Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
File:                     E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer (raw, json)
Hash identifier:          aNCOqZE4Jp7FjnQQcC30xK6R0CsLSWuT6Gzf7Xrz28A=
Subject key identifier:   E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       111331AD42AF6C12FA2169EDFF0DFFAAB97C201A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 17 Apr 2026 06:41:59 +0000
Certificate not after:    Fri 16 Apr 2027 06:46:59 +0000
Subordinate resources:    AS: 23840
                          IP: 43.225.252.0/22
                          IP: 103.44.224.0/22
                          IP: 211.156.48.0/20
                          IP: 2402:32e0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:13:31:ad:42:af:6c:12:fa:21:69:ed:ff:0d:ff:aa:b9:7c:20:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 17 06:41:59 2026 GMT
            Not After : Apr 16 06:46:59 2027 GMT
        Subject: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:eb:77:d7:43:58:25:0c:1e:4a:a3:9c:dd:
                    b8:02:42:6d:39:ba:6c:94:eb:01:0f:f7:58:86:08:
                    76:51:55:ca:ba:1e:04:47:56:96:8f:8f:41:77:81:
                    c0:a2:30:7f:eb:06:18:40:ce:19:3b:b0:ee:1a:9e:
                    5b:48:5f:2d:8c:89:3d:52:77:e3:f0:98:3b:e9:7f:
                    ba:49:a6:2e:88:3b:7c:75:7c:26:bb:dd:58:e3:79:
                    b2:4a:03:f0:cd:00:94:92:11:f6:13:90:cb:34:50:
                    48:ed:46:be:22:ec:6a:04:65:24:e2:a6:b1:46:a7:
                    ac:ab:43:f4:81:5e:a9:d0:9d:9d:fe:23:15:ce:5c:
                    c7:a0:a1:89:94:ad:14:b6:41:b6:d4:1f:4e:d6:fb:
                    1d:d5:a3:3b:d4:5b:a6:59:3d:3d:bc:d5:58:83:db:
                    a8:49:19:d7:70:40:89:f6:c1:7b:7f:9c:27:ad:c7:
                    1d:65:ce:fb:0f:6a:f7:24:ce:af:a1:35:69:9c:4a:
                    a1:ab:fb:6e:cd:73:73:6d:75:09:3d:57:f6:b9:50:
                    5e:80:c5:b5:7a:06:f8:bc:7c:e4:37:71:36:ff:79:
                    d1:1e:b1:8e:b8:32:eb:3a:4b:d6:80:99:76:aa:45:
                    62:46:4d:46:c2:a7:8f:af:02:6f:a7:60:a2:ef:9d:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.252.0/22
                  103.44.224.0/22
                  211.156.48.0/20
                IPv6:
                  2402:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23840

    Signature Algorithm: sha256WithRSAEncryption
         3c:a2:1a:b9:3a:90:c2:3c:94:65:55:79:0d:94:48:0c:34:c4:
         51:3a:b5:af:67:60:d0:c8:24:76:ae:f3:eb:05:b5:ed:4b:ec:
         41:63:b0:cd:49:b3:9b:c5:74:73:22:e0:d5:d2:f3:f8:ad:db:
         7e:3b:91:be:8d:cb:f0:94:2f:c0:b0:85:ab:d3:11:f5:bd:2a:
         5f:0e:fa:c6:23:08:37:36:95:27:ea:7e:b3:87:53:96:b4:34:
         32:8f:f3:b0:a4:90:46:09:6b:49:61:3b:f0:ac:d1:c5:29:3d:
         dd:29:59:74:f5:f2:78:cf:06:65:7f:47:0b:02:3b:dc:54:dc:
         05:a8:3f:ce:7b:eb:ec:4b:22:12:15:3c:33:7e:89:ee:14:11:
         90:bf:88:15:e4:66:dc:84:96:d7:3d:be:01:92:b1:6d:c6:d3:
         a9:ab:63:f6:cb:71:75:0e:9c:f7:bd:26:09:ad:0f:63:b7:e0:
         99:2e:a9:0a:85:c1:b5:d0:df:27:84:b2:b4:d0:eb:58:ba:1b:
         e9:b7:87:98:b6:ae:1e:c8:22:b2:24:d8:16:e2:7d:0c:e7:22:
         3c:39:b0:ee:8e:68:36:cb:63:02:76:10:ff:1e:2a:52:0e:7d:
         cd:18:7b:a8:7a:37:22:c6:ce:a3:bb:47:f7:69:d3:25:58:c3:
         43:6c:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:11 2026 by rpki-client