Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
File: EDA884A79748D57EB49366704CB6A8110E27042D.cer (raw, json)
Hash identifier: adOSvLb0ZF6wStsMaTUpVCkQjLTlPbfUZ6g2OapXnzY=
Subject key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 1DB34FFAEB86F5F31AE0CC86C0082C191078B563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 16 Apr 2026 08:53:18 +0000
Certificate not after: Thu 15 Apr 2027 08:58:18 +0000
Subordinate resources: AS: 23848
AS: 63673
AS: 138532
IP: 43.230.220.0/22
IP: 45.65.20.0/22
IP: 103.50.36.0/22
IP: 103.132.48.0/22
IP: 103.210.168.0/22
IP: 118.191.13.0 -- 118.191.15.255
IP: 118.191.24.0 -- 118.191.63.255
IP: 118.191.84.0 -- 118.191.127.255
IP: 118.191.160.0/20
IP: 118.191.209.0 -- 118.191.215.255
IP: 118.191.220.0 -- 118.191.222.255
IP: 118.191.225.0 -- 118.191.239.255
IP: 122.113.0.0/16
IP: 124.196.0.0/16
IP: 180.187.0.0/16
IP: 202.69.16.0/20
IP: 220.155.0.0/16
IP: 2401:7a00::/32
IP: 2404:7180::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b3:4f:fa:eb:86:f5:f3:1a:e0:cc:86:c0:08:2c:19:10:78:b5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 16 08:53:18 2026 GMT
Not After : Apr 15 08:58:18 2027 GMT
Subject: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:0c:6a:63:c3:12:04:e9:85:0f:85:59:0f:
f0:e4:05:f0:4a:d5:23:69:40:3f:4d:0b:9d:f9:9a:
22:df:b3:d8:f2:e3:da:a7:33:7d:0a:54:0e:87:2d:
71:a8:5a:94:1c:0d:c4:5d:11:a6:13:72:51:cc:6c:
84:65:29:9a:1f:72:fe:52:72:d0:50:9d:0f:91:29:
20:b8:e6:00:49:e3:0d:b6:27:93:b0:1d:2f:46:e3:
08:41:a6:e9:26:35:f2:3b:34:7b:9c:63:35:78:d2:
f6:c4:4e:24:c4:86:5d:91:19:cd:79:dc:a2:29:94:
7f:3f:15:bc:d1:66:53:d3:27:d6:b1:f6:d7:89:c4:
62:67:d6:4f:37:e6:9c:8f:a0:77:4e:19:52:07:b0:
9a:d1:0b:43:94:ee:58:ac:ce:13:a6:f7:32:8a:e5:
ea:0e:92:2f:cc:76:2a:76:8a:09:2f:8a:4d:ef:b5:
8c:50:a6:23:07:7a:fc:5a:03:42:5e:28:bc:c2:fd:
85:14:29:67:19:30:91:b8:0d:99:9d:8e:e9:00:4e:
f8:c3:03:e8:77:59:1c:55:b0:be:b8:97:52:63:c1:
4b:40:4b:64:b6:dd:9d:b9:68:7a:be:63:c9:64:49:
8a:84:24:c5:16:3a:08:50:71:e6:ca:e2:36:2d:94:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.220.0/22
45.65.20.0/22
103.50.36.0/22
103.132.48.0/22
103.210.168.0/22
118.191.13.0-118.191.15.255
118.191.24.0-118.191.63.255
118.191.84.0-118.191.127.255
118.191.160.0/20
118.191.209.0-118.191.215.255
118.191.220.0-118.191.222.255
118.191.225.0-118.191.239.255
122.113.0.0/16
124.196.0.0/16
180.187.0.0/16
202.69.16.0/20
220.155.0.0/16
IPv6:
2401:7a00::/32
2404:7180::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23848
63673
138532
Signature Algorithm: sha256WithRSAEncryption
16:88:6d:0d:6a:41:bb:81:f0:b3:d5:7c:7c:52:ee:82:61:e4:
9e:03:c2:62:d0:d7:9d:20:ab:3b:ea:7b:9f:eb:e2:62:1c:83:
d2:ec:60:06:0d:0c:43:8b:06:8f:8c:4e:bb:7c:d8:18:c4:2f:
8b:03:af:e5:60:ad:15:8b:48:6b:23:bc:24:91:6c:ad:ae:f7:
94:80:31:d5:da:87:36:be:d8:b6:9b:fa:8f:35:1a:81:63:d9:
2a:6f:54:b3:41:74:ae:70:f4:4b:4a:51:43:3a:8b:54:b5:cd:
4d:bc:e8:4a:30:c6:6a:60:7c:fa:51:6a:ea:cd:31:8a:2d:b8:
4d:e7:70:89:94:16:b4:92:5e:ff:ea:f6:aa:56:9c:21:a5:ab:
1e:8c:9e:16:b5:51:ff:51:09:b2:ef:ac:63:60:86:35:aa:e0:
84:a0:bf:44:e8:6e:b1:3c:45:2a:b5:18:74:7e:f1:64:f8:51:
e4:cf:eb:fd:3e:ed:55:ae:08:41:40:5f:aa:79:15:8a:f7:6d:
46:43:a9:3d:3b:10:e3:dc:ab:34:5d:fa:57:fe:0e:6a:25:43:
f6:58:55:4a:ac:32:17:b2:dd:88:f8:94:63:a3:43:0a:25:af:
e9:6e:86:6c:7d:00:27:10:ce:77:8b:18:06:2e:fe:1b:84:c0:
2d:38:f4:0c
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIUHbNP+uuG9fMa4MyGwAgsGRB4tWMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA4NTMxOFoX
DTI3MDQxNTA4NTgxOFowMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2
NjcwNENCNkE4MTEwRTI3MDQyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMV2DGpjwxIE6YUPhVkP8OQF8ErVI2lAP00LnfmaIt+z2PLj2qczfQpUDoct
cahalBwNxF0RphNyUcxshGUpmh9y/lJy0FCdD5EpILjmAEnjDbYnk7AdL0bjCEGm
6SY18js0e5xjNXjS9sROJMSGXZEZzXncoimUfz8VvNFmU9Mn1rH214nEYmfWTzfm
nI+gd04ZUgewmtELQ5TuWKzOE6b3Morl6g6SL8x2KnaKCS+KTe+1jFCmIwd6/FoD
Ql4ovML9hRQpZxkwkbgNmZ2O6QBO+MMD6HdZHFWwvriXUmPBS0BLZLbdnbloer5j
yWRJioQkxRY6CFBx5sriNi2UiLMCAwEAAaOCA2YwggNiMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFO2ohKeXSNV+tJNmcEy2qBEOJwQtMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NzA4MzUzMjM1NTgyOTc2My8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDgzNTMyMzU1ODI5NzYz
LzAvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgcUGCCsGAQUF
BwEHAQH/BIG1MIGyMIGZBAIAATCBkgMEAivm3AMEAi1BFAMEAmcyJAMEAmeEMAME
AmfSqDAMAwQAdr8NAwQEdr8AMAwDBAN2vxgDBAZ2vwAwDAMEAna/VAMEB3a/AAME
BHa/oDAMAwQAdr/RAwQDdr/QMAwDBAJ2v9wDBAB2v94wDAMEAHa/4QMEBHa/4AMD
AHpxAwMAfMQDAwC0uwMEBMpFEAMDANybMBQEAgACMA4DBQAkAXoAAwUAJARxgDAj
BggrBgEFBQcBCAEB/wQUMBKgEDAOAgJdKAIDAPi5AgMCHSQwDQYJKoZIhvcNAQEL
BQADggEBABaIbQ1qQbuB8LPVfHxS7oJh5J4DwmLQ150gqzvqe5/r4mIcg9LsYAYN
DEOLBo+MTrt82BjEL4sDr+VgrRWLSGsjvCSRbK2u95SAMdXahza+2Lab+o81GoFj
2SpvVLNBdK5w9EtKUUM6i1S1zU286EowxmpgfPpRaurNMYotuE3ncImUFrSSXv/q
9qpWnCGlqx6Mnha1Uf9RCbLvrGNghjWq4ISgv0TobrE8RSq1GHR+8WT4UeTP6/0+
7VWuCEFAX6p5FYr3bUZDqT07EOPcqzRd+lf+DmolQ/ZYVUqsMhey3Yj4lGOjQwol
r+luhmx9ACcQzneLGAYu/huEwC049Aw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:45 2026 by rpki-client