$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer File: 95AFB4515D628A1186D20869CFEAF47D559D5337.cer (raw, json) Hash identifier: CwRqLEWhuSNEKKohUqGUk7mkipuQykGhl02fT33aN4s= Subject key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 39948434B5ACC8B4457DB85E9BF5867FC90B7565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:37:04 +0000 Certificate not after: Mon 31 May 2027 01:42:04 +0000 Subordinate resources: AS: 151268 IP: 103.109.20.0/22 IP: 103.236.52.0 -- 103.236.67.255 IP: 211.161.224.0/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:94:84:34:b5:ac:c8:b4:45:7d:b8:5e:9b:f5:86:7f:c9:0b:75:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 01:37:04 2026 GMT Not After : May 31 01:42:04 2027 GMT Subject: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:d0:d9:0d:bd:38:03:3a:3a:c8:48:e8:ed: ab:2f:eb:6f:74:51:9d:73:a9:59:0a:6d:f0:b6:a3: e1:68:4d:81:43:db:22:35:14:52:52:5b:e5:5f:46: 0b:47:f0:4a:47:b6:d8:51:42:5f:40:21:3c:5d:54: 36:76:5c:55:78:a4:1b:c3:e8:ae:37:d9:d7:55:91: f7:3b:29:0f:f6:29:e6:7a:a7:32:79:84:e1:08:cd: 05:26:95:be:80:ae:ef:ca:f8:1f:85:e6:50:0c:06: 28:49:f1:34:6b:ee:b6:53:0f:c8:bd:02:07:30:37: 8a:a3:99:b7:f8:c5:fa:7e:f8:f3:e7:c1:c9:1a:f2: a4:b4:59:eb:f6:d8:da:5a:3d:41:82:85:e7:be:5d: 77:64:fc:41:b6:9c:c7:c3:c7:99:90:80:5d:82:23: 7c:fc:f1:73:98:dd:dd:24:b5:bf:5e:33:bc:6b:04: ec:13:55:61:03:6e:df:46:24:be:bf:89:9b:08:4b: 03:98:fa:46:45:44:76:66:99:9b:48:ce:f3:6e:c9: 1c:bb:fe:fc:58:1c:e8:3a:c6:3a:0b:1f:02:b7:4e: d9:76:46:97:ff:6c:80:ff:df:4d:55:55:9d:4c:b8: d0:a9:e9:db:09:88:9e:73:40:32:a8:74:d6:d6:50: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.20.0/22 103.236.52.0-103.236.67.255 211.161.224.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151268 Signature Algorithm: sha256WithRSAEncryption 20:47:24:9f:da:6e:9d:7e:fd:6c:80:aa:f9:52:37:a7:07:9e: 84:77:d1:a8:fb:e5:af:28:6d:0f:20:6b:09:b1:d5:d7:02:f0: e7:f6:83:2b:97:56:f7:37:2e:e4:8d:db:a6:c1:20:80:73:25: 35:b7:52:f0:f4:5e:32:7b:5a:05:ae:58:95:e6:16:64:03:b5: ab:87:8f:cf:e8:de:29:00:bd:aa:50:ef:1a:a1:15:84:b0:f8: ab:24:f2:b3:8c:bc:f5:96:14:37:dc:61:25:bc:60:7f:80:c0: 07:e7:8c:56:7e:25:b5:bc:32:2f:ac:bb:21:a6:37:09:3f:f5: 1d:aa:da:f5:2f:3c:af:6a:2b:84:f0:15:a5:54:76:bf:ec:d3: 3b:1f:cb:90:3f:35:36:ae:2f:43:a3:d6:a0:46:44:c4:06:53: 51:9b:71:21:e1:bd:cc:ef:41:73:f9:c4:bf:ce:90:14:d0:36: a5:ed:39:90:42:0b:27:e6:5e:cb:ba:d7:f7:50:cc:4f:0e:0b: 9c:a8:18:51:52:1a:44:be:8c:36:8e:ee:c2:cb:f2:80:19:cc: 77:50:74:fd:13:53:64:58:d6:36:79:b1:37:d6:07:a3:5d:91: d9:83:1c:c2:55:37:3b:6f:4a:e2:8b:b0:8a:72:ee:d9:1f:d6: 63:d1:94:e2 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUOZSENLWsyLRFfbhem/WGf8kLdWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAxMzcwNFoX DTI3MDUzMTAxNDIwNFowMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIw ODY5Q0ZFQUY0N0Q1NTlENTMzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALey0NkNvTgDOjrISOjtqy/rb3RRnXOpWQpt8Laj4WhNgUPbIjUUUlJb5V9G C0fwSke22FFCX0AhPF1UNnZcVXikG8PorjfZ11WR9zspD/Yp5nqnMnmE4QjNBSaV voCu78r4H4XmUAwGKEnxNGvutlMPyL0CBzA3iqOZt/jF+n748+fByRrypLRZ6/bY 2lo9QYKF575dd2T8Qbacx8PHmZCAXYIjfPzxc5jd3SS1v14zvGsE7BNVYQNu30Yk vr+JmwhLA5j6RkVEdmaZm0jO827JHLv+/Fgc6DrGOgsfArdO2XZGl/9sgP/fTVVV nUy40Knp2wmInnNAMqh01tZQenMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJWvtFFdYooRhtIIac/q9H1VnVM3MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzUyMDY0My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTIwNjQz LzAvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAJnbRQwDAMEAmfsNAMEAmfsQAMEBNOh4DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMCTuQwDQYJKoZIhvcNAQELBQADggEBACBHJJ/a bp1+/WyAqvlSN6cHnoR30aj75a8obQ8gawmx1dcC8Of2gyuXVvc3LuSN26bBIIBz JTW3UvD0XjJ7WgWuWJXmFmQDtauHj8/o3ikAvapQ7xqhFYSw+Ksk8rOMvPWWFDfc YSW8YH+AwAfnjFZ+JbW8Mi+suyGmNwk/9R2q2vUvPK9qK4TwFaVUdr/s0zsfy5A/ NTauL0Oj1qBGRMQGU1GbcSHhvczvQXP5xL/OkBTQNqXtOZBCCyfmXsu61/dQzE8O C5yoGFFSGkS+jDaO7sLL8oAZzHdQdP0TU2RY1jZ5sTfWB6NdkdmDHMJVNztvSuKL sIpy7tkf1mPRlOI= -----END CERTIFICATE-----Generated at Sun Jun 14 01:10:10 2026 by rpki-client