Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
File:                     EDAEF642B728F950499E8F90EDC704EB965E54A5.cer (raw, json)
Hash identifier:          xA8+HRmPKUd5KszwLUdNPAWS8I56mnHWOEBSw2hoOis=
Subject key identifier:   ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       6E9DFB175DE76E4B928DC812107E1EFEB5091094
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 29 May 2026 06:51:58 +0000
Certificate not after:    Fri 28 May 2027 06:56:58 +0000
Subordinate resources:    AS: 151264
                          IP: 124.14.56.0/21
                          IP: 163.223.124.0/23
                          IP: 220.115.248.0/21
                          IP: 2401:f320::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9d:fb:17:5d:e7:6e:4b:92:8d:c8:12:10:7e:1e:fe:b5:09:10:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 29 06:51:58 2026 GMT
            Not After : May 28 06:56:58 2027 GMT
        Subject: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:61:54:23:03:59:16:a5:79:49:c0:08:b8:
                    a0:12:f2:d6:51:bc:ec:15:c2:a1:a9:4a:a9:e7:93:
                    88:ee:aa:90:7a:10:22:98:be:7a:34:4b:07:4a:4d:
                    33:73:a2:cd:ae:2d:44:b5:98:92:53:19:0e:80:3b:
                    39:2a:0e:03:e1:06:40:52:c2:b2:a8:3e:bb:86:c7:
                    79:31:2b:91:3f:78:80:f6:58:cf:3a:45:46:0b:0e:
                    c4:05:b2:09:66:e6:7a:ff:1e:eb:57:fc:3e:ea:f4:
                    7c:22:ad:72:ee:bd:cf:8c:0b:82:7f:51:1c:26:46:
                    e6:5e:38:a9:ec:1e:9a:87:2f:4b:12:9a:70:5a:b2:
                    8b:52:e3:46:b3:de:e6:ff:a5:54:a9:21:49:03:76:
                    c8:74:67:1c:ef:8a:fe:42:98:9b:bc:60:24:83:bc:
                    59:cd:f6:3e:c8:6f:7c:19:92:45:47:43:be:13:5c:
                    f7:40:ef:c2:f2:67:c5:6e:3e:e7:6f:38:43:53:33:
                    87:25:c2:d7:7a:02:65:86:4e:02:d6:7d:dd:2b:5e:
                    9d:96:34:15:ee:ad:e9:67:8e:bc:2a:e4:24:0e:6f:
                    4a:2e:e6:81:d6:87:2d:c5:4b:f2:68:83:e2:e3:b9:
                    fb:db:06:7e:b0:8a:19:67:5c:ad:c4:45:59:a2:c3:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.14.56.0/21
                  163.223.124.0/23
                  220.115.248.0/21
                IPv6:
                  2401:f320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151264

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:fa:3b:e2:0c:3e:de:41:98:f4:80:1c:ba:c6:0b:b4:17:
         b1:1b:7b:76:79:b7:3f:a9:09:1b:f7:21:3b:ad:49:46:82:ec:
         a4:cb:56:fa:8b:a2:c7:ae:e3:4d:75:b4:ff:f1:f6:9e:f4:5b:
         e0:69:0d:d2:eb:73:a9:b7:de:ea:f9:0c:31:53:f4:02:ce:87:
         17:cc:d6:8e:67:e9:67:0d:38:b8:e2:1d:bb:5f:e5:fd:cc:6d:
         e8:6d:5c:ac:90:00:26:02:cb:a9:4f:8e:8d:55:8c:c6:2e:af:
         e5:69:e1:15:64:12:13:79:74:92:75:33:73:ff:af:be:4d:0d:
         f7:69:36:89:7d:c4:74:30:88:10:c1:7d:88:48:8e:41:c7:17:
         dc:9b:7e:3e:3c:b8:c0:e0:57:6e:30:26:bf:66:c8:39:e4:cf:
         df:01:64:ff:32:66:f9:19:5e:b8:0a:a5:cb:9e:88:86:b9:ce:
         7d:e5:12:21:e0:06:b1:1d:e2:86:f3:ac:0d:f0:d9:e5:9e:c5:
         5b:0a:01:c8:59:35:d3:45:99:42:ce:46:33:36:ba:e8:1e:49:
         83:ea:2b:1c:f7:46:d0:98:c7:d8:c5:62:3b:02:d6:0b:4e:a2:
         6c:13:53:1e:7a:dc:da:46:73:36:a2:43:f5:91:a4:3f:8d:62:
         a8:8d:f6:2a
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIUbp37F13nbkuSjcgSEH4e/rUJEJQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2NTE1OFoX
DTI3MDUyODA2NTY1OFowMzExMC8GA1UEAxMoRURBRUY2NDJCNzI4Rjk1MDQ5OUU4
RjkwRURDNzA0RUI5NjVFNTRBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMm6YVQjA1kWpXlJwAi4oBLy1lG87BXCoalKqeeTiO6qkHoQIpi+ejRLB0pN
M3Oiza4tRLWYklMZDoA7OSoOA+EGQFLCsqg+u4bHeTErkT94gPZYzzpFRgsOxAWy
CWbmev8e61f8Pur0fCKtcu69z4wLgn9RHCZG5l44qewemocvSxKacFqyi1LjRrPe
5v+lVKkhSQN2yHRnHO+K/kKYm7xgJIO8Wc32PshvfBmSRUdDvhNc90DvwvJnxW4+
5284Q1MzhyXC13oCZYZOAtZ93StenZY0Fe6t6WeOvCrkJA5vSi7mgdaHLcVL8miD
4uO5+9sGfrCKGWdcrcRFWaLDxsMCAwEAAaOCAtEwggLNMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFO2u9kK3KPlQSZ6PkO3HBOuWXlSlMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NjczNzU3NjAwMzUwMjA4MS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY2NzM3NTc2MDAzNTAyMDgx
LzAvRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5NjVFNTRBNS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAN8DjgDBAGj33wDBAPcc/gwDQQCAAIwBwMFACQB
8yAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAk7gMA0GCSqGSIb3DQEBCwUAA4IB
AQBH0fo74gw+3kGY9IAcusYLtBexG3t2ebc/qQkb9yE7rUlGguyky1b6i6LHruNN
dbT/8fae9FvgaQ3S63Opt97q+QwxU/QCzocXzNaOZ+lnDTi44h27X+X9zG3obVys
kAAmAsupT46NVYzGLq/laeEVZBITeXSSdTNz/6++TQ33aTaJfcR0MIgQwX2ISI5B
xxfcm34+PLjA4FduMCa/Zsg55M/fAWT/Mmb5GV64CqXLnoiGuc595RIh4AaxHeKG
86wN8NnlnsVbCgHIWTXTRZlCzkYzNrroHkmD6isc90bQmMfYxWI7AtYLTqJsE1Me
etzaRnM2okP1kaQ/jWKojfYq
-----END CERTIFICATE-----
Generated at Fri May 29 21:13:18 2026 by rpki-client