Certificate
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
File: D55490FB885552307A1D271E02513B4D423A90AE.cer (raw, json)
Hash identifier: yyztfmG92duWsx7rU0bnZBOobWwVBmVGfAZqUfxv7sU=
Subject key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 4D941005EDCFC5D1CF17E60F0D5C1A19362BF5B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 30 Oct 2026 07:45:45 +0000
Certificate not after: Fri 29 Oct 2027 07:50:45 +0000
Subordinate resources: AS: 17442
IP: 43.243.232.0/22
IP: 45.250.12.0 -- 45.250.19.255
IP: 45.250.76.0 -- 45.250.99.255
IP: 45.250.104.0 -- 45.250.151.255
IP: 61.29.128.0/18
IP: 103.75.144.0/22
IP: 103.218.8.0 -- 103.218.23.255
IP: 103.218.28.0 -- 103.218.91.255
IP: 103.254.188.0/22
IP: 121.201.128.0/17
IP: 123.103.0.0 -- 123.103.23.255
IP: 123.103.28.0 -- 123.103.127.255
IP: 125.171.0.0/16
IP: 203.130.32.0/19
IP: 203.212.0.0/20
IP: 210.185.192.0/18
IP: 210.192.96.0/19
IP: 211.156.176.0/20
IP: 220.242.0.0/15
IP: 2400:7680::/32
IP: 2406:cd80::/32
IP: 2406:ce80::/32
IP: 2406:cf80::/32
IP: 2406:d080::/32
IP: 2406:d180::/32
IP: 2406:d280::/32
IP: 2406:d380::/32
IP: 2406:d480::/32
IP: 2406:d580::/32
IP: 2406:d680::/32
IP: 2406:d780::/32
IP: 2406:d880::/32
IP: 2406:d980::/32
IP: 2406:db80::/32
IP: 2406:dc80::/32
IP: 2406:de80::/32
IP: 2406:df80::/32
IP: 2406:e080::/32
IP: 2406:e180::/32
IP: 2406:e380::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 10:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:94:10:05:ed:cf:c5:d1:cf:17:e6:0f:0d:5c:1a:19:36:2b:f5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Oct 30 07:45:45 2026 GMT
Not After : Oct 29 07:50:45 2027 GMT
Subject: CN=D55490FB885552307A1D271E02513B4D423A90AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:fc:85:08:cb:99:0b:32:3d:62:d7:34:d6:
1f:96:e2:f8:cd:28:b9:1f:43:34:a1:c0:c4:45:88:
c9:99:2b:71:91:b6:1e:9d:24:fa:20:73:fe:be:b6:
2a:a3:5a:5a:61:e2:52:a0:70:ab:e1:37:87:1d:75:
d1:60:74:fb:dc:ba:73:5a:4e:cf:5e:5a:4d:61:f3:
3c:4b:88:36:5d:10:f2:d4:f0:ee:2c:ca:30:b0:19:
51:0c:79:49:a6:61:e6:0f:51:7b:b9:10:23:19:59:
e0:e6:36:95:a5:1c:df:48:f9:b7:ca:00:57:bb:23:
17:e6:db:fc:7f:91:cd:17:d2:b8:ad:f2:6e:21:fe:
e9:55:59:c2:c3:25:da:e9:87:33:1d:5c:00:a9:8e:
3c:23:5d:09:45:7d:b1:2a:72:bd:3a:c2:b5:8f:2f:
f9:44:c0:5c:c2:3f:78:fb:6b:ee:ce:9c:06:7e:8f:
98:f4:ce:1d:6e:69:c1:d5:a0:68:56:5d:24:05:e7:
7a:7e:6d:90:f7:d8:f8:5e:ee:be:80:f4:04:b9:9f:
d8:eb:39:05:16:d2:13:b0:a1:43:ff:13:14:cf:df:
e8:f4:d6:7b:78:95:de:a3:91:10:05:e3:17:85:10:
5c:95:01:ff:de:3c:38:9c:36:20:7b:f0:c3:32:b6:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.243.232.0/22
45.250.12.0-45.250.19.255
45.250.76.0-45.250.99.255
45.250.104.0-45.250.151.255
61.29.128.0/18
103.75.144.0/22
103.218.8.0-103.218.23.255
103.218.28.0-103.218.91.255
103.254.188.0/22
121.201.128.0/17
123.103.0.0-123.103.23.255
123.103.28.0-123.103.127.255
125.171.0.0/16
203.130.32.0/19
203.212.0.0/20
210.185.192.0/18
210.192.96.0/19
211.156.176.0/20
220.242.0.0/15
IPv6:
2400:7680::/32
2406:cd80::/32
2406:ce80::/32
2406:cf80::/32
2406:d080::/32
2406:d180::/32
2406:d280::/32
2406:d380::/32
2406:d480::/32
2406:d580::/32
2406:d680::/32
2406:d780::/32
2406:d880::/32
2406:d980::/32
2406:db80::/32
2406:dc80::/32
2406:de80::/32
2406:df80::/32
2406:e080::/32
2406:e180::/32
2406:e380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17442
Signature Algorithm: sha256WithRSAEncryption
60:00:35:47:7b:e9:74:61:7a:0e:90:08:fc:a0:df:5c:c2:a7:
af:78:42:fe:4d:80:d2:f7:34:1b:0f:24:90:7f:28:64:8c:bb:
f8:c4:ed:5f:88:37:05:8c:bd:db:f6:59:17:b4:31:c3:7b:c0:
da:8d:be:4a:23:af:3b:b4:7c:6a:1b:d5:1e:90:c0:27:d8:d2:
8c:7d:7a:0e:6c:56:8c:c8:81:44:c8:8a:52:c4:da:45:a0:92:
85:fa:60:2b:15:be:d8:7d:77:f1:a7:ea:7e:74:ab:f1:b8:fa:
b9:47:8e:15:b9:d8:85:97:9e:86:9e:20:cd:22:5b:82:4b:ee:
19:fd:83:ab:85:61:f4:38:31:1b:88:1e:8e:dc:1a:97:b9:3f:
ab:e1:b9:6e:e9:12:73:38:44:04:f2:d1:29:e6:b0:db:c7:0e:
5a:0a:db:dc:7f:c2:84:e9:28:f4:75:43:46:d3:a1:a4:8a:fa:
61:df:61:71:4a:eb:13:a1:f0:fa:da:8f:a4:10:1e:b1:fa:c8:
2a:cc:de:b9:65:5b:4f:ed:34:49:f2:85:4f:1d:04:bb:aa:75:
ce:a4:ff:6a:63:e7:e5:4e:bf:27:f0:43:91:fd:a5:f0:d9:06:
00:78:3d:db:67:54:ac:68:91:7a:15:f6:25:49:67:83:1a:f1:
58:9e:17:8f
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUTZQQBe3PxdHPF+YPDVwaGTYr9bIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MTAzMDA3NDU0NVoX
DTI3MTAyOTA3NTA0NVowMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQy
NzFFMDI1MTNCNEQ0MjNBOTBBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMAr/IUIy5kLMj1i1zTWH5bi+M0ouR9DNKHAxEWIyZkrcZG2Hp0k+iBz/r62
KqNaWmHiUqBwq+E3hx110WB0+9y6c1pOz15aTWHzPEuINl0Q8tTw7izKMLAZUQx5
SaZh5g9Re7kQIxlZ4OY2laUc30j5t8oAV7sjF+bb/H+RzRfSuK3ybiH+6VVZwsMl
2umHMx1cAKmOPCNdCUV9sSpyvTrCtY8v+UTAXMI/ePtr7s6cBn6PmPTOHW5pwdWg
aFZdJAXnen5tkPfY+F7uvoD0BLmf2Os5BRbSE7ChQ/8TFM/f6PTWe3iV3qOREAXj
F4UQXJUB/948OJw2IHvwwzK245kCAwEAAaOCA/swggP3MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFNVUkPuIVVIweh0nHgJRO01COpCuMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU3NjcyMzM3MTk4Mjg1MC8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxOTgyODUw
LzAvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggFjBggrBgEF
BQcBBwEB/wSCAVIwggFOMIGuBAIAATCBpwMEAivz6DAMAwQCLfoMAwQCLfoQMAwD
BAIt+kwDBAIt+mAwDAMEAy36aAMEAy36kAMEBj0dgAMEAmdLkDAMAwQDZ9oIAwQD
Z9oQMAwDBAJn2hwDBAJn2lgDBAJn/rwDBAd5yYAwCwMDAHtnAwQDe2cQMAwDBAJ7
ZxwDBAd7ZwADAwB9qwMEBcuCIAMEBMvUAAMEBtK5wAMEBdLAYAMEBNOcsAMDAdzy
MIGaBAIAAjCBkwMFACQAdoADBQAkBs2AAwUAJAbOgAMFACQGz4ADBQAkBtCAAwUA
JAbRgAMFACQG0oADBQAkBtOAAwUAJAbUgAMFACQG1YADBQAkBtaAAwUAJAbXgAMF
ACQG2IADBQAkBtmAAwUAJAbbgAMFACQG3IADBQAkBt6AAwUAJAbfgAMFACQG4IAD
BQAkBuGAAwUAJAbjgDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJEIjANBgkqhkiG
9w0BAQsFAAOCAQEAYAA1R3vpdGF6DpAI/KDfXMKnr3hC/k2A0vc0Gw8kkH8oZIy7
+MTtX4g3BYy92/ZZF7Qxw3vA2o2+SiOvO7R8ahvVHpDAJ9jSjH16DmxWjMiBRMiK
UsTaRaCShfpgKxW+2H138afqfnSr8bj6uUeOFbnYhZeehp4gzSJbgkvuGf2Dq4Vh
9DgxG4gejtwal7k/q+G5bukSczhEBPLRKeaw28cOWgrb3H/ChOko9HVDRtOhpIr6
Yd9hcUrrE6Hw+tqPpBAesfrIKszeuWVbT+00SfKFTx0Eu6p1zqT/amPn5U6/J/BD
kf2l8NkGAHg922dUrGiRehX2JUlngxrxWJ4Xjw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:21:24 2026 by rpki-client