
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
File: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer (raw, json)
Hash identifier: eilxM7G8yG6fms8DHGFNEUkgyl0R6A5/YIIH4giaX28=
Subject key identifier: 0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 10EC979593E6EB6287984844EFB1785A7B114D25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 22 Apr 2026 08:49:40 +0000
Certificate not after: Wed 21 Apr 2027 08:54:40 +0000
Subordinate resources: AS: 63573
IP: 103.198.20.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ec:97:95:93:e6:eb:62:87:98:48:44:ef:b1:78:5a:7b:11:4d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 22 08:49:40 2026 GMT
Not After : Apr 21 08:54:40 2027 GMT
Subject: CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:8c:b6:c9:ae:26:6c:4b:a1:41:17:76:50:
2a:c6:d6:26:83:c6:b5:be:65:25:5a:6d:0e:bb:46:
12:9d:24:f1:ff:41:1f:b3:d5:30:41:c3:c1:d2:71:
fa:f3:84:69:58:c4:d4:f8:3a:8c:9c:03:e4:e3:86:
1e:36:d8:0a:5c:6a:be:d8:86:be:1b:48:d3:95:ad:
b9:d5:f1:5c:16:5d:c8:f6:c9:7e:40:5e:88:b2:f1:
95:f3:23:c4:62:e0:51:22:9a:ae:b1:ff:a0:3f:90:
c0:89:fa:c7:43:91:ee:fe:32:f5:14:00:a9:a8:f2:
87:1f:41:2d:4f:45:d6:3d:50:84:3d:ed:06:53:48:
50:16:6b:ea:2e:e8:a3:88:4c:95:10:25:56:2b:e7:
02:9b:05:7b:81:c1:a1:00:a7:33:e4:a1:71:0b:10:
87:49:4c:72:d9:27:03:ea:62:f0:7d:71:f1:20:bb:
11:26:2d:76:81:45:bc:80:78:5c:fc:21:3b:b1:84:
2c:91:c3:0e:68:18:92:cd:ec:e5:03:83:1a:a7:0e:
c2:7a:da:f2:bf:a2:a3:89:e4:9a:85:30:32:c5:91:
53:10:79:2b:6e:c6:7b:82:41:da:c1:70:24:00:0b:
10:ca:f5:54:3b:5e:d8:4b:12:fc:b9:be:d1:a7:e4:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63573
Signature Algorithm: sha256WithRSAEncryption
57:69:48:e0:b0:ea:a0:05:e0:af:3a:31:47:99:74:d2:3f:4a:
2a:3f:a7:5d:75:36:db:c5:ad:70:38:b9:67:14:76:cd:63:cb:
b2:60:aa:6e:b6:a0:02:94:8d:2a:3f:38:26:73:23:d4:d5:c0:
d0:9b:0a:2a:68:ef:dc:50:99:b0:8b:ae:e2:f4:63:40:24:f1:
f5:53:5d:a3:81:1a:2c:9d:58:65:6f:03:6d:6f:2e:13:81:ac:
41:53:cc:ce:af:3e:a9:4c:bf:31:18:48:f9:84:86:34:20:e0:
84:8c:1a:ea:82:56:aa:dd:64:be:f6:ff:36:80:4f:3a:1c:e2:
9b:37:5d:e7:5c:e8:ac:63:93:e5:8c:33:88:78:f4:27:b4:34:
e7:05:d9:63:0f:f7:74:9f:6c:5b:ed:e4:e2:da:45:8f:7d:2d:
87:06:7e:7d:73:ff:ce:8f:3c:ae:b3:15:30:b2:a0:7b:98:fc:
2d:52:73:0c:9b:d5:c8:d1:47:fc:3b:28:b5:af:cc:54:f3:45:
6a:ed:39:52:68:ad:c3:bd:e7:c2:a4:bc:e7:02:6e:eb:98:fb:
91:57:b6:14:02:d9:32:a4:ab:24:7f:bd:76:82:ca:41:bd:51:
76:a6:a8:03:bd:27:6a:46:cf:19:4c:60:fb:e8:e9:19:30:bc:
e4:e3:8c:c3
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUEOyXlZPm62KHmEhE77F4WnsRTSUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMjA4NDk0MFoX
DTI3MDQyMTA4NTQ0MFowMzExMC8GA1UEAxMoMEI0RUI3ODg3NzI4OUZENzJFOTZC
QUVDRjFCQkRGRjZDNkQ3QTE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDRjLbJriZsS6FBF3ZQKsbWJoPGtb5lJVptDrtGEp0k8f9BH7PVMEHDwdJx
+vOEaVjE1Pg6jJwD5OOGHjbYClxqvtiGvhtI05WtudXxXBZdyPbJfkBeiLLxlfMj
xGLgUSKarrH/oD+QwIn6x0OR7v4y9RQAqajyhx9BLU9F1j1QhD3tBlNIUBZr6i7o
o4hMlRAlVivnApsFe4HBoQCnM+ShcQsQh0lMctknA+pi8H1x8SC7ESYtdoFFvIB4
XPwhO7GELJHDDmgYks3s5QODGqcOwnra8r+io4nkmoUwMsWRUxB5K27Ge4JB2sFw
JAALEMr1VDte2EsS/Lm+0afkM3sCAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFAtOt4h3KJ/XLpa67PG73/bG16FkMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5OTI1Njk0MTkwNzAxNzczMC8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5MjU2OTQxOTA3MDE3NzMw
LzAvMEI0RUI3ODg3NzI4OUZENzJFOTZCQUVDRjFCQkRGRjZDNkQ3QTE2NC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJnxhQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
APhVMA0GCSqGSIb3DQEBCwUAA4IBAQBXaUjgsOqgBeCvOjFHmXTSP0oqP6dddTbb
xa1wOLlnFHbNY8uyYKputqAClI0qPzgmcyPU1cDQmwoqaO/cUJmwi67i9GNAJPH1
U12jgRosnVhlbwNtby4TgaxBU8zOrz6pTL8xGEj5hIY0IOCEjBrqglaq3WS+9v82
gE86HOKbN13nXOisY5PljDOIePQntDTnBdljD/d0n2xb7eTi2kWPfS2HBn59c//O
jzyusxUwsqB7mPwtUnMMm9XI0Uf8Oyi1r8xU80Vq7TlSaK3DvefCpLznAm7rmPuR
V7YUAtkypKskf712gspBvVF2pqgDvSdqRs8ZTGD76OkZMLzk44zD
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:51 2026 by rpki-client