Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer (raw, json)
Hash identifier: zrF08l4KHVE9dYpdN0q7uVM2QJm4GKxaKY2BwKaxwnA=
Subject key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 4316B047F2998B33F58973779B966A25509E6A5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 16 Apr 2026 06:29:51 +0000
Certificate not after: Thu 15 Apr 2027 06:34:51 +0000
Subordinate resources: AS: 59045
AS: 131537
AS: 131557
IP: 43.230.240.0/20
IP: 43.231.32.0/20
IP: 43.231.80.0 -- 43.231.111.255
IP: 43.231.140.0 -- 43.231.183.255
IP: 45.251.16.0/22
IP: 103.227.120.0/22
IP: 103.229.148.0/22
IP: 103.234.56.0/22
IP: 202.90.20.0/22
IP: 2403:4280::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:16:b0:47:f2:99:8b:33:f5:89:73:77:9b:96:6a:25:50:9e:6a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 16 06:29:51 2026 GMT
Not After : Apr 15 06:34:51 2027 GMT
Subject: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:c7:af:fb:e5:ed:c1:5a:18:b1:de:4f:a6:
6f:53:a2:34:d3:4b:ad:33:00:86:dc:54:b4:58:3a:
e4:80:c1:98:b9:6b:ac:83:9d:30:58:44:30:07:c3:
7b:5c:64:93:a6:1b:a7:bc:d2:8c:69:62:c7:c1:8c:
c4:cf:59:d7:a9:33:95:91:15:7b:5c:f7:fc:14:c7:
17:c1:a0:2f:47:4c:74:e3:c9:99:64:0d:30:bc:1c:
db:57:d3:f6:d1:10:d1:d8:8d:7e:4a:72:4a:ce:88:
1a:35:80:9c:6c:0a:b9:23:7c:60:2a:7e:6a:62:1c:
05:95:b9:38:6f:0d:60:c6:5d:7c:49:b4:fd:35:36:
ad:60:22:17:9a:ea:17:81:ea:11:9c:17:24:2d:51:
7a:fc:09:df:5b:e0:b1:8e:ba:13:1b:f0:9b:fb:90:
83:fe:b2:d0:56:da:74:f9:a5:73:03:ec:f0:97:69:
cf:bf:23:13:4d:eb:4f:ef:1b:36:39:8e:d2:6f:b8:
17:89:ce:d7:cc:6b:a7:eb:30:32:8b:70:68:b7:ed:
c7:54:c5:04:52:3d:fb:27:68:c2:42:1b:ee:64:cc:
5e:f1:7c:73:15:7e:66:36:76:d0:ff:e3:e3:b1:18:
fc:78:67:0b:2b:d7:f3:7a:27:d8:bd:72:44:23:56:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.240.0/20
43.231.32.0/20
43.231.80.0-43.231.111.255
43.231.140.0-43.231.183.255
45.251.16.0/22
103.227.120.0/22
103.229.148.0/22
103.234.56.0/22
202.90.20.0/22
IPv6:
2403:4280::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59045
131537
131557
Signature Algorithm: sha256WithRSAEncryption
98:0f:2f:88:5c:39:20:38:5d:1d:3b:2c:96:17:e6:8f:69:43:
9b:ad:b4:71:5f:46:90:ab:f9:73:7a:94:1a:ac:8f:72:c6:8d:
66:fc:5f:d4:46:e4:ee:f2:5c:d3:8e:d7:08:51:b4:8b:e6:ca:
b6:e1:62:51:07:f0:b8:10:73:f3:75:16:68:2f:d7:48:e8:0e:
e9:69:93:04:67:35:df:dc:af:82:28:83:8b:f3:2d:e5:91:ab:
aa:f4:51:46:3f:8d:b2:0a:09:a1:f3:39:b3:36:94:aa:07:7c:
6b:f8:2a:b0:d8:2f:78:15:ab:db:95:58:10:98:60:89:6b:40:
98:ab:d9:a3:7b:d0:33:3b:e0:67:92:d7:a1:cd:51:5a:2a:a5:
16:69:ac:6c:93:14:e8:9b:58:28:72:6f:69:c2:ab:15:4f:87:
5d:74:7e:d8:39:74:b8:ca:17:74:1d:de:61:79:40:2e:51:3a:
0e:f1:76:f3:85:4c:2c:8d:bc:61:ba:e8:2c:43:d3:ef:f5:8e:
6c:b3:11:c5:7a:54:4b:97:75:0c:a6:16:0d:af:8d:74:64:3e:
09:c8:07:4a:03:b5:19:52:5a:57:33:d7:fa:cb:7e:dd:82:25:
68:62:f6:f3:44:45:f2:4a:18:f6:a2:20:bb:df:51:0d:2f:15:
c3:43:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:15 2026 by rpki-client