Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
File: BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer (raw, json)
Hash identifier: 8watK1j6RkOJvdQkEoVwcGzGDUCC/ZqtXSPi4nkZmsM=
Subject key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5B3753D6D87201A29995B020001060A9A5D4370C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 16 Apr 2026 02:21:49 +0000
Certificate not after: Thu 15 Apr 2027 02:26:49 +0000
Subordinate resources: AS: 63539
IP: 43.227.136.0/22
IP: 103.46.244.0/22
IP: 103.95.52.0/22
IP: 103.95.152.0/22
IP: 103.95.216.0/22
IP: 103.98.80.0/22
IP: 103.98.196.0/22
IP: 103.98.240.0/21
IP: 103.99.116.0 -- 103.99.123.255
IP: 103.99.232.0/21
IP: 103.100.248.0/21
IP: 103.101.144.0/21
IP: 103.102.76.0 -- 103.102.83.255
IP: 103.102.208.0/21
IP: 103.104.36.0 -- 103.104.43.255
IP: 103.104.252.0 -- 103.105.3.255
IP: 103.105.180.0 -- 103.105.187.255
IP: 103.106.36.0 -- 103.106.43.255
IP: 103.106.128.0/21
IP: 103.106.252.0 -- 103.107.3.255
IP: 103.107.28.0 -- 103.107.35.255
IP: 2401:9dc0::/32
IP: 2401:9e40::/32
IP: 2401:a4c0::/32
IP: 2401:a540::/32
IP: 2401:ad40::/32
IP: 2401:adc0::/32
IP: 2401:b4c0::/32
IP: 2401:b540::/32
IP: 2401:c640::/32
IP: 2401:c6c0::/32
IP: 2401:d0c0::/32
IP: 2401:d140::/32
IP: 2401:e0c0::/32
IP: 2401:e140::/32
IP: 2401:e240::/32
IP: 2401:e940::/32
IP: 2401:e9c0::/32
IP: 2401:ffc0::/32
IP: 2402:440::/32
IP: 2402:2440::/32
IP: 2402:24c0::/32
IP: 2402:3140::/32
IP: 2402:31c0::/32
IP: 2402:39c0::/32
IP: 2402:3a40::/32
IP: 2402:4340::/32
IP: 2402:43c0::/32
IP: 2402:4a40::/32
IP: 2402:4ac0::/32
IP: 2402:4bc0::/32
IP: 2402:4c40::/32
IP: 2402:8940::/32
IP: 2402:89c0::/32
IP: 2402:ab80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:37:53:d6:d8:72:01:a2:99:95:b0:20:00:10:60:a9:a5:d4:37:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 16 02:21:49 2026 GMT
Not After : Apr 15 02:26:49 2027 GMT
Subject: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:5a:b0:9f:f0:7d:ea:80:42:22:b5:7c:09:
3f:ed:cb:28:7b:38:d4:50:5f:3b:50:c1:a7:6d:33:
7d:6e:79:21:0f:9b:f4:7f:aa:bd:79:10:89:f9:02:
1d:e2:ff:02:b6:6e:72:d3:4f:63:b5:9d:8d:ab:81:
19:cb:aa:24:28:e3:d7:bd:97:2d:fa:1a:fc:d4:83:
31:1a:28:8e:26:c6:19:90:e3:09:bc:41:0e:56:25:
21:e6:bb:31:3c:12:fb:e8:14:8e:fc:37:27:06:d6:
94:f0:f6:96:70:70:38:32:22:0c:4a:43:9e:ce:ec:
8a:dc:e3:bf:df:6b:50:2f:91:ea:8f:ab:93:0c:a9:
40:96:f7:66:f0:33:a9:a0:70:71:f4:ae:a2:3b:23:
73:c8:3d:c4:c4:10:09:41:a8:bf:70:80:19:a5:72:
80:06:b0:e8:94:fe:10:1e:2a:b3:88:90:75:47:fc:
c0:14:e7:cc:52:c5:0c:7b:88:c4:ff:36:16:12:38:
1a:a7:22:24:7f:45:92:f0:55:4e:b7:04:92:5f:b6:
de:d5:54:a6:ea:99:9b:b5:fe:40:75:11:c3:7a:35:
e7:d1:da:39:38:fc:6b:2b:9d:67:3e:15:af:78:8f:
8e:7a:14:c6:aa:e3:c8:70:7d:2b:82:54:00:40:1d:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.136.0/22
103.46.244.0/22
103.95.52.0/22
103.95.152.0/22
103.95.216.0/22
103.98.80.0/22
103.98.196.0/22
103.98.240.0/21
103.99.116.0-103.99.123.255
103.99.232.0/21
103.100.248.0/21
103.101.144.0/21
103.102.76.0-103.102.83.255
103.102.208.0/21
103.104.36.0-103.104.43.255
103.104.252.0-103.105.3.255
103.105.180.0-103.105.187.255
103.106.36.0-103.106.43.255
103.106.128.0/21
103.106.252.0-103.107.3.255
103.107.28.0-103.107.35.255
IPv6:
2401:9dc0::/32
2401:9e40::/32
2401:a4c0::/32
2401:a540::/32
2401:ad40::/32
2401:adc0::/32
2401:b4c0::/32
2401:b540::/32
2401:c640::/32
2401:c6c0::/32
2401:d0c0::/32
2401:d140::/32
2401:e0c0::/32
2401:e140::/32
2401:e240::/32
2401:e940::/32
2401:e9c0::/32
2401:ffc0::/32
2402:440::/32
2402:2440::/32
2402:24c0::/32
2402:3140::/32
2402:31c0::/32
2402:39c0::/32
2402:3a40::/32
2402:4340::/32
2402:43c0::/32
2402:4a40::/32
2402:4ac0::/32
2402:4bc0::/32
2402:4c40::/32
2402:8940::/32
2402:89c0::/32
2402:ab80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63539
Signature Algorithm: sha256WithRSAEncryption
5d:ab:3d:e1:e0:0f:5f:2f:8c:46:0f:78:ea:3a:6e:51:ec:4b:
9a:0c:9d:95:86:7c:f4:a2:68:30:00:38:4f:18:0e:12:7b:57:
71:f0:27:25:0a:53:f9:e5:65:91:fd:f6:f3:40:c7:0a:ab:44:
6f:17:da:16:35:50:f6:fb:aa:8f:b6:d4:d7:58:f1:07:49:20:
70:81:28:b1:59:01:74:dd:04:22:45:2d:2d:c9:9c:e8:21:07:
ce:fc:7e:9f:a2:b9:0c:b4:7b:5b:b0:0e:a7:02:ba:48:a2:44:
21:d6:f9:70:fd:c9:f4:3b:9b:e1:ea:35:1e:06:38:77:e7:4b:
60:ce:bc:61:34:22:91:e7:ad:d0:d3:87:0f:54:f8:1a:fe:26:
e2:e0:4e:ed:58:79:6a:19:6c:75:31:64:99:4c:84:82:f9:72:
e0:77:cf:fb:ed:44:52:dd:4e:9a:64:c6:e9:70:1b:5c:a5:e9:
49:cb:75:c2:f8:3b:75:64:ea:70:6e:c9:b2:bb:ef:54:38:2a:
25:a9:19:81:9a:db:8e:dc:d5:9f:d7:f3:15:61:02:c3:a6:c4:
42:33:6f:ca:3f:9c:37:f2:4b:0d:13:5b:ef:22:90:7c:cd:36:
fb:e2:5a:8e:de:0c:0c:40:74:47:c7:7c:2f:ed:bf:a2:1e:0b:
df:bd:0c:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:36 2026 by rpki-client