Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
File:                     E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer (raw, json)
Hash identifier:          4RfO74gbLTuKg/NU4BKLlrmtVfu+fC5QUTU6GCPXzro=
Subject key identifier:   E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       16365D9F08A8B2EFB194AF756AEF785C44C2029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 29 Jan 2026 06:51:13 +0000
Certificate not after:    Thu 28 Jan 2027 06:56:13 +0000
Subordinate resources:    AS: 146771
                          IP: 103.191.102.0/23
                          IP: 2400:95e0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:5d:9f:08:a8:b2:ef:b1:94:af:75:6a:ef:78:5c:44:c2:02:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 29 06:51:13 2026 GMT
            Not After : Jan 28 06:56:13 2027 GMT
        Subject: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:e8:8a:56:37:8e:26:c9:12:78:cd:3f:21:
                    e6:d9:41:91:3d:f1:de:f8:a1:16:a3:48:8c:ae:c4:
                    5a:b5:96:12:e1:d2:ac:5e:52:c0:db:06:8e:8b:f4:
                    9e:2d:92:40:9b:f3:c6:fe:09:34:27:2e:fb:86:3f:
                    c5:6a:d7:6b:f0:bb:24:95:a3:df:48:f2:3c:80:2a:
                    d5:7e:09:42:15:e5:4e:cd:bb:6d:eb:b7:28:ad:03:
                    4b:13:1a:cd:c7:4a:5a:77:f5:2a:ac:4c:7b:60:b4:
                    19:75:07:66:5c:0d:27:01:57:1e:cd:28:7e:82:57:
                    06:ca:f4:d5:f9:44:90:47:bb:8d:aa:6f:88:24:4f:
                    1a:fa:8f:c3:2c:51:68:41:00:24:74:b8:c7:dd:5c:
                    53:34:1d:70:f4:c3:b0:38:2b:98:9c:4c:9c:d7:bf:
                    90:19:9b:2a:bc:9e:62:2c:14:1a:7c:65:70:b3:4c:
                    64:ac:63:cd:c3:05:31:61:9f:27:33:e8:93:b8:a7:
                    c7:82:3e:7f:76:79:8d:40:29:fe:c3:dc:4e:03:7d:
                    7f:de:a5:6e:8e:6c:c3:0f:94:b0:e0:1b:0c:74:ee:
                    b6:ad:1c:e2:ae:03:98:fa:c1:67:84:d9:c3:72:f2:
                    b6:d1:c2:f4:0c:3f:a0:d8:01:0a:81:17:97:f8:da:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.102.0/23
                IPv6:
                  2400:95e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146771

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:bf:63:70:3a:2e:cb:37:f2:86:89:1b:e5:78:b9:71:5c:
         ba:db:31:01:70:30:45:ce:ab:29:c3:fd:14:5e:0f:68:fe:de:
         18:77:ab:9d:ed:f9:9b:c7:7c:ee:2c:a4:ca:73:51:ba:07:36:
         ed:ef:fa:ac:23:6e:75:a2:e9:c5:98:12:0e:19:ab:fc:37:da:
         7a:30:56:bd:02:b3:e8:f1:32:98:02:33:d2:12:78:1f:39:25:
         9d:5e:c9:72:f4:b5:3d:63:48:99:d6:f5:2f:d8:15:b0:36:1e:
         cb:41:fe:d5:09:d7:91:98:68:d0:dc:ae:a6:22:aa:a7:4e:ae:
         f9:93:d7:6f:1d:d7:42:9c:2d:a7:12:e5:00:19:ca:3d:0d:cc:
         d6:40:76:a8:04:c5:9f:74:7f:0b:6a:15:74:79:b6:ce:53:aa:
         83:b1:da:f8:75:a7:1a:97:40:fc:2d:ae:7f:01:fd:55:6a:a1:
         bd:db:ba:cf:5f:c7:40:36:55:35:62:92:c1:0b:c3:20:de:3f:
         14:4f:3b:89:5d:e0:e9:62:e8:1e:79:58:ba:87:03:99:50:88:
         3b:f0:0b:0f:7a:52:3f:46:90:23:9e:66:33:cf:bf:31:30:60:
         0a:73:96:03:ec:ca:51:e3:6c:78:d0:8b:2d:da:cb:bc:07:90:
         4c:c5:00:51
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIUFjZdnwiosu+xlK91au94XETCApowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDEyOTA2NTExM1oX
DTI3MDEyODA2NTYxM1owMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUx
Qzk2NEY3RjQ1MDlBOTYxNzdEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM/86IpWN44myRJ4zT8h5tlBkT3x3vihFqNIjK7EWrWWEuHSrF5SwNsGjov0
ni2SQJvzxv4JNCcu+4Y/xWrXa/C7JJWj30jyPIAq1X4JQhXlTs27beu3KK0DSxMa
zcdKWnf1KqxMe2C0GXUHZlwNJwFXHs0ofoJXBsr01flEkEe7japviCRPGvqPwyxR
aEEAJHS4x91cUzQdcPTDsDgrmJxMnNe/kBmbKryeYiwUGnxlcLNMZKxjzcMFMWGf
JzPok7inx4I+f3Z5jUAp/sPcTgN9f96lbo5sww+UsOAbDHTutq0c4q4DmPrBZ4TZ
w3LyttHC9Aw/oNgBCoEXl/japOsCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOGdrHpSgq8LRG4clk9/RQmpYXfTMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2OTE0ODkzOTU1NjQ4NzE2OS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY5MTQ4OTM5NTU2NDg3MTY5
LzAvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAFnv2YwDQQCAAIwBwMFACQAleAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAj1TMA0GCSqGSIb3DQEBCwUAA4IBAQCbTr9jcDouyzfy
hokb5Xi5cVy62zEBcDBFzqspw/0UXg9o/t4Yd6ud7fmbx3zuLKTKc1G6Bzbt7/qs
I251ounFmBIOGav8N9p6MFa9ArPo8TKYAjPSEngfOSWdXsly9LU9Y0iZ1vUv2BWw
Nh7LQf7VCdeRmGjQ3K6mIqqnTq75k9dvHddCnC2nEuUAGco9DczWQHaoBMWfdH8L
ahV0ebbOU6qDsdr4dacal0D8La5/Af1VaqG927rPX8dANlU1YpLBC8Mg3j8UTzuJ
XeDpYugeeVi6hwOZUIg78AsPelI/RpAjnmYzz78xMGAKc5YD7MpR42x40Ist2su8
B5BMxQBR
-----END CERTIFICATE-----
Generated at Mon Feb 23 00:55:29 2026 by rpki-client