
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
File: E44A11245B84A6269EEC23D7321F11971335E4E9.cer (raw, json)
Hash identifier: LEWZYtvruwZacrckDKKdoczhN4XNZacRDaH+Z407MKI=
Subject key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 65769518F97F17FD43FA39EBD42E3BEE4F847573
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 09 Apr 2026 01:20:19 +0000
Certificate not after: Thu 08 Apr 2027 01:25:19 +0000
Subordinate resources: AS: 151261
IP: 43.230.124.0/22
IP: 45.112.228.0 -- 45.112.235.255
IP: 45.113.16.0/23
IP: 103.52.96.0/21
IP: 160.202.148.0 -- 160.202.155.255
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:76:95:18:f9:7f:17:fd:43:fa:39:eb:d4:2e:3b:ee:4f:84:75:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 9 01:20:19 2026 GMT
Not After : Apr 8 01:25:19 2027 GMT
Subject: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:0f:13:93:d0:0f:33:50:16:90:2b:46:25:
8c:ce:fe:98:11:68:66:94:c1:61:5c:d1:09:07:81:
14:81:9e:00:d2:db:47:18:53:fd:ba:e5:3c:4e:d4:
98:e5:4d:30:10:5f:0a:ec:04:66:4f:c2:e3:fb:29:
7b:9b:e8:f8:1a:07:0c:99:38:fa:6a:41:e4:81:b7:
49:78:ee:58:54:20:39:47:98:bc:05:7d:be:2e:f6:
c3:9a:62:cd:ec:9e:d3:c6:9c:0f:ce:2f:0b:ad:f2:
2f:94:f1:a6:46:ed:63:24:cd:5f:f7:41:e3:33:a8:
63:c1:42:36:93:bc:d1:bd:d4:ec:45:87:d8:14:51:
b1:a8:76:35:5d:d8:02:71:4f:d4:0c:29:f0:df:2b:
e9:94:b2:be:1c:2a:e9:f5:fa:e0:40:11:0c:5e:9b:
0c:38:8d:77:4d:72:12:6f:15:b7:88:1b:05:dc:b1:
75:e3:78:b7:b4:33:10:c6:8d:44:ed:94:8a:1b:d6:
23:c3:55:a6:e5:32:1b:fa:83:7d:f6:73:ef:e4:12:
23:69:7e:14:ca:4a:6a:08:07:37:2a:af:f1:53:52:
2a:42:e0:32:46:e4:4c:c9:54:e6:b8:ff:94:8c:cc:
ff:cc:6a:fa:b1:6e:8e:60:91:cd:26:27:86:df:51:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.124.0/22
45.112.228.0-45.112.235.255
45.113.16.0/23
103.52.96.0/21
160.202.148.0-160.202.155.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151261
Signature Algorithm: sha256WithRSAEncryption
1f:b2:da:a3:1f:0f:91:bc:6e:38:fe:dd:fe:63:10:29:90:3b:
3f:7d:78:0c:6b:9a:21:1b:91:02:ae:0f:78:9c:03:69:79:04:
16:4e:f9:33:cf:fd:13:33:ef:37:a8:2b:d1:8e:3c:37:44:ff:
f6:cb:10:70:92:cc:db:96:cc:11:0e:d2:d2:43:ab:a3:48:35:
01:b7:b2:44:a0:27:98:d5:66:d2:62:a1:6e:53:ad:a1:d1:b6:
65:20:1e:a9:7f:d3:6a:1a:a6:91:11:85:c7:0d:d3:9d:a3:e4:
24:1a:be:e4:b7:07:b3:5a:40:ba:6e:d2:1c:2b:98:04:9a:38:
45:bc:6c:e9:78:69:53:18:62:22:34:b9:1a:02:9c:c3:81:dd:
26:4f:e5:39:2f:5b:c3:94:7d:5a:c5:b7:d6:82:7b:8b:ae:b0:
86:21:80:49:9d:e7:82:66:28:2a:b3:ba:06:76:15:ad:0f:e9:
7f:3e:b3:47:96:71:31:76:c0:e2:95:fa:06:d7:82:45:99:47:
e8:f8:29:fa:f2:98:36:c9:eb:39:4d:f5:97:17:4a:9c:63:45:
6b:fc:5f:df:1b:ee:5f:09:36:3c:82:5a:f0:86:bd:7d:ee:30:
eb:f1:34:2b:24:b4:80:c5:0e:e1:be:34:bf:bb:da:c8:59:21:
90:80:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:05:01 2026 by rpki-client