Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
File: A162689F28161D4D4C3DF339D95097D5EF647370.cer (raw, json)
Hash identifier: ur3EwygTExQeMyIx/+OvkoxqOXL9BTuLB5210XLSCGA=
Subject key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 24129B33F83A7DFFAD65D3732156C0D0FA7D0350
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 11 Jun 2026 03:19:53 +0000
Certificate not after: Thu 10 Jun 2027 03:24:53 +0000
Subordinate resources: AS: 131536
IP: 124.14.0.0/23
IP: 124.14.3.0 -- 124.14.5.255
IP: 124.14.7.0 -- 124.14.8.255
IP: 124.14.10.0 -- 124.14.23.255
IP: 211.161.96.0/23
IP: 211.161.101.0 -- 211.161.103.255
IP: 211.161.192.0/19
IP: 211.161.240.0/20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:12:9b:33:f8:3a:7d:ff:ad:65:d3:73:21:56:c0:d0:fa:7d:03:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 11 03:19:53 2026 GMT
Not After : Jun 10 03:24:53 2027 GMT
Subject: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:67:98:a8:66:8a:7a:34:25:fb:f6:e3:c1:
a3:88:67:36:f8:2b:07:3b:97:95:e6:7a:20:0b:21:
7e:07:5d:9d:60:c0:eb:27:29:1a:a7:5d:b9:16:28:
43:6f:ea:17:5e:e1:42:61:02:3b:20:7a:5f:5a:1b:
bf:45:67:ad:d3:2a:5c:dc:d2:18:51:26:60:ff:23:
eb:a5:3d:51:7f:93:b6:1a:cd:82:18:0e:57:3e:54:
82:9e:f8:f4:39:af:fe:c9:73:43:92:da:1a:ac:25:
84:08:f7:45:7e:dc:fe:a3:1a:5d:ee:7f:11:58:b0:
20:c2:4e:79:d1:3a:f9:0a:e7:bf:96:b4:41:bf:99:
f8:27:3e:ff:f3:1a:c8:25:ea:07:1a:b7:66:f8:a7:
7c:e4:43:88:03:6a:55:32:75:eb:ab:31:9a:f9:03:
04:9a:f8:73:7f:dd:77:cf:12:e5:52:a2:e4:4e:28:
f1:ba:e3:ad:4c:99:23:3e:26:fb:8f:02:b5:fd:e0:
05:41:4b:9a:25:57:43:a0:2f:24:7b:98:cf:8e:a2:
56:f9:f4:c8:63:00:2e:c1:6c:0f:f7:a4:cd:aa:b6:
b3:81:6b:f9:52:d3:aa:f6:41:5d:17:a5:1f:c9:d6:
ff:23:ed:6d:e1:da:37:9b:b5:d6:b5:7e:df:45:ab:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.0.0/23
124.14.3.0-124.14.5.255
124.14.7.0-124.14.8.255
124.14.10.0-124.14.23.255
211.161.96.0/23
211.161.101.0-211.161.103.255
211.161.192.0/19
211.161.240.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131536
Signature Algorithm: sha256WithRSAEncryption
53:6d:4d:14:17:76:6e:c7:66:da:d4:a9:43:86:05:11:0d:41:
9f:21:78:da:1a:2a:92:1c:5a:1f:7d:c1:8a:f9:49:af:11:2d:
18:ce:c7:51:8c:a2:d6:4c:f5:39:4e:94:51:73:3e:30:9c:63:
3c:f1:45:1b:b7:e9:06:69:a8:2b:d8:78:f5:36:36:92:2b:87:
81:0b:51:4f:7f:e8:16:c2:29:88:29:4f:f5:45:79:63:a1:3e:
03:42:32:fa:b9:4c:ae:07:9c:4c:9c:b3:fc:f6:70:8c:97:fc:
5f:10:2c:f8:2b:be:ae:e5:94:11:05:2b:7f:61:d5:d0:f9:2b:
97:68:61:59:4a:d2:8f:e6:53:76:bf:33:45:50:ec:e8:c0:eb:
78:25:f9:ea:59:4f:58:b5:15:4c:f3:de:b1:a9:d3:ca:bb:96:
d8:3c:3d:e8:ef:3e:d4:a7:5b:1c:0b:61:63:39:12:0a:b9:dc:
7a:66:ba:8c:fd:ac:0a:dd:94:fd:24:4c:20:49:e6:9a:0a:cc:
2f:08:cf:44:02:b4:d7:80:1c:73:98:4e:e4:bb:d6:3c:cb:fa:
cb:01:1e:26:54:80:99:c4:0e:f1:b9:cf:b0:01:9b:83:26:34:
03:d5:d2:dc:76:0b:27:fa:b2:d9:7e:40:33:74:9c:67:eb:1c:
3d:33:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:47:41 2026 by rpki-client