Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer (raw, json)
Hash identifier: TLAORLbelBUTHdLHMGJMWBSl1yWlaFTHWOqoEcGn3cw=
Subject key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 3F6460C9470737F9370E23EFF5B195845697FD95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 14 Apr 2026 06:29:11 +0000
Certificate not after: Tue 13 Apr 2027 06:34:11 +0000
Subordinate resources: AS: 151262
IP: 43.240.160.0/19
IP: 103.36.176.0 -- 103.36.207.255
IP: 2401:7580::/32
IP: 2401:7680::/32
IP: 2401:7780::/32
IP: 2401:7880::/32
IP: 2401:7980::/32
IP: 2401:7a80::/32
IP: 2401:7b80::/32
IP: 2401:7c80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:64:60:c9:47:07:37:f9:37:0e:23:ef:f5:b1:95:84:56:97:fd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 14 06:29:11 2026 GMT
Not After : Apr 13 06:34:11 2027 GMT
Subject: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:b4:09:76:3a:f6:d2:42:35:e5:86:0e:b8:
8b:76:b6:87:70:72:0e:47:9d:b5:9c:e5:8d:0f:0b:
05:af:03:8e:9a:bb:0a:81:0a:63:11:dc:0b:60:eb:
33:3c:5c:78:d0:a1:a4:5a:09:14:48:a8:bd:97:d9:
cb:2d:d7:2b:ab:a0:2c:3a:8d:e1:0a:f7:53:28:1f:
2f:5f:c1:44:e1:bf:d7:12:8a:41:a1:9f:2d:07:9c:
4c:65:39:fb:b9:d8:2f:c6:b4:f3:4d:74:16:16:93:
c2:5b:20:b0:cf:51:7f:c5:31:69:eb:1c:22:81:f6:
bb:12:bf:a9:43:69:63:63:84:75:69:7f:d1:86:47:
46:58:a6:a1:76:ae:c7:85:10:c5:d3:85:05:48:5a:
f6:d6:c8:ff:b0:65:e0:b3:05:b1:98:ee:46:57:8c:
b4:7d:fb:9b:36:86:6b:c5:1f:64:fa:4b:62:00:5e:
ba:4d:58:a9:69:28:b2:f9:79:63:8d:a8:6d:db:6d:
6a:35:4f:35:19:77:05:aa:09:71:e0:d9:00:09:9e:
2e:7a:af:de:1b:77:33:f1:dd:ec:9b:61:57:c8:7f:
aa:b6:76:df:5c:ba:2b:60:9e:05:db:2a:56:21:8a:
51:87:a3:67:ed:fa:e6:4b:7a:23:54:a9:35:0e:0d:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.160.0/19
103.36.176.0-103.36.207.255
IPv6:
2401:7580::/32
2401:7680::/32
2401:7780::/32
2401:7880::/32
2401:7980::/32
2401:7a80::/32
2401:7b80::/32
2401:7c80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151262
Signature Algorithm: sha256WithRSAEncryption
60:bc:3a:20:f0:cb:28:73:67:11:ad:8d:84:29:66:93:1f:3c:
02:45:bc:6f:4e:a9:c4:bb:7c:f9:68:6e:e1:a3:bc:a1:8a:e2:
62:22:95:11:c6:6a:70:a3:55:1f:c4:4f:4c:f7:8f:d1:a3:9d:
2c:80:bf:7b:46:c8:d2:64:8a:19:3a:fc:0f:54:6f:06:b5:39:
b6:b5:c5:a1:f5:06:7d:30:c7:35:8c:3d:d6:35:53:29:64:a5:
2f:d9:89:f3:a6:0e:ac:1f:2c:6c:cb:bb:b5:cb:58:9c:9a:12:
71:be:a8:50:fa:e9:f0:de:c4:40:79:52:a4:1a:c2:0c:14:6e:
66:d9:1c:cb:de:b6:eb:48:44:09:49:23:f0:30:8b:21:7b:d3:
ad:9a:f6:55:16:ca:a2:6f:dd:db:23:29:dc:d9:6d:32:20:dc:
b0:87:ad:99:3f:ac:29:66:b5:cf:da:22:e4:d8:a8:0e:af:51:
a0:e8:df:e6:27:1f:23:72:40:3e:1e:99:41:32:24:e1:88:ec:
02:0e:a5:1d:c5:e4:f1:99:0c:2d:44:05:7b:53:9a:41:9e:57:
92:2d:ee:30:36:c0:63:6e:dd:6e:5c:3e:69:4f:51:2f:44:cb:
ec:67:47:06:92:c6:d1:b1:07:3c:42:b2:84:3d:cc:fa:c0:fb:
03:20:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:30 2026 by rpki-client