Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
File:                     6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer (raw, json)
Hash identifier:          jUJurehk/fL/4gsqfUwpL9uvsIjvglHPM1cpepbc1ZY=
Subject key identifier:   6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       41B54F021FE68A5BF9DDA5A707EFE70B0E5AC759
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2026 06:11:10 +0000
Certificate not after:    Fri 16 Apr 2027 06:16:10 +0000
Subordinate resources:    AS: 63537
                          AS: 63553
                          IP: 27.109.124.0/22
                          IP: 45.124.124.0/22
                          IP: 103.28.212.0/22
                          IP: 103.192.252.0/22
                          IP: 121.46.224.0/19
                          IP: 2402:b880::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b5:4f:02:1f:e6:8a:5b:f9:dd:a5:a7:07:ef:e7:0b:0e:5a:c7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 17 06:11:10 2026 GMT
            Not After : Apr 16 06:16:10 2027 GMT
        Subject: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:2a:29:31:dc:8b:f4:df:7e:f8:21:9c:be:
                    4a:aa:6f:8e:10:9a:26:84:ea:99:a2:f0:5d:c8:21:
                    3a:5d:58:b9:c8:d1:63:d7:2a:1a:eb:5b:23:a6:ed:
                    81:4e:94:ea:b1:05:bd:c0:11:4e:03:73:8b:90:57:
                    ab:85:b6:8d:7b:30:db:6c:49:d1:1e:02:1f:dd:f7:
                    78:64:9e:3a:af:bd:24:6a:6b:4c:96:b6:32:ab:03:
                    51:ff:d1:28:37:8f:bf:3a:af:01:29:cc:a2:76:72:
                    2d:ca:40:0a:5a:a5:98:2d:4c:14:76:cf:bb:c8:e5:
                    ce:85:7b:d7:aa:7c:30:1c:22:7f:0a:49:9e:ef:ce:
                    35:d7:d0:55:b1:4a:2e:46:f6:e5:17:61:16:03:ed:
                    e5:30:e2:45:bb:32:7e:0e:f3:47:c4:cf:db:30:0e:
                    53:c4:49:a5:3b:13:11:3c:4c:75:a0:1d:ad:80:31:
                    5e:ad:14:d1:7a:c4:f3:ae:b2:ad:1b:59:a6:75:28:
                    c7:af:58:bc:da:15:6b:0f:87:b8:18:63:fa:f9:8e:
                    36:b1:f0:c8:08:e1:df:8f:c3:5c:11:83:26:f4:01:
                    d5:21:2e:a9:b8:46:1a:16:23:0b:7e:ff:0e:b6:37:
                    a9:65:21:bd:ce:95:01:21:66:5f:a6:ae:07:c2:6f:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.109.124.0/22
                  45.124.124.0/22
                  103.28.212.0/22
                  103.192.252.0/22
                  121.46.224.0/19
                IPv6:
                  2402:b880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63537
                  63553

    Signature Algorithm: sha256WithRSAEncryption
         6c:27:91:18:6d:c0:66:23:2b:34:c3:a8:74:2c:33:3b:8b:5a:
         d6:69:61:73:cc:a6:62:34:63:d6:af:c3:a7:da:e3:86:15:8d:
         53:21:b6:74:95:72:49:2f:1b:9b:a1:c5:16:da:dc:b6:86:03:
         9f:70:1d:db:99:9f:e9:be:fd:89:13:a7:cd:5d:f4:d5:6f:cd:
         19:5a:ed:60:03:be:eb:56:3e:e6:51:5d:5e:83:68:ae:6c:d8:
         a8:78:a6:bd:29:84:72:9d:72:36:2c:fa:03:b5:53:b5:92:8e:
         be:7f:42:38:98:e5:f9:6b:b8:6a:6b:bf:67:97:c1:5a:0d:e7:
         f3:24:b1:4a:cd:86:5a:6b:2d:e0:3b:77:88:e1:0e:6b:8c:53:
         5c:34:ee:15:0a:47:47:a5:ea:51:ea:ba:33:05:4d:7c:08:2f:
         d9:59:58:d6:14:ae:17:2b:bd:3e:ea:eb:96:4d:37:dc:0e:d2:
         f7:d4:90:2e:26:c7:aa:bb:24:52:e2:21:b9:11:cc:74:f5:4b:
         d7:39:38:6b:c7:b4:bd:c5:95:6a:d2:57:75:67:2f:05:37:9b:
         be:83:60:aa:10:2d:04:ff:1e:76:c9:43:ce:ed:89:f2:9f:02:
         90:d9:d1:0d:44:d2:03:f8:0d:82:b3:c4:f6:2d:5a:b7:9b:0d:
         bb:4c:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:12 2026 by rpki-client