
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
File: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer (raw, json)
Hash identifier: CSuEa4lkH606njkyDxarBFxi3fcJZgCa8lYyHbpMc0U=
Subject key identifier: 0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0CECBFE1D360EB28B78ED9D00A5518F8E06A0487
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 05 Jun 2026 01:46:52 +0000
Certificate not after: Fri 04 Jun 2027 01:51:52 +0000
Subordinate resources: AS: 146802
IP: 103.12.98.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ec:bf:e1:d3:60:eb:28:b7:8e:d9:d0:0a:55:18:f8:e0:6a:04:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 5 01:46:52 2026 GMT
Not After : Jun 4 01:51:52 2027 GMT
Subject: CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:33:98:86:c4:9f:b4:10:55:7a:2a:99:e3:
8f:d0:a0:7b:96:d7:06:ee:41:f7:0c:ca:42:80:67:
7c:25:06:9e:ab:a6:f7:24:38:14:81:78:87:ea:d7:
a5:ff:22:4d:96:46:44:69:1d:b4:a9:4e:26:6c:cb:
05:c2:42:90:b4:13:6d:5c:0a:32:a9:f5:4a:1c:ae:
e8:c9:07:2e:6a:3e:94:17:49:1c:98:d5:b0:02:bb:
ff:6a:73:e7:85:47:86:67:e0:70:a8:e4:f0:be:52:
61:37:4c:97:c9:d0:2d:a7:c7:94:18:6c:49:b1:58:
72:ab:19:ee:03:ff:81:60:c9:27:24:be:44:5c:47:
28:e8:d8:1e:b2:45:fc:00:1f:8d:15:32:e8:fb:58:
6e:98:93:68:26:b1:ee:18:c6:df:6c:9b:13:55:80:
fa:79:fb:d2:c5:6f:03:bb:b9:1b:8f:0a:cb:ef:45:
c5:4b:0d:f3:33:d4:05:44:4a:63:08:b6:a9:c3:59:
52:21:25:14:14:ea:40:99:69:af:85:81:aa:59:15:
c9:d0:ee:32:7f:59:63:1c:ca:2c:51:64:24:83:98:
16:5c:0f:7b:0c:dd:d2:e2:b7:9a:fe:05:f9:7a:20:
52:81:a8:f2:cd:33:fa:ac:5c:87:f6:e3:33:00:36:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.12.98.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146802
Signature Algorithm: sha256WithRSAEncryption
69:a3:59:8a:0b:2e:d6:e7:40:3f:61:b2:63:d4:4c:db:39:d3:
3b:a8:4c:0f:c0:ac:cc:b5:43:68:1c:94:08:f4:1e:94:53:bd:
19:dc:e2:46:83:26:32:e6:72:4d:48:30:bf:c7:17:20:96:83:
67:e8:c1:c7:3e:8c:a1:f2:fa:8a:b4:3d:02:fa:90:55:0d:44:
11:4c:af:88:fb:6e:9c:83:ff:71:48:c7:91:cf:66:9e:c9:92:
a0:af:28:72:66:76:18:c5:ee:b0:a8:71:61:0b:d8:ff:64:07:
ed:eb:4c:41:24:ca:14:0b:f6:33:bb:48:61:06:d0:32:3f:cb:
69:d6:2e:1a:3e:0c:cf:b4:d8:c4:2b:0d:d3:bd:81:c7:1d:5f:
1e:e9:16:cf:7d:19:8f:4b:34:28:d4:fc:53:26:27:d7:53:30:
d6:b4:bb:e7:32:c5:8d:cc:dc:41:b2:ba:2a:02:ac:6d:0c:b3:
8e:50:2b:f9:a8:1e:dc:f5:68:ab:7e:6f:4b:18:dd:e8:6a:35:
ee:31:0b:37:ed:89:b7:cc:6d:b7:08:ca:b0:78:d5:34:63:51:
b7:fa:64:ed:52:05:37:55:67:ba:03:57:1a:ad:a1:9a:5f:32:
fd:23:8a:f9:86:e0:1d:d1:db:cf:66:f7:3a:a1:2e:94:e8:f6:
4e:64:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:40:25 2026 by rpki-client