Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
File:                     E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer (raw, json)
Hash identifier:          jOPiYwSQOtzawi+9769Vpa8kB+kj453G6WvY9aPZHyc=
Subject key identifier:   E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       5196BDBEE41C9F733B557E1AE5DDB07B1F2C00F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 29 May 2026 07:03:50 +0000
Certificate not after:    Fri 28 May 2027 07:08:50 +0000
Subordinate resources:    AS: 146771
                          IP: 103.191.102.0/23
                          IP: 2400:95e0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:96:bd:be:e4:1c:9f:73:3b:55:7e:1a:e5:dd:b0:7b:1f:2c:00:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 29 07:03:50 2026 GMT
            Not After : May 28 07:08:50 2027 GMT
        Subject: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:e8:8a:56:37:8e:26:c9:12:78:cd:3f:21:
                    e6:d9:41:91:3d:f1:de:f8:a1:16:a3:48:8c:ae:c4:
                    5a:b5:96:12:e1:d2:ac:5e:52:c0:db:06:8e:8b:f4:
                    9e:2d:92:40:9b:f3:c6:fe:09:34:27:2e:fb:86:3f:
                    c5:6a:d7:6b:f0:bb:24:95:a3:df:48:f2:3c:80:2a:
                    d5:7e:09:42:15:e5:4e:cd:bb:6d:eb:b7:28:ad:03:
                    4b:13:1a:cd:c7:4a:5a:77:f5:2a:ac:4c:7b:60:b4:
                    19:75:07:66:5c:0d:27:01:57:1e:cd:28:7e:82:57:
                    06:ca:f4:d5:f9:44:90:47:bb:8d:aa:6f:88:24:4f:
                    1a:fa:8f:c3:2c:51:68:41:00:24:74:b8:c7:dd:5c:
                    53:34:1d:70:f4:c3:b0:38:2b:98:9c:4c:9c:d7:bf:
                    90:19:9b:2a:bc:9e:62:2c:14:1a:7c:65:70:b3:4c:
                    64:ac:63:cd:c3:05:31:61:9f:27:33:e8:93:b8:a7:
                    c7:82:3e:7f:76:79:8d:40:29:fe:c3:dc:4e:03:7d:
                    7f:de:a5:6e:8e:6c:c3:0f:94:b0:e0:1b:0c:74:ee:
                    b6:ad:1c:e2:ae:03:98:fa:c1:67:84:d9:c3:72:f2:
                    b6:d1:c2:f4:0c:3f:a0:d8:01:0a:81:17:97:f8:da:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.102.0/23
                IPv6:
                  2400:95e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146771

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:54:87:88:95:d6:a6:24:7e:c3:92:f0:3c:31:0e:2a:cb:
         be:4b:9e:9d:5a:3c:45:f3:d7:d2:11:70:59:f4:f1:5e:7e:fc:
         75:5f:c4:cb:94:c3:ba:4a:2d:59:79:29:8f:e3:fc:98:7c:84:
         55:d0:74:fb:06:f6:87:d9:00:62:fd:43:d0:0d:06:9b:ce:e8:
         6f:df:b7:06:f6:e4:56:83:b6:87:e1:c0:e0:3b:d8:8e:cb:f7:
         90:40:d9:24:c5:d4:df:70:4c:77:ab:4e:d4:ec:d7:7a:96:5c:
         ee:c6:64:66:92:71:db:85:22:e6:a8:ee:5e:16:52:46:93:5e:
         58:ff:bd:a6:2a:9c:92:97:cf:6c:a7:23:c5:8e:ed:07:04:b8:
         f7:fc:83:cd:bc:0b:68:28:ce:c0:d5:41:01:e3:99:50:4d:e0:
         78:cb:77:06:18:66:fb:7c:18:bf:59:c8:d9:2a:25:19:e5:17:
         84:aa:33:dd:82:f7:90:b9:05:df:19:2f:ec:9f:6c:58:23:15:
         87:30:19:c0:b6:b0:77:71:5f:42:20:9c:b6:7d:e3:05:ba:dd:
         1c:81:1d:e4:11:8e:5c:05:55:e8:af:a1:81:14:dc:40:db:66:
         38:b6:a9:b8:60:91:40:ff:f6:1e:0e:2f:eb:57:41:44:52:4b:
         e2:f2:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:13:51 2026 by rpki-client