Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
File: 2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer (raw, json)
Hash identifier: SppxYPdbZApuoVbT2U9wfpWKLfCW39zbC3ia91xesmU=
Subject key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5C90CA1C0884F0AB2D9D58FD115910122B77C883
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 25 Mar 2026 05:54:29 +0000
Certificate not after: Wed 24 Mar 2027 05:59:29 +0000
Subordinate resources: AS: 63590
IP: 103.1.168.0/22
IP: 103.89.184.0 -- 103.89.231.255
IP: 182.51.0.0/16
IP: 202.143.100.0/22
IP: 2400:7100::/32
IP: 2400:fb40::/32
IP: 2400:fbc0::/32
IP: 2400:fc40::/32
IP: 2400:fcc0::/32
IP: 2401:9c0::/32
IP: 2401:a40::/32
IP: 2401:ac0::/32
IP: 2401:b40::/32
IP: 2401:bc0::/32
IP: 2401:c40::/32
IP: 2401:cc0::/32
IP: 2401:d40::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 22:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:90:ca:1c:08:84:f0:ab:2d:9d:58:fd:11:59:10:12:2b:77:c8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Mar 25 05:54:29 2026 GMT
Not After : Mar 24 05:59:29 2027 GMT
Subject: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:a5:7b:c0:8f:8d:96:dc:4c:cf:76:53:80:
d8:90:db:2d:93:ce:23:28:e6:a3:23:0d:1b:19:03:
c8:d2:27:3b:19:09:34:db:4c:19:21:3a:18:ea:9d:
bd:5a:97:ae:4e:f9:f1:21:ac:6a:35:aa:13:54:22:
80:96:c6:a6:49:a1:cf:9d:e3:4f:87:52:83:b0:de:
fd:1e:df:83:0c:5c:ca:2a:c8:93:df:ba:5d:b1:3e:
69:e5:79:d5:a9:d7:6b:26:96:3a:8d:5f:0d:93:f2:
fa:98:89:e5:1d:f8:94:80:d3:a5:7e:0c:2a:33:67:
b9:32:1c:4b:56:28:c8:e5:27:98:4e:11:9c:9e:e6:
7b:db:b2:15:d2:70:cb:b0:1c:95:fd:28:d4:71:db:
33:94:8c:09:70:52:bd:47:2b:50:d5:3f:45:d5:36:
33:f2:9e:d7:d6:b2:9e:c2:40:20:0e:92:39:d2:88:
4c:80:07:a9:09:05:6e:9e:b9:34:ea:70:96:4e:3f:
be:e6:8b:6d:06:7c:dd:bf:53:ae:46:fa:5e:cc:b4:
6c:96:ae:51:64:db:bf:09:78:eb:56:64:64:fa:43:
64:9a:35:12:6d:17:e8:c7:c4:db:18:8d:e2:3c:ae:
03:39:e2:a6:1c:d2:9a:3d:e5:a2:5d:78:8d:33:8b:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.1.168.0/22
103.89.184.0-103.89.231.255
182.51.0.0/16
202.143.100.0/22
IPv6:
2400:7100::/32
2400:fb40::/32
2400:fbc0::/32
2400:fc40::/32
2400:fcc0::/32
2401:9c0::/32
2401:a40::/32
2401:ac0::/32
2401:b40::/32
2401:bc0::/32
2401:c40::/32
2401:cc0::/32
2401:d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63590
Signature Algorithm: sha256WithRSAEncryption
82:4a:06:f7:d3:ff:08:f4:18:9f:48:1c:31:10:a3:aa:38:8a:
92:a8:c5:5f:4f:f3:98:67:dc:ed:66:93:2f:53:1e:95:20:5e:
c0:10:48:89:8a:e7:6f:ae:f5:bb:66:39:db:c8:bc:e2:fd:38:
7c:29:8c:41:6f:a8:97:6a:3b:e3:32:00:89:96:f6:f4:fb:3e:
e1:f0:7c:99:20:19:48:c0:e2:39:0f:5a:66:59:b9:06:80:5c:
5a:5a:be:f5:f7:d6:67:d6:3a:b3:b6:f3:8a:b0:5f:2b:77:5b:
d0:b6:13:73:af:13:c9:c1:a5:aa:39:78:15:24:28:44:91:65:
25:01:2a:43:0a:a1:28:a2:dc:e9:69:17:b2:5b:e2:93:81:10:
4b:c5:88:e8:24:24:e2:7f:e2:6d:dc:82:d1:78:f7:dd:9d:fd:
a4:bf:98:06:95:79:d2:e9:e8:ff:f7:f9:c5:a5:e6:cc:bf:40:
fd:7d:2a:a2:d9:dd:87:87:8e:09:93:a4:81:3e:e8:2f:fa:16:
31:e0:51:6d:00:69:c4:d2:aa:ac:d8:c3:32:85:d4:dc:20:e5:
39:ec:50:95:df:bd:f4:93:11:1f:7d:da:82:ea:6d:86:8a:24:
84:18:40:ca:2c:ee:5b:34:34:6a:ba:83:4e:00:9f:94:ea:74:
b6:d7:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:30 2026 by rpki-client