Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer
File:                     E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer (raw, json)
Hash identifier:          CvV6godnBdfZWm2HjlTA183u/KTdg5e5jFFFy/7o6D8=
Subject key identifier:   E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       753BF5469E87913818389D75FE0329059C2EDD34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 16 Apr 2026 05:34:25 +0000
Certificate not after:    Thu 15 Apr 2027 05:39:25 +0000
Subordinate resources:    AS: 23851
                          IP: 211.158.0.0/16
                          IP: 2001:f88::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3b:f5:46:9e:87:91:38:18:38:9d:75:fe:03:29:05:9c:2e:dd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 16 05:34:25 2026 GMT
            Not After : Apr 15 05:39:25 2027 GMT
        Subject: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:ac:b2:41:78:e5:c3:f0:6a:58:1a:3f:db:
                    12:95:d0:82:27:fa:ab:6f:5c:eb:ca:bf:a9:7c:49:
                    86:8d:69:65:14:80:cd:ae:5d:6f:d5:a1:42:ec:a8:
                    ae:fa:bd:ad:c8:f0:3a:78:fa:49:31:21:62:c7:e6:
                    19:c2:f2:56:1d:67:7c:2f:1c:c1:1d:21:a9:98:de:
                    8b:49:40:bf:26:f3:05:fc:76:9d:fc:bd:79:b6:87:
                    f4:bb:4f:66:b7:a4:ee:2b:8c:8f:8b:59:3b:6d:cc:
                    58:4b:8f:a6:06:c8:bc:c4:06:59:a6:a2:66:51:e8:
                    2b:ca:5a:5e:b5:b6:09:56:3e:0f:84:a7:3f:c7:6a:
                    8d:49:3f:2b:ca:3f:1f:5b:9c:53:15:13:51:9b:f4:
                    f1:f0:1c:01:3e:8b:32:44:2c:c2:05:68:4d:64:39:
                    4f:bb:1e:de:85:e0:47:4d:43:7c:d5:34:28:1c:6c:
                    77:54:7a:18:95:80:33:0f:17:6e:42:8e:3f:36:61:
                    8d:8b:65:27:25:95:b1:a5:31:49:28:fb:8c:5f:fc:
                    6d:b9:c6:9b:53:38:c2:23:15:f9:7c:6e:9f:1a:a8:
                    27:e1:69:6d:e3:93:69:2f:04:34:e9:93:eb:45:31:
                    f7:d2:21:04:e0:11:90:d2:fa:8d:d8:b1:04:df:bc:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.158.0.0/16
                IPv6:
                  2001:f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23851

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:aa:64:12:a2:c9:50:e4:64:52:21:a2:de:b2:35:e2:c5:
         00:44:bb:67:47:5a:2b:4d:e9:9f:dc:f4:8e:43:89:06:11:24:
         c1:56:c6:1c:44:be:42:80:86:ad:63:87:fb:a6:5c:53:74:42:
         d8:0a:55:8b:fa:4e:0f:37:f9:8f:7b:51:c2:e8:16:36:5f:e2:
         ed:fb:26:cc:62:99:aa:96:b5:d7:d9:3b:3f:6b:37:53:be:ba:
         11:3a:f8:57:71:bd:72:27:7e:39:fb:8f:24:11:a8:ef:1c:e0:
         7c:ac:4a:1a:2a:c7:2c:7e:5c:3f:e4:f6:ac:cb:f9:10:a1:e5:
         ff:03:45:a1:86:82:ce:a2:c5:de:12:04:75:4a:2c:bd:19:6c:
         80:9b:0c:cc:0e:5e:f3:92:b8:85:c6:3f:8f:8b:e8:89:9f:1a:
         f6:3c:db:a0:19:48:9f:bd:11:60:e1:f4:b5:19:9a:db:27:dc:
         cf:e0:d2:b4:60:cc:d6:5e:c0:98:c2:f1:84:d5:16:71:3f:c2:
         6e:e0:cb:0e:74:9a:ec:93:73:67:7f:29:a3:09:c5:db:4d:fe:
         2e:33:35:40:1b:9b:06:64:2d:29:e6:15:ce:e6:4b:8a:99:ee:
         ee:2f:aa:2c:c2:13:d4:9c:a9:e6:12:9d:42:09:d6:9e:22:39:
         2f:13:e1:7f
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgIUdTv1Rp6HkTgYOJ11/gMpBZwu3TQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA1MzQyNVoX
DTI3MDQxNTA1MzkyNVowMzExMC8GA1UEAxMoRTlBN0Q5QjY4RkYwNDBCNUNFRTJD
NEY2NTY5OTc0MkU0QkQwRURFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwPrLJBeOXD8GpYGj/bEpXQgif6q29c68q/qXxJho1pZRSAza5db9WhQuyo
rvq9rcjwOnj6STEhYsfmGcLyVh1nfC8cwR0hqZjei0lAvybzBfx2nfy9ebaH9LtP
Zrek7iuMj4tZO23MWEuPpgbIvMQGWaaiZlHoK8paXrW2CVY+D4SnP8dqjUk/K8o/
H1ucUxUTUZv08fAcAT6LMkQswgVoTWQ5T7se3oXgR01DfNU0KBxsd1R6GJWAMw8X
bkKOPzZhjYtlJyWVsaUxSSj7jF/8bbnGm1M4wiMV+XxunxqoJ+FpbeOTaS8ENOmT
60Ux99IhBOARkNL6jdixBN+8P1sCAwEAAaOCAsMwggK/MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOmn2baP8EC1zuLE9laZdC5L0O3gMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NzAzMTcyNTU0NjAxMjY3My8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDMxNzI1NTQ2MDEyNjcz
LzAvRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0QkQwRURFMC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH
AQcBAf8EHjAcMAsEAgABMAUDAwDTnjANBAIAAjAHAwUAIAEPiDAZBggrBgEFBQcB
CAEB/wQKMAigBjAEAgJdKzANBgkqhkiG9w0BAQsFAAOCAQEAaZ2qZBKiyVDkZFIh
ot6yNeLFAES7Z0daK03pn9z0jkOJBhEkwVbGHES+QoCGrWOH+6ZcU3RC2ApVi/pO
Dzf5j3tRwugWNl/i7fsmzGKZqpa119k7P2s3U766ETr4V3G9cid+OfuPJBGo7xzg
fKxKGirHLH5cP+T2rMv5EKHl/wNFoYaCzqLF3hIEdUosvRlsgJsMzA5e85K4hcY/
j4voiZ8a9jzboBlIn70RYOH0tRma2yfcz+DStGDM1l7AmMLxhNUWcT/CbuDLDnSa
7JNzZ38pownF203+LjM1QBubBmQtKeYVzuZLipnu7i+qLMIT1Jyp5hKdQgnWniI5
LxPhfw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:06:18 2026 by rpki-client