Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer (raw, json)
Hash identifier: PCMZYxaeZrJVRYTaC6E9HAC+KYfizs+EksDitidUknU=
Subject key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0FB6F26A70B5C636D3640B5B6FE2F718046CFD0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 01 Jun 2026 02:05:20 +0000
Certificate not after: Mon 31 May 2027 02:10:20 +0000
Subordinate resources: AS: 131486
AS: 137753
IP: 1.118.0.0/16
IP: 43.241.112.0/22
IP: 101.124.0.0/16
IP: 103.37.72.0/22
IP: 103.224.220.0/22
IP: 111.228.0.0/16
IP: 114.67.64.0 -- 114.67.255.255
IP: 116.196.64.0/18
IP: 116.198.0.0/16
IP: 117.72.0.0/16
IP: 122.12.0.0/16
IP: 123.62.0.0/16
IP: 124.69.0.0/16
IP: 2402:db40::/32
IP: 2403:1ec0::/32
IP: 240f:c000::/24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b6:f2:6a:70:b5:c6:36:d3:64:0b:5b:6f:e2:f7:18:04:6c:fd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 1 02:05:20 2026 GMT
Not After : May 31 02:10:20 2027 GMT
Subject: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:1a:a6:18:ea:29:d4:6c:62:b1:ba:ec:f9:
b1:21:4e:3f:45:2a:9f:77:34:a3:26:13:7a:90:f6:
38:78:1c:a5:79:d4:47:f4:70:de:b6:c5:75:92:b6:
c2:a2:ed:ce:92:85:31:f7:6e:ae:96:dd:06:8e:a6:
62:97:70:bb:3b:d4:89:ec:82:e1:ac:80:fa:6b:29:
93:40:56:d6:af:2a:c8:8c:2e:b1:11:47:9b:d1:9a:
bf:6a:cf:26:5e:48:e8:c2:a0:bd:13:2e:c1:77:5b:
d1:54:1d:f5:a1:bb:c0:9e:fd:00:5f:49:aa:53:55:
ba:90:19:10:2c:16:db:71:ec:6d:ef:f0:b7:f4:00:
74:b9:41:fb:72:11:b6:f5:90:6f:f9:03:a6:27:26:
cd:3a:4e:8a:e6:7c:dc:b0:64:91:9a:40:36:b6:f7:
eb:b7:93:66:09:92:02:61:e9:f9:f6:bf:07:05:55:
d4:ba:64:ed:a3:bd:4c:07:2d:a8:4f:d3:94:26:6a:
98:01:b4:84:73:e9:60:47:7e:95:50:6a:8d:1f:97:
be:1f:47:19:f4:2f:b3:ab:38:e0:1d:d0:f6:6f:ba:
d6:c7:62:22:90:a6:76:3b:75:de:bf:e0:46:02:d1:
76:5e:7b:08:2d:a5:94:3b:cf:6c:db:8f:eb:19:49:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.118.0.0/16
43.241.112.0/22
101.124.0.0/16
103.37.72.0/22
103.224.220.0/22
111.228.0.0/16
114.67.64.0-114.67.255.255
116.196.64.0/18
116.198.0.0/16
117.72.0.0/16
122.12.0.0/16
123.62.0.0/16
124.69.0.0/16
IPv6:
2402:db40::/32
2403:1ec0::/32
240f:c000::/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131486
137753
Signature Algorithm: sha256WithRSAEncryption
5b:b2:0e:da:ee:56:fc:75:b4:66:cc:1b:df:6a:e2:52:cc:c8:
64:9e:64:eb:7a:78:f4:cc:78:3c:eb:10:9c:99:43:99:40:9c:
eb:5f:be:8c:17:b9:30:73:a5:eb:28:7a:41:fc:2f:9f:c6:c3:
76:82:b8:cc:7d:ce:55:ae:c4:5e:ec:34:e5:62:a8:d6:9a:85:
2c:aa:c9:e0:fd:89:89:0a:f5:7d:56:a1:10:3c:6b:ba:f3:80:
5b:68:22:ba:57:97:d3:8f:fd:53:69:9c:13:1f:c1:db:a2:39:
59:51:a1:7c:99:d6:ff:2b:02:6f:15:4f:91:21:7b:57:4e:50:
20:1c:e2:b6:5c:9f:c5:ef:e3:ed:2e:f6:7b:ee:c1:09:89:bd:
f3:04:85:9e:ac:2e:ec:7a:03:fd:22:f7:b5:b9:47:c6:40:11:
be:7b:de:f7:f2:f9:53:a4:0d:cf:d0:d4:90:d7:98:49:a7:b8:
bb:e7:f0:9b:11:b4:1c:e0:08:15:82:d2:f3:bd:04:82:d6:15:
2d:f9:47:d3:e3:43:55:a9:ed:0c:93:db:54:9a:50:ba:46:c0:
b0:d4:0c:56:08:e2:04:c5:20:d2:b5:8e:16:1f:ae:c8:6e:40:
e6:73:c2:77:b1:8a:70:c2:77:c5:64:74:9d:13:1d:8e:24:f7:
02:5c:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:14 2026 by rpki-client