
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
File: B632502E8D6D2369C51A2346CBA569E60257BDC7.cer (raw, json)
Hash identifier: JLXfhaQXpCKQvnY3g84bFySAapZWN7uuzoNIeUHPk1E=
Subject key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: BEDA6111CDA74F2B9F57BECFA550F80C18A923
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 17 Apr 2026 13:31:02 +0000
Certificate not after: Fri 16 Apr 2027 13:36:02 +0000
Subordinate resources: AS: 137766
IP: 103.78.228.0/22
IP: 103.101.180.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
be:da:61:11:cd:a7:4f:2b:9f:57:be:cf:a5:50:f8:0c:18:a9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 17 13:31:02 2026 GMT
Not After : Apr 16 13:36:02 2027 GMT
Subject: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:78:81:50:91:06:1a:30:f6:26:cb:e9:69:
4a:dd:16:11:a3:74:2b:27:72:ab:ba:7a:e8:1d:6d:
34:5e:6f:0e:69:e4:00:95:93:f9:c7:b4:00:e1:0a:
0c:f1:41:9b:ac:96:0d:2e:2b:64:af:1f:a6:9b:54:
4e:dd:29:a0:6d:0a:f4:0f:c9:b8:a5:6f:37:3b:db:
59:8d:df:50:66:ad:3a:b7:bf:b3:b7:b2:72:e7:54:
e2:7a:06:b2:b7:b1:61:1b:c5:46:81:94:19:8b:5b:
ac:b7:ac:4c:19:01:bf:90:6b:92:f4:7e:ef:1c:5f:
d6:1b:2f:f0:f4:6b:27:49:f7:79:59:ae:e8:77:87:
b5:5b:a1:e5:35:da:fa:57:02:28:e3:bd:a0:92:5f:
35:00:3f:98:9e:e9:02:a6:d8:96:ef:30:81:63:fd:
61:68:2c:aa:f3:21:79:87:ef:0d:94:58:17:be:39:
d6:f8:ee:04:b7:f3:93:85:c2:11:96:7c:3a:e7:8d:
f6:3f:f2:4b:51:81:05:a3:d7:76:f6:aa:67:5c:51:
75:41:6b:46:f6:13:b1:ad:c7:29:ac:b9:e9:f5:05:
89:2b:f1:1d:b4:57:2c:69:55:7e:73:6b:e5:cb:89:
f3:41:a9:9b:13:3d:fe:e3:a4:8a:7b:cc:01:1a:3d:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.78.228.0/22
103.101.180.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137766
Signature Algorithm: sha256WithRSAEncryption
21:b1:9e:0a:f9:a3:48:27:f5:0b:b4:68:51:10:95:c0:32:dc:
d7:c0:65:f5:fd:e1:19:78:a8:43:73:52:11:20:48:d6:07:89:
74:63:f2:28:09:05:82:8c:00:88:d3:46:2b:96:92:d4:fe:d5:
f4:44:1f:0c:2f:59:fe:cd:98:bb:37:cd:1c:e5:d2:84:0f:ae:
8d:b2:bb:ee:16:e2:f2:66:3a:d0:d5:76:4c:8a:af:be:e7:87:
89:33:57:84:c1:f5:c2:27:b8:b8:3a:8f:ae:40:6f:c9:bd:8b:
c6:03:ed:fb:9a:5b:d2:57:90:36:81:aa:cf:8d:8d:6d:31:29:
30:39:37:96:f5:1d:97:78:37:61:e5:dc:2a:0c:59:56:06:05:
db:29:8d:cd:2d:f4:15:6b:a2:c4:65:f3:53:74:e0:72:7a:c9:
64:43:ec:e8:d2:7b:fb:b3:5e:7a:74:cf:4d:8f:9e:55:f6:ee:
a3:b6:35:7b:1d:fa:ff:18:bc:40:e5:97:c2:bc:e1:1e:99:94:
12:b6:34:c7:83:7c:01:e9:a8:56:83:98:44:6a:d8:3e:39:5c:
7d:da:8e:77:6c:95:9a:0e:32:ce:04:56:b0:50:ec:a6:ef:ad:
17:72:27:60:c0:81:e6:e8:26:0c:e0:be:ad:93:eb:65:eb:7e:
83:a4:4e:31
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUAL7aYRHNp08rn1e+z6VQ+AwYqSMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzEzMzEwMloX
DTI3MDQxNjEzMzYwMlowMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEy
MzQ2Q0JBNTY5RTYwMjU3QkRDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKB9eIFQkQYaMPYmy+lpSt0WEaN0Kydyq7p66B1tNF5vDmnkAJWT+ce0AOEK
DPFBm6yWDS4rZK8fpptUTt0poG0K9A/JuKVvNzvbWY3fUGatOre/s7eycudU4noG
srexYRvFRoGUGYtbrLesTBkBv5BrkvR+7xxf1hsv8PRrJ0n3eVmu6HeHtVuh5TXa
+lcCKOO9oJJfNQA/mJ7pAqbYlu8wgWP9YWgsqvMheYfvDZRYF7451vjuBLfzk4XC
EZZ8OueN9j/yS1GBBaPXdvaqZ1xRdUFrRvYTsa3HKay56fUFiSvxHbRXLGlVfnNr
5cuJ80GpmxM9/uOkinvMARo9eMMCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLYyUC6NbSNpxRojRsulaeYCV73HMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NzUxNTgxMzkzMTMxOTI5OS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3NTE1ODEzOTMxMzE5Mjk5
LzAvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAJnTuQDBAJnZbQwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhomMA0GCSqGSIb3DQEBCwUAA4IBAQAhsZ4K+aNIJ/ULtGhREJXAMtzX
wGX1/eEZeKhDc1IRIEjWB4l0Y/IoCQWCjACI00YrlpLU/tX0RB8ML1n+zZi7N80c
5dKED66NsrvuFuLyZjrQ1XZMiq++54eJM1eEwfXCJ7i4Oo+uQG/JvYvGA+37mlvS
V5A2garPjY1tMSkwOTeW9R2XeDdh5dwqDFlWBgXbKY3NLfQVa6LEZfNTdOByeslk
Q+zo0nv7s156dM9Nj55V9u6jtjV7Hfr/GLxA5ZfCvOEemZQStjTHg3wB6ahWg5hE
atg+OVx92o53bJWaDjLOBFawUOym760XcidgwIHm6CYM4L6tk+tl636DpE4x
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:05 2026 by rpki-client