Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
File:                     62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer (raw, json)
Hash identifier:          cvIfyOtagxXqO4uB2TzEslLF94xcWnARoJI+z43X6ds=
Subject key identifier:   62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       7D4E28717C94F625C76646EEAE7EDEEA9FC7A005
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 16 Apr 2026 07:29:37 +0000
Certificate not after:    Thu 15 Apr 2027 07:34:37 +0000
Subordinate resources:    IP: 103.2.108.0/22
                          IP: 103.29.16.0/22
                          IP: 103.72.172.0/22
                          IP: 103.204.232.0/22
                          IP: 103.234.20.0/22
                          IP: 150.242.184.0/22
                          IP: 202.181.28.0/22
                          IP: 2404:a80::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4e:28:71:7c:94:f6:25:c7:66:46:ee:ae:7e:de:ea:9f:c7:a0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 16 07:29:37 2026 GMT
            Not After : Apr 15 07:34:37 2027 GMT
        Subject: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4d:22:9a:32:7b:e9:4c:c0:4a:38:a0:63:88:
                    d8:b0:a1:02:a1:2a:2f:67:9b:8e:d3:c0:70:03:e7:
                    a9:f4:90:14:af:2a:0e:45:13:ca:2c:0c:f2:5c:cd:
                    5d:9f:2d:bf:00:41:6a:b7:de:43:d8:32:c4:bb:26:
                    41:b9:6f:a9:c6:8d:78:49:de:68:71:7a:9c:ce:c2:
                    c7:ed:6a:6f:55:70:82:98:3f:6c:96:06:a3:83:f7:
                    38:5e:bc:84:da:29:cf:3f:9d:9d:80:6a:61:51:f7:
                    ce:6c:b7:1c:3d:84:f1:81:6c:f2:07:e6:55:b0:f5:
                    91:8c:0b:2a:82:96:6f:35:c5:ad:dc:28:d2:d2:39:
                    44:f0:75:fd:fa:72:63:34:45:ea:29:e7:84:76:93:
                    4f:ef:54:99:86:41:64:f0:d8:ad:06:cc:63:15:93:
                    c5:95:74:53:44:02:8f:54:54:9e:a2:43:7c:c4:c4:
                    94:ba:e7:94:40:b7:d8:5a:84:c6:44:e4:71:96:44:
                    47:63:b6:c9:d9:49:00:70:53:e3:87:16:3c:7c:ff:
                    28:d2:e3:c2:f4:5f:b2:11:7f:55:c9:5d:e5:dd:cf:
                    22:dd:28:58:ac:e8:18:30:2d:e0:5b:e4:2a:bc:9a:
                    81:fb:c0:7e:5c:7e:4a:15:cc:76:b3:3a:89:90:56:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.108.0/22
                  103.29.16.0/22
                  103.72.172.0/22
                  103.204.232.0/22
                  103.234.20.0/22
                  150.242.184.0/22
                  202.181.28.0/22
                IPv6:
                  2404:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:94:78:03:d5:d4:65:1c:25:3f:96:02:71:63:64:4a:44:
         10:62:ba:e9:11:7b:6b:30:24:30:46:71:7b:59:a0:3f:c4:e3:
         be:71:a5:32:8f:17:8b:55:0e:fc:35:ba:5f:d0:0a:c2:27:3e:
         bc:8c:75:08:63:9e:cc:b4:96:09:e9:de:50:b7:e0:4e:f3:18:
         13:b0:5c:c1:39:ec:d8:bf:21:25:8c:ae:3c:3b:e1:fe:0e:f7:
         3a:c5:0e:38:18:48:cd:3e:63:3b:2a:40:b5:a5:e3:eb:fc:46:
         d0:45:19:40:1d:c0:c7:2e:7e:be:03:96:5b:0f:47:ba:ba:3e:
         ee:54:24:0d:36:38:10:18:a9:8a:7d:51:49:ab:43:8f:21:cf:
         ae:d3:b7:f9:10:23:b1:39:5a:6d:ef:7c:5e:57:dc:05:fc:ff:
         96:06:53:0f:3b:42:a0:63:25:66:f1:b4:0d:25:10:9d:99:6b:
         93:b3:bf:38:39:b9:5d:f6:82:e6:10:a3:85:e7:6d:c2:4f:bc:
         e3:5a:6c:2e:02:9c:3d:f5:53:0d:9b:6a:7f:5e:c8:b2:91:99:
         18:e6:9e:d7:83:20:f6:73:34:a2:5c:74:6b:3b:67:94:ec:14:
         83:79:72:46:a6:02:09:28:dd:e1:a3:c5:0d:93:43:f4:89:b1:
         f4:f4:dd:d5
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUfU4ocXyU9iXHZkburn7e6p/HoAUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA3MjkzN1oX
DTI3MDQxNTA3MzQzN1owMzExMC8GA1UEAxMoNjJCQ0JGOTE4NTQzN0EwQkM5OEVG
OEQ2QzQ1RjRCMEVDQjU2QzE2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOFNIpoye+lMwEo4oGOI2LChAqEqL2ebjtPAcAPnqfSQFK8qDkUTyiwM8lzN
XZ8tvwBBarfeQ9gyxLsmQblvqcaNeEneaHF6nM7Cx+1qb1Vwgpg/bJYGo4P3OF68
hNopzz+dnYBqYVH3zmy3HD2E8YFs8gfmVbD1kYwLKoKWbzXFrdwo0tI5RPB1/fpy
YzRF6innhHaTT+9UmYZBZPDYrQbMYxWTxZV0U0QCj1RUnqJDfMTElLrnlEC32FqE
xkTkcZZER2O2ydlJAHBT44cWPHz/KNLjwvRfshF/Vcld5d3PIt0oWKzoGDAt4Fvk
KryagfvAflx+ShXMdrM6iZBWYbcCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFGK8v5GFQ3oLyY741sRfSw7LVsFjMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NzA2MjQ3MzA0MDY1ODQzNS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDYyNDczMDQwNjU4NDM1
LzAvNjJCQ0JGOTE4NTQzN0EwQkM5OEVGOEQ2QzQ1RjRCMEVDQjU2QzE2My5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUH
AQcBAf8EQzBBMDAEAgABMCoDBAJnAmwDBAJnHRADBAJnSKwDBAJnzOgDBAJn6hQD
BAKW8rgDBALKtRwwDQQCAAIwBwMFACQECoAwDQYJKoZIhvcNAQELBQADggEBAINu
lHgD1dRlHCU/lgJxY2RKRBBiuukRe2swJDBGcXtZoD/E475xpTKPF4tVDvw1ul/Q
CsInPryMdQhjnsy0lgnp3lC34E7zGBOwXME57Ni/ISWMrjw74f4O9zrFDjgYSM0+
YzsqQLWl4+v8RtBFGUAdwMcufr4DllsPR7q6Pu5UJA02OBAYqYp9UUmrQ48hz67T
t/kQI7E5Wm3vfF5X3AX8/5YGUw87QqBjJWbxtA0lEJ2Za5Ozvzg5uV32guYQo4Xn
bcJPvONabC4CnD31Uw2ban9eyLKRmRjmnteDIPZzNKJcdGs7Z5TsFIN5ckamAgko
3eGjxQ2TQ/SJsfT03dU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:40 2026 by rpki-client