Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
File: 5ACF72DA32919503D15480832BA57EB063AE113B.cer (raw, json)
Hash identifier: I1AYm9GMhgI9mkjrcQToxkvPzTcIY4SCcOzE6I62r2s=
Subject key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5E331A9A0DC0DD3350B54BA4366F396B492FA290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 14 Apr 2026 05:10:03 +0000
Certificate not after: Tue 13 Apr 2027 05:15:03 +0000
Subordinate resources: AS: 59037
AS: 137803
IP: 43.225.180.0/22
IP: 43.227.152.0 -- 43.227.156.255
IP: 43.227.158.0 -- 43.227.183.255
IP: 43.227.192.0/19
IP: 43.228.0.0 -- 43.228.6.255
IP: 43.228.8.0 -- 43.228.31.255
IP: 43.228.40.0 -- 43.228.71.255
IP: 43.230.72.0/22
IP: 103.46.12.0 -- 103.46.68.255
IP: 103.46.72.0 -- 103.46.139.255
IP: 103.49.108.0/22
IP: 2403:1f80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:33:1a:9a:0d:c0:dd:33:50:b5:4b:a4:36:6f:39:6b:49:2f:a2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 14 05:10:03 2026 GMT
Not After : Apr 13 05:15:03 2027 GMT
Subject: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:6a:ae:fe:25:97:0a:a2:91:6e:0e:20:cb:
f7:ef:0c:07:4a:be:c5:cc:6a:c6:95:3f:0b:21:bc:
3d:fa:ef:fd:f7:06:95:46:16:48:01:14:ff:8d:98:
63:d0:c1:1a:5c:1f:5d:99:f2:d7:a6:28:e8:3b:6b:
da:05:f3:91:58:3a:0d:14:af:6f:e4:36:09:f5:f8:
93:3a:d0:12:94:e5:9d:8d:b7:c5:8a:ac:b4:98:9d:
eb:5b:26:b4:a0:20:12:9d:48:04:8b:72:15:7b:53:
7f:9d:4f:59:17:c7:59:d6:2a:ae:73:4e:76:d2:9c:
8f:c4:08:bb:62:df:da:21:2a:6e:58:e7:66:96:60:
ea:87:70:af:4c:35:c3:90:76:24:02:e2:b6:57:c5:
c4:30:59:67:12:84:cd:8b:c6:84:45:15:3a:a5:7d:
23:05:b9:5d:45:f8:38:33:9f:6a:a2:7e:82:68:a1:
ca:66:ab:b0:e4:81:36:2d:ea:c4:ae:35:65:21:d6:
51:ef:69:d9:28:6f:c2:57:48:c5:82:f9:ae:08:6e:
ad:e3:04:b5:a3:12:7a:91:77:ea:cd:41:8c:7d:48:
5d:91:e9:07:6c:d8:26:ca:9d:f4:21:b3:43:7f:2a:
f7:e0:56:1d:8c:db:b5:e0:ac:fc:12:36:7a:3c:78:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.180.0/22
43.227.152.0-43.227.156.255
43.227.158.0-43.227.183.255
43.227.192.0/19
43.228.0.0-43.228.6.255
43.228.8.0-43.228.31.255
43.228.40.0-43.228.71.255
43.230.72.0/22
103.46.12.0-103.46.68.255
103.46.72.0-103.46.139.255
103.49.108.0/22
IPv6:
2403:1f80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59037
137803
Signature Algorithm: sha256WithRSAEncryption
03:19:75:9c:d0:91:78:c3:5b:da:46:f2:b9:39:0e:c7:87:ea:
e0:c4:cd:15:e7:9f:68:36:d7:b7:27:1b:03:f4:05:26:30:30:
e6:3c:4f:76:20:2b:3a:07:54:65:db:d5:34:c8:12:d4:85:eb:
68:86:85:63:9c:38:85:98:95:bb:c6:3a:6f:c7:f2:00:c4:02:
b2:c0:a9:09:cb:50:60:26:01:39:98:60:3e:14:70:d7:41:f6:
6b:97:36:39:06:a8:29:cd:08:b0:38:71:34:50:cf:20:29:74:
4b:b4:b6:22:8a:52:46:99:c2:e4:95:85:1f:70:71:17:04:0c:
6a:a8:bd:30:f8:75:1f:de:a3:af:34:f4:06:9a:9d:0b:55:c0:
04:fc:5c:dc:d2:7f:42:a4:3d:4c:ec:ed:d8:d6:86:f9:72:37:
6e:82:37:ae:86:c0:0b:a4:47:b1:cb:27:0d:80:3a:8b:e6:b3:
51:21:10:42:46:0a:2e:f6:8b:c5:1d:3b:27:ce:91:20:6b:a0:
39:b9:47:a6:2a:0a:cc:d4:50:49:09:9e:8b:4c:2d:5c:24:78:
bd:a6:26:a6:47:1b:d8:76:c8:d4:d6:74:2b:e3:90:3b:da:a5:
30:5b:5a:4b:81:01:b9:4a:74:90:bb:1f:84:a6:1f:f3:3c:d0:
a8:98:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:45 2026 by rpki-client