Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
File: E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer (raw, json)
Hash identifier: p7RwW4Q5TzLuOwefcf5XHgFwrz8hIhpw4dFYLREDdlM=
Subject key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 2BA3B1DDA94A6828DBFC615704EB11F9CCA1B5CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 23 Apr 2026 01:36:08 +0000
Certificate not after: Thu 22 Apr 2027 01:41:08 +0000
Subordinate resources: AS: 58844
IP: 103.64.24.0/21
IP: 103.64.140.0 -- 103.64.147.255
IP: 103.64.152.0/22
IP: 103.64.208.0/22
IP: 103.67.100.0 -- 103.67.151.255
IP: 103.67.212.0/22
IP: 103.222.112.0 -- 103.222.143.255
IP: 103.222.216.0 -- 103.222.235.255
IP: 103.222.240.0/22
IP: 103.223.16.0/20
IP: 103.223.80.0 -- 103.223.103.255
IP: 103.223.124.0/22
IP: 103.251.128.0/22
IP: 121.46.0.0/18
IP: 121.46.128.0/18
IP: 2406:5880::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 11:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a3:b1:dd:a9:4a:68:28:db:fc:61:57:04:eb:11:f9:cc:a1:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 23 01:36:08 2026 GMT
Not After : Apr 22 01:41:08 2027 GMT
Subject: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:63:5d:34:c8:d1:a9:b1:73:21:45:a0:6c:
4a:e1:75:50:96:65:ba:04:b4:e8:3d:f7:0e:bc:68:
b6:0c:b8:10:94:11:54:6c:03:e7:b2:5c:77:b0:62:
c4:37:4d:ae:b6:78:2b:f6:dc:c9:15:fd:59:1a:e4:
ac:2d:0d:76:a3:c4:9b:7d:a3:88:4a:32:f1:86:19:
1b:9a:1c:72:1a:e7:35:a6:e0:21:27:0a:9a:fa:04:
f8:f7:b4:d5:61:73:59:08:b4:2b:9a:b9:03:a3:d2:
d0:aa:c0:43:59:c0:7f:0f:b4:c2:39:b1:24:36:33:
16:14:fc:48:4b:56:6e:c3:96:11:cd:c1:d4:f9:b3:
2d:7e:93:6e:27:02:fe:f3:3c:47:f8:4f:4b:01:e5:
c9:04:62:2b:bf:98:35:ba:16:1e:1e:b3:06:63:76:
fe:d7:de:7a:81:a2:8b:6f:a4:63:ec:14:0c:ec:45:
f4:b8:b4:21:e8:38:17:e3:55:11:33:cd:e0:96:5b:
ab:d1:35:6a:36:20:4d:15:58:79:4c:b0:4a:36:ce:
32:ca:20:f4:ac:99:f8:e2:dd:ff:f7:bd:a0:6f:8a:
46:fd:db:a0:17:4a:22:34:12:99:29:85:84:1c:bc:
1f:33:c3:e7:26:82:8f:3a:ad:b2:1e:98:e9:61:81:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.64.24.0/21
103.64.140.0-103.64.147.255
103.64.152.0/22
103.64.208.0/22
103.67.100.0-103.67.151.255
103.67.212.0/22
103.222.112.0-103.222.143.255
103.222.216.0-103.222.235.255
103.222.240.0/22
103.223.16.0/20
103.223.80.0-103.223.103.255
103.223.124.0/22
103.251.128.0/22
121.46.0.0/18
121.46.128.0/18
IPv6:
2406:5880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58844
Signature Algorithm: sha256WithRSAEncryption
67:e8:e8:2a:6c:df:06:f4:1b:b6:c3:49:d4:7e:36:b6:a4:e5:
d8:36:d8:e1:70:02:38:ef:29:f1:5b:7d:b3:2d:c9:2a:0a:8f:
4e:ae:41:e6:cf:78:b2:7e:1d:e1:c0:d8:1b:3e:45:de:17:47:
69:76:02:32:22:71:79:19:a9:88:a7:8e:c2:be:45:12:62:ed:
c3:38:ba:a1:23:44:ab:4f:2e:03:f8:5b:0a:08:62:e3:ec:bf:
d9:93:33:bb:63:fc:ef:0b:57:52:7a:9c:6f:02:f1:73:ac:37:
42:f6:e7:7e:2a:e8:64:9c:a9:4b:f9:6a:4b:5b:95:20:97:1e:
59:7e:3b:be:2d:18:36:f3:62:78:16:21:fe:1e:73:f4:d7:a9:
39:9a:fd:9a:88:b6:d1:ae:e1:44:ea:f0:d5:e7:15:6b:92:b0:
e5:00:d0:0f:8a:7a:26:ce:77:be:ee:dc:91:b6:49:c9:71:d3:
02:15:bd:cd:61:ad:4c:50:81:e5:bf:cf:c2:c7:21:e8:1c:e0:
7a:cc:17:d5:e7:e4:a4:81:f4:a1:3f:d0:e9:bb:af:cc:59:e7:
bc:61:84:5e:4e:34:35:dc:e8:d2:4a:b4:0b:16:0b:dc:0a:04:
c8:38:21:1b:12:fa:da:dd:08:1f:65:1d:f1:32:95:eb:c2:47:
c7:11:70:cc
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUK6Ox3alKaCjb/GFXBOsR+cyhtc4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMzAxMzYwOFoX
DTI3MDQyMjAxNDEwOFowMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3
NDk5ODM3QTQxNTVDMUE4NjlFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN7qY100yNGpsXMhRaBsSuF1UJZlugS06D33Drxotgy4EJQRVGwD57Jcd7Bi
xDdNrrZ4K/bcyRX9WRrkrC0NdqPEm32jiEoy8YYZG5occhrnNabgIScKmvoE+Pe0
1WFzWQi0K5q5A6PS0KrAQ1nAfw+0wjmxJDYzFhT8SEtWbsOWEc3B1PmzLX6TbicC
/vM8R/hPSwHlyQRiK7+YNboWHh6zBmN2/tfeeoGii2+kY+wUDOxF9Li0Ieg4F+NV
ETPN4JZbq9E1ajYgTRVYeUywSjbOMsog9KyZ+OLd//e9oG+KRv3boBdKIjQSmSmF
hBy8HzPD5yaCjzqtsh6Y6WGBq08CAwEAAaOCA0YwggNCMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOPgx3TjsrxYeQ50mYN6QVXBqGnmMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2
LzAvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwga4GCCsGAQUF
BwEHAQH/BIGeMIGbMIGJBAIAATCBggMEA2dAGDAMAwQCZ0CMAwQCZ0CQAwQCZ0CY
AwQCZ0DQMAwDBAJnQ2QDBANnQ5ADBAJnQ9QwDAMEBGfecAMEBGfegDAMAwQDZ97Y
AwQCZ97oAwQCZ97wAwQEZ98QMAwDBARn31ADBANn32ADBAJn33wDBAJn+4ADBAZ5
LgADBAZ5LoAwDQQCAAIwBwMFACQGWIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AOXcMA0GCSqGSIb3DQEBCwUAA4IBAQBn6OgqbN8G9Bu2w0nUfja2pOXYNtjhcAI4
7ynxW32zLckqCo9OrkHmz3iyfh3hwNgbPkXeF0dpdgIyInF5GamIp47CvkUSYu3D
OLqhI0SrTy4D+FsKCGLj7L/ZkzO7Y/zvC1dSepxvAvFzrDdC9ud+KuhknKlL+WpL
W5Uglx5Zfju+LRg282J4FiH+HnP016k5mv2aiLbRruFE6vDV5xVrkrDlANAPinom
zne+7tyRtknJcdMCFb3NYa1MUIHlv8/CxyHoHOB6zBfV5+SkgfShP9Dpu6/MWee8
YYReTjQ13OjSSrQLFgvcCgTIOCEbEvra3QgfZR3xMpXrwkfHEXDM
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:03:22 2026 by rpki-client