Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
File: 94A04007C18934EEFD779445BA5349A8FBDB19DF.cer (raw, json)
Hash identifier: FFpJdN0x1NZWSJumKB6FjfMH5VjXS/jIJIvW4E5/ee0=
Subject key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 253B1B0FB327F4394388653EE9A7BF20B1BA7FD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 15 Apr 2026 07:30:52 +0000
Certificate not after: Wed 14 Apr 2027 07:35:52 +0000
Subordinate resources: AS: 137795
IP: 43.240.204.0/22
IP: 45.250.32.0 -- 45.250.43.255
IP: 103.36.208.0/22
IP: 103.116.184.0/22
IP: 103.219.28.0 -- 103.219.39.255
IP: 219.232.128.0/19
IP: 2400:1740::/32
IP: 2400:17c0::/32
IP: 2400:1840::/32
IP: 2402:ffc0::/32
IP: 2403:3480::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3b:1b:0f:b3:27:f4:39:43:88:65:3e:e9:a7:bf:20:b1:ba:7f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 15 07:30:52 2026 GMT
Not After : Apr 14 07:35:52 2027 GMT
Subject: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:e5:a7:29:fd:de:77:4b:4e:28:d5:8e:88:
bf:51:47:87:17:c3:84:c9:57:37:02:9f:7d:88:0a:
33:f4:ac:d7:36:bf:55:4d:5f:39:fa:26:e9:56:27:
88:29:e8:3c:ca:03:a1:4b:c2:56:e6:8e:01:72:23:
a0:54:fb:4b:2a:f5:d3:e0:16:3d:19:df:f2:32:6a:
27:3b:f2:a5:51:eb:bf:cd:7e:a7:80:4b:cd:3e:4e:
ac:51:cf:08:f0:9d:b0:15:ab:e7:2d:b3:24:f2:da:
5d:74:d7:ca:e7:93:63:b6:73:72:c8:1d:c3:3b:47:
c8:d3:c2:a4:25:bd:5c:54:85:3b:9b:a4:d4:7a:bb:
0e:a6:ca:8c:c4:c6:e9:fb:1c:66:f0:80:e4:d2:c9:
49:f0:df:8e:9e:e5:9f:55:b9:c3:da:b1:51:7b:a9:
85:46:b5:2d:c5:97:57:7e:38:6c:14:da:9e:a0:c7:
0a:36:bf:95:2d:44:1a:3f:1a:7d:6a:73:81:9c:ac:
5f:df:e8:3f:31:9e:94:2b:d9:7c:80:b2:5c:a5:45:
7f:e8:43:0a:da:58:63:0f:eb:24:08:61:b1:91:78:
87:7e:1a:04:d4:d0:59:8c:83:b1:94:f7:61:b3:33:
01:6a:73:4f:94:10:04:1d:f8:51:20:35:77:df:4f:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.204.0/22
45.250.32.0-45.250.43.255
103.36.208.0/22
103.116.184.0/22
103.219.28.0-103.219.39.255
219.232.128.0/19
IPv6:
2400:1740::/32
2400:17c0::/32
2400:1840::/32
2402:ffc0::/32
2403:3480::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137795
Signature Algorithm: sha256WithRSAEncryption
62:18:75:8d:d7:5c:d9:ff:c6:de:0c:7b:c5:32:bb:4a:c1:87:
6d:d6:82:b0:cf:b3:b6:0b:65:2d:16:cd:5a:4d:8d:73:01:f3:
28:59:4d:b3:8d:3a:65:01:07:73:ce:10:9d:d0:a6:78:d8:0a:
0c:01:ef:5b:8a:fb:6d:35:20:44:cc:70:0b:13:db:da:97:81:
24:cf:88:d7:2e:8a:11:d1:4f:0b:0c:c0:6e:d4:2a:58:bb:73:
14:1a:37:1d:0f:a7:30:d0:aa:c0:01:15:52:99:81:20:ef:05:
07:9d:ac:78:41:c3:12:ad:d8:05:10:11:b3:b5:ea:8d:15:9a:
c6:e5:b2:93:fe:d8:0b:23:27:7a:6b:9e:52:84:54:ae:40:8e:
e5:e7:de:f5:3d:90:9e:fb:80:c1:ae:23:d1:ef:64:49:23:23:
a4:c0:96:7a:c1:63:e4:1e:87:59:92:a7:24:d9:83:4a:58:86:
ec:c1:e0:7d:88:70:6d:5c:d7:ba:3c:dc:0f:df:3e:ef:67:57:
5c:8a:24:ed:47:04:6c:0f:2f:59:45:28:bc:dc:e4:93:2d:cd:
1b:50:44:e4:32:b4:26:7b:3c:a5:13:9b:41:74:2e:fc:f7:02:
5d:4a:60:26:cb:38:ed:4a:1e:ba:86:db:fe:45:75:4c:0a:c5:
f6:53:41:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:21 2026 by rpki-client