Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
File: 20CAC8E70B5CB3094E47FF051623A98578C1E315.cer (raw, json)
Hash identifier: 1554zD4UiIKN+qxzbROZGUBm5I9aSmbsIeEtPbYmWBU=
Subject key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 38379275EB1F74DD5C6FFCF9EA9F24C1E953A62A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 13 Apr 2026 08:05:20 +0000
Certificate not after: Mon 12 Apr 2027 08:10:20 +0000
Subordinate resources: AS: 58832
IP: 43.247.176.0/20
IP: 43.254.136.0/22
IP: 101.239.0.0/16
IP: 103.227.136.0/22
IP: 103.237.248.0 -- 103.238.7.255
IP: 103.238.160.0/22
IP: 103.242.172.0/22
IP: 114.112.96.0 -- 114.112.107.255
IP: 150.242.232.0/22
IP: 150.242.248.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:37:92:75:eb:1f:74:dd:5c:6f:fc:f9:ea:9f:24:c1:e9:53:a6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 13 08:05:20 2026 GMT
Not After : Apr 12 08:10:20 2027 GMT
Subject: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:24:2c:cd:ad:c6:56:aa:a0:76:46:3c:c5:
e4:b7:be:0d:c9:cf:69:26:fd:d9:e6:48:9e:1e:b7:
7f:bb:a5:54:88:a9:8d:c3:cc:25:39:4f:be:46:2f:
0d:81:c7:6b:d2:fd:e2:70:56:85:3d:4b:40:d1:0d:
7b:ab:a5:19:59:e0:f8:0a:c6:fc:87:25:24:33:cd:
43:3f:dc:07:f7:99:67:a2:5f:91:e9:7e:1e:f5:36:
d6:73:77:84:2d:3b:4f:52:3f:cc:fb:30:34:55:cb:
ae:f7:c9:6f:08:9a:0f:bc:48:ba:8c:54:b3:71:11:
f4:9c:cb:4c:57:bc:de:18:5a:4f:49:5b:fa:67:e5:
e3:67:59:69:7d:0b:6b:5f:07:ef:b9:cb:c5:4a:96:
ac:9d:4a:ac:05:5a:d8:ab:1d:6f:b4:56:69:f4:22:
23:f7:3b:aa:06:72:24:b3:0f:5b:f4:e4:d4:32:3d:
a0:d6:30:e6:2d:3b:fd:bb:33:1a:af:23:fb:88:8f:
7c:e8:64:9d:2b:d8:7d:59:22:97:c8:99:7f:05:46:
c1:a5:e3:45:60:c1:a8:8b:86:7e:b6:06:04:5f:f4:
9e:8d:57:f4:ab:96:75:b0:a3:04:2a:58:cc:0f:25:
e4:71:9a:ca:c7:35:4a:64:dd:a6:2f:5d:01:86:b0:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.176.0/20
43.254.136.0/22
101.239.0.0/16
103.227.136.0/22
103.237.248.0-103.238.7.255
103.238.160.0/22
103.242.172.0/22
114.112.96.0-114.112.107.255
150.242.232.0/22
150.242.248.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58832
Signature Algorithm: sha256WithRSAEncryption
98:45:a2:6b:bb:6b:85:cd:6c:b1:d8:81:34:9f:2c:c4:7b:69:
8c:8d:c6:8d:38:75:12:42:50:98:20:66:a6:17:17:c9:f5:b8:
84:b5:79:e0:a7:fb:03:6f:b8:d4:31:f1:be:34:70:cc:49:b3:
02:62:71:dd:29:64:66:67:cb:93:3f:07:27:3d:70:31:31:ba:
b5:0b:4f:15:15:68:4a:9a:e8:73:02:9f:06:8d:bc:22:71:83:
dc:d6:43:6b:45:99:7a:d0:4d:2e:57:21:68:42:7f:71:56:ee:
86:90:06:21:31:f4:27:57:b8:5e:4d:2f:f1:bc:95:69:a5:ff:
3b:c2:b5:2e:15:9b:46:8c:56:df:0d:f5:15:83:3c:75:a1:67:
e5:88:69:fe:b0:d2:30:16:3f:11:92:89:5f:e1:68:69:07:43:
e3:4f:7f:bc:0f:c4:58:18:9b:b4:f1:10:60:e8:dc:26:84:bf:
67:9b:dd:a8:4b:75:c6:2b:6f:9a:8e:84:7d:92:4a:63:5b:dc:
ca:67:2b:46:5d:d2:b6:9d:c4:51:ed:72:1e:75:34:94:fa:de:
63:b2:08:14:69:27:ce:44:0a:2a:41:4d:87:88:8b:88:4d:d8:
0f:89:53:63:39:b2:bf:9f:83:40:81:8b:7a:1c:a9:6d:f8:f3:
45:d5:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:29 2026 by rpki-client