Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
File: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer (raw, json)
Hash identifier: pzqPsxEF3vO1hbffbcxWnUbo89Pw5z1RJVeTG72hCv4=
Subject key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 7A479835E1CB5E6C797155F3FF7F5CC3B2B6A045
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 14 Apr 2026 02:42:35 +0000
Certificate not after: Tue 13 Apr 2027 02:47:35 +0000
Subordinate resources: AS: 9308
AS: 9802
AS: 17428
AS: 18244
AS: 24133
AS: 24140
AS: 24418
AS: 59020
IP: 42.158.0.0/16
IP: 58.82.0.0/17
IP: 58.83.0.0/17
IP: 59.151.0.0/17
IP: 59.191.0.0/17
IP: 101.134.0.0/15
IP: 103.247.168.0/22
IP: 118.30.0.0/16
IP: 118.195.0.0/17
IP: 120.132.128.0 -- 120.135.255.255
IP: 123.61.0.0/16
IP: 124.250.0.0/15
IP: 182.174.0.0 -- 182.175.243.255
IP: 183.84.0.0/15
IP: 203.196.0.0/21
IP: 210.77.128.0/19
IP: 211.99.160.0 -- 211.99.223.255
IP: 211.148.17.0 -- 211.148.25.255
IP: 211.148.27.0 -- 211.148.31.255
IP: 211.151.0.0 -- 211.152.31.255
IP: 211.152.64.0/18
IP: 2403:a200::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:47:98:35:e1:cb:5e:6c:79:71:55:f3:ff:7f:5c:c3:b2:b6:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 14 02:42:35 2026 GMT
Not After : Apr 13 02:47:35 2027 GMT
Subject: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:83:6a:f2:2e:b4:02:e8:02:9d:32:0e:1b:
43:b6:53:cf:bd:6a:96:70:d0:fe:ca:58:98:c6:e9:
bf:f0:84:98:84:cc:fa:be:97:b3:4b:50:5a:f9:dc:
5a:50:66:c3:d2:ae:e1:92:c1:cf:81:09:37:c9:78:
c6:8b:f3:77:5f:79:99:92:14:8d:ae:c4:55:ad:c5:
06:dd:b7:2d:41:b0:42:03:f6:fb:e0:9f:50:b3:61:
cd:d6:95:6f:0a:c4:fd:16:9d:69:5b:f0:81:b7:6c:
f4:20:47:6d:c8:26:af:1c:37:60:59:7f:8c:e7:fa:
8d:ba:16:f5:29:6d:f6:6c:21:2c:87:45:0a:ee:51:
9a:78:1d:ea:ea:22:73:d9:e4:ab:d3:4b:e2:c7:2f:
69:ad:4e:e5:34:79:b9:58:cc:9a:6f:f7:0c:09:2d:
9b:4c:b2:d4:57:1e:d9:df:a0:50:32:15:18:5a:a2:
11:e1:d1:70:43:29:32:40:8e:34:ef:2f:dc:37:f4:
d2:b8:f6:17:79:c9:12:e2:64:e8:6b:6f:bf:a3:08:
2f:38:f8:eb:41:46:bb:1c:a1:ed:a9:a9:2a:77:22:
aa:a8:a6:49:4e:fb:d0:7c:53:42:c0:7b:aa:b6:df:
ed:5e:eb:fa:36:33:2d:3d:a0:1e:44:09:d7:80:57:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.158.0.0/16
58.82.0.0/17
58.83.0.0/17
59.151.0.0/17
59.191.0.0/17
101.134.0.0/15
103.247.168.0/22
118.30.0.0/16
118.195.0.0/17
120.132.128.0-120.135.255.255
123.61.0.0/16
124.250.0.0/15
182.174.0.0-182.175.243.255
183.84.0.0/15
203.196.0.0/21
210.77.128.0/19
211.99.160.0-211.99.223.255
211.148.17.0-211.148.25.255
211.148.27.0-211.148.31.255
211.151.0.0-211.152.31.255
211.152.64.0/18
IPv6:
2403:a200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9308
9802
17428
18244
24133
24140
24418
59020
Signature Algorithm: sha256WithRSAEncryption
28:70:b1:4e:6d:8c:ae:f9:77:f8:16:0c:6e:ef:7d:c7:fc:e1:
f6:6c:9b:56:1e:c1:5a:67:70:1b:fd:89:94:8f:e0:6f:c8:17:
41:f5:57:d4:61:9d:aa:86:18:57:c0:81:26:0d:30:e8:02:1e:
21:f4:c9:e4:58:46:57:82:06:48:62:84:3f:d2:5e:47:9a:c2:
7f:f4:1e:55:59:04:3e:ae:9c:e1:a9:f0:59:78:ab:de:2e:f4:
c8:75:d4:6b:11:78:18:42:4c:94:f3:a7:16:cf:38:78:11:59:
16:dd:76:a3:e3:3b:0a:bc:3d:a3:17:22:2e:ac:02:7e:c2:48:
48:5b:e4:f7:8c:19:4b:7f:17:01:a0:36:9c:09:e4:cb:aa:be:
96:c4:69:af:c5:67:1c:ec:a9:58:49:b6:35:40:78:5b:17:76:
f9:00:91:87:fc:58:c3:29:e7:85:31:b4:51:e3:d6:36:fc:27:
fb:ae:a1:a8:f3:92:8c:2d:66:e2:99:27:ec:77:0f:c5:ee:05:
7d:d8:fe:7c:ca:43:1b:31:09:36:4c:dc:72:d9:e0:fe:7f:02:
fb:82:86:0e:f8:0c:f9:7c:2e:ae:37:ca:26:79:50:63:b5:dc:
ba:8b:39:97:a8:d0:9c:30:f7:2f:13:ec:eb:df:67:49:b5:89:
79:2c:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:57 2026 by rpki-client