Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer
File:                     6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer (raw, json)
Hash identifier:          Rp2WA8l0FKUZYsX40TVFs5VMSnCWSPPWC5tNwgfcvyY=
Subject key identifier:   6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       39478767407B799D0B4FE2306F29B899CA3E8A13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2026 06:08:04 +0000
Certificate not after:    Fri 16 Apr 2027 06:13:04 +0000
Subordinate resources:    AS: 146814
                          IP: 103.189.154.0/23
                          IP: 2400:86e0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:47:87:67:40:7b:79:9d:0b:4f:e2:30:6f:29:b8:99:ca:3e:8a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 17 06:08:04 2026 GMT
            Not After : Apr 16 06:13:04 2027 GMT
        Subject: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:26:ca:0a:3a:51:b1:6f:ec:1d:a7:44:da:
                    d0:62:5e:d9:99:63:06:6b:b9:b0:cd:c9:2f:55:d1:
                    84:04:29:0d:71:7d:b8:26:1f:6b:d8:0b:cb:21:72:
                    ee:cb:b2:6f:4d:49:54:ae:6f:3e:e5:38:99:e2:c8:
                    80:f7:4f:71:3c:1a:30:99:fc:30:58:34:f5:b7:4a:
                    30:42:ef:25:87:b9:9e:b1:38:5f:70:dc:73:74:16:
                    e6:95:db:09:1e:2d:ec:bd:c4:61:70:12:33:d5:48:
                    9d:ce:fd:df:d8:e5:a7:10:ed:57:cb:68:10:ce:1e:
                    eb:f2:7b:f5:e2:4a:89:ed:e2:07:ac:26:ae:85:fb:
                    cf:87:40:31:41:79:c9:05:3d:29:af:28:f5:72:55:
                    44:8d:3a:de:21:f4:59:d5:2a:16:11:47:59:d3:6e:
                    06:d5:01:7c:66:23:03:ec:19:0f:7c:2c:51:47:ba:
                    0a:eb:32:7e:37:e9:5d:83:a8:d7:48:eb:d3:76:4a:
                    3c:a3:47:5d:26:47:f5:22:b3:2d:79:9f:da:2d:9a:
                    af:83:ba:f3:fb:4c:33:ba:44:73:fc:63:46:34:3d:
                    56:fc:62:4e:8a:3b:1d:06:4e:7d:68:2f:6e:9a:04:
                    40:e2:c9:97:d7:91:da:1b:dc:01:01:5c:6a:98:c2:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.154.0/23
                IPv6:
                  2400:86e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146814

    Signature Algorithm: sha256WithRSAEncryption
         5b:23:1f:51:56:57:54:7d:81:ab:b5:41:d3:82:5e:21:e2:34:
         ff:87:53:15:20:30:9b:0b:57:ba:6a:8c:78:cb:fe:4f:31:35:
         e5:47:fe:48:3f:a5:29:c2:66:97:12:34:e1:c5:c1:53:ce:86:
         06:71:44:cf:47:9c:e8:4a:02:9e:c0:df:01:8b:5d:bb:dc:ec:
         ef:06:dc:da:20:85:70:99:86:b3:69:60:02:60:53:73:4b:f9:
         25:6a:8c:8e:eb:36:4c:b7:a8:4b:4d:ec:36:41:3f:2f:ca:53:
         9b:49:44:a3:9b:20:7d:5d:ed:18:ab:56:0d:78:72:79:56:60:
         29:9e:5a:13:be:46:9d:6c:a7:c0:58:79:ad:c6:b8:a0:45:41:
         31:27:64:c9:ac:cc:2c:0b:d3:c3:2d:6d:78:00:9b:5e:87:1e:
         8d:a6:e0:aa:9a:dc:3a:87:27:06:d6:a5:07:6f:ad:c4:bc:ef:
         bb:65:ef:f0:77:dd:67:8e:cc:68:6a:e2:c3:ff:28:cf:b0:e6:
         3f:38:a8:c9:e7:4a:fc:4a:11:7d:20:b5:0f:a2:06:03:38:f9:
         3e:70:1e:63:bb:be:a0:e6:b4:3c:a9:dc:2f:20:53:ba:40:49:
         80:05:35:7d:ba:0e:a9:99:47:1e:86:c4:23:88:71:1e:c7:e6:
         47:66:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:40:36 2026 by rpki-client