Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer
File:                     BCAF99574819590D7B82611FFD862F69D879E4F4.cer (raw, json)
Hash identifier:          GpYXt8I7LvfK9cMBzM3MBAlMFQIxha5Y7KEIXu3yBzI=
Subject key identifier:   BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       72FC7BF83C470D02EFD1B6300287B0445E252A67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 29 May 2026 01:24:47 +0000
Certificate not after:    Fri 28 May 2027 01:29:47 +0000
Subordinate resources:    AS: 139138
                          IP: 103.150.164.0/23
                          IP: 2406:b640::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fc:7b:f8:3c:47:0d:02:ef:d1:b6:30:02:87:b0:44:5e:25:2a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 29 01:24:47 2026 GMT
            Not After : May 28 01:29:47 2027 GMT
        Subject: CN=BCAF99574819590D7B82611FFD862F69D879E4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:8b:f4:f0:f1:5b:f2:41:f4:98:b9:f3:8b:
                    48:8a:14:d7:ba:97:98:8d:47:51:64:c7:91:16:ed:
                    bd:02:9b:21:fd:f4:6f:64:e4:3c:33:d1:e4:44:26:
                    f8:98:00:c9:bb:3d:13:2f:bf:8f:d1:38:15:2f:bd:
                    e5:f3:c2:9b:58:d3:cd:20:5a:c0:f3:1a:34:29:95:
                    ef:18:36:3e:91:7d:98:f6:43:1f:29:5b:7b:e3:dd:
                    1d:08:ef:9d:6f:82:50:11:68:de:5e:63:a9:49:f5:
                    f8:db:b4:6d:33:03:b1:d0:79:3e:19:32:f3:21:de:
                    82:60:ed:7c:44:27:a1:48:87:0f:ca:c6:eb:42:80:
                    a8:2d:57:77:07:9c:d4:65:17:18:be:41:41:25:d8:
                    6f:2f:2d:f0:8c:24:dd:4e:fb:85:af:47:46:16:4b:
                    c3:f7:e4:ce:16:1d:2d:ad:f0:23:51:cf:ed:9a:cb:
                    48:2f:41:02:2e:35:89:68:ad:bb:24:e1:af:72:14:
                    74:a9:87:df:43:4b:98:d8:93:0b:89:a7:a3:01:85:
                    f4:d7:81:69:dc:d3:a7:37:b2:75:fa:87:de:e4:39:
                    5e:1e:3b:dc:86:79:fb:4f:c0:d3:01:7c:54:f7:8a:
                    3c:8f:60:06:12:f9:fb:c8:3d:cf:89:c9:2b:bb:f8:
                    46:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.164.0/23
                IPv6:
                  2406:b640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139138

    Signature Algorithm: sha256WithRSAEncryption
         67:71:0e:1a:6c:df:b9:a5:2f:63:64:f8:d2:12:49:21:09:cd:
         72:e0:72:10:b6:ea:fe:c9:39:49:2d:93:6e:d0:0b:fd:5a:b5:
         fa:6b:cf:30:fb:a3:48:a1:29:6a:a9:28:50:8c:04:6c:78:40:
         51:f6:97:6c:62:45:a0:b7:b6:1e:c1:2c:1a:90:44:3b:e0:cc:
         2f:9d:2d:52:90:11:ab:5a:77:ac:5e:9e:7c:61:c3:87:15:39:
         24:26:2b:51:b6:58:6a:2b:01:4a:67:20:f7:3b:97:65:a4:55:
         ce:46:fc:eb:f4:e2:38:93:d2:b6:0d:99:16:87:92:05:06:cc:
         fb:11:e5:8f:ff:f1:27:e9:8a:ef:1f:84:a0:06:ce:a5:f2:9d:
         c2:76:e7:10:04:45:95:41:1f:6e:b6:37:b8:87:d0:92:a2:9d:
         89:95:7f:c7:13:2b:8d:69:40:95:74:a7:a0:03:d1:99:55:6a:
         f7:e6:5e:79:6e:49:49:e9:e6:63:04:c0:f2:39:90:52:d2:39:
         5b:f5:67:58:1c:44:23:34:c3:5e:fa:6c:9c:27:ab:6c:89:1b:
         1a:80:a3:2b:ce:5f:73:56:08:72:2a:2c:c5:d0:56:60:f5:8c:
         98:0d:a1:db:67:ed:de:de:34:6e:f4:4e:69:23:d9:38:0d:18:
         b9:62:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:32 2026 by rpki-client