
5c:11:02:37:1c:5e:88:bf:b0:5a:6e:82:f2:79:81:a6:6d:58:
ca:a4:28:71:d0:39:e6:93:76:35:c9:19:18:8b:1d:b4:d4:18:
1a:65:e2:ed:1e:eb:51:19:54:cd:4f:9a:b6:be:4d:fb:3e:d7:
c4:35:8b:c8:89:f9:c4:74:4e:50:71:38:df:95:ed:e1:5a:59:
d0:25:51:ca:99:9d:ad:85:a5:d0:b5:9d:90:41:ea:6c:cb:48:
2d:0b:d1:31:4f:9d:e8:e0:77:ef:e9:d3:1b:73:13:4c:6d:5b:
f1:22:f6:16:4e:8d:67:ee:35:dc:88:5c:5d:3a:ef:a5:bf:bd:
b7:5f:71:08:08:ef:82:d3:d4:b0:92:3f:9e:79:3d:44:cf:58:
24:e2:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:20 2026 by rpki-client