Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
File:                     30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer (raw, json)
Hash identifier:          LdWfwKQDdCM5g2Gj5QPjBC0pUoKv2tiOjQFKhcMrMaY=
Subject key identifier:   30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       6050699F7D451B277031051DE166510EBD273BD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Tue 30 Jun 2026 07:12:37 +0000
Certificate not after:    Tue 29 Jun 2027 07:17:37 +0000
Subordinate resources:    AS: 137718
                          IP: 1.93.0.0/16
                          IP: 14.103.0.0/16
                          IP: 27.54.192.0/18
                          IP: 27.103.0.0/16
                          IP: 27.109.32.0/19
                          IP: 36.0.64.0/18
                          IP: 42.157.64.0/18
                          IP: 43.236.0.0/16
                          IP: 43.239.0.0/19
                          IP: 43.247.200.0/22
                          IP: 45.255.0.0/18
                          IP: 49.4.192.0/18
                          IP: 59.109.0.0/16
                          IP: 60.55.0.0/16
                          IP: 61.45.128.0/18
                          IP: 101.78.32.0/19
                          IP: 101.96.160.0 -- 101.96.255.255
                          IP: 101.126.0.0/16
                          IP: 101.238.0.0/16
                          IP: 101.251.96.0/19
                          IP: 103.35.0.0/19
                          IP: 103.64.32.0 -- 103.64.127.255
                          IP: 103.159.142.0/23
                          IP: 103.223.32.0/19
                          IP: 103.238.20.0/22
                          IP: 106.2.160.0 -- 106.2.223.255
                          IP: 112.75.0.0/16
                          IP: 113.31.0.0 -- 113.31.95.255
                          IP: 113.209.0.0/17
                          IP: 115.47.0.0/16
                          IP: 115.100.0.0/15
                          IP: 115.103.0.0/16
                          IP: 115.172.64.0/19
                          IP: 115.172.192.0/18
                          IP: 115.173.128.0/17
                          IP: 115.181.0.0/16
                          IP: 115.190.0.0/15
                          IP: 116.70.0.0/18
                          IP: 116.213.64.0 -- 116.213.255.255
                          IP: 117.76.0.0/15
                          IP: 117.78.64.0 -- 117.78.255.255
                          IP: 117.121.0.0/19
                          IP: 117.121.64.0/18
                          IP: 117.122.128.0/18
                          IP: 118.126.0.0/19
                          IP: 118.145.32.0 -- 118.145.255.255
                          IP: 118.196.0.0/15
                          IP: 118.199.0.0/16
                          IP: 119.10.0.0/17
                          IP: 119.16.0.0/16
                          IP: 119.27.64.0/18
                          IP: 120.128.0.0 -- 120.130.255.255
                          IP: 123.100.0.0/19
                          IP: 123.137.0.0/16
                          IP: 123.199.160.0 -- 123.199.255.255
                          IP: 124.6.64.0/18
                          IP: 124.15.192.0/18
                          IP: 124.174.0.0/15
                          IP: 124.242.0.0/16
                          IP: 125.61.192.0/18
                          IP: 125.169.0.0/16
                          IP: 180.184.0.0/15
                          IP: 182.238.0.0 -- 182.239.31.255
                          IP: 202.70.0.0/19
                          IP: 203.100.96.0/19
                          IP: 203.128.32.0/19
                          IP: 203.128.96.0/19
                          IP: 203.175.192.0 -- 203.176.63.255
                          IP: 210.16.128.0/19
                          IP: 210.78.96.0/19
                          IP: 220.112.64.0/18
                          IP: 221.136.0.0/16
                          IP: 223.255.0.0/17
                          IP: 2406:d440::/32
                          IP: 240b:6000::/20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:50:69:9f:7d:45:1b:27:70:31:05:1d:e1:66:51:0e:bd:27:3b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jun 30 07:12:37 2026 GMT
            Not After : Jun 29 07:17:37 2027 GMT
        Subject: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:86:10:ad:6f:56:6c:a0:ba:cc:2d:18:99:
                    6f:3b:a9:ac:cd:fe:08:e0:72:4e:7d:ad:a0:0f:53:
                    1d:1b:f8:b0:e5:a7:97:78:e7:36:8f:e4:9d:71:cf:
                    44:e1:8e:87:39:7e:f5:03:5c:f3:8c:8b:dd:26:d2:
                    e0:c1:30:69:20:b0:a8:07:23:bd:ef:0f:2b:80:df:
                    b9:9a:29:73:22:b0:29:5f:10:d9:7c:ab:8e:f2:0f:
                    ca:eb:e4:1e:1b:c6:bc:ae:1f:8b:82:a4:45:01:5c:
                    70:7c:8a:92:30:b2:51:cd:82:b6:35:46:a4:7a:86:
                    0e:2c:42:e0:90:44:f4:46:eb:85:f8:64:f9:00:2c:
                    6d:2e:c8:6e:f7:40:fd:ad:04:c8:92:52:3d:64:cc:
                    75:a7:1e:87:a7:70:e5:8d:e7:dc:96:c4:62:6f:f4:
                    ea:9c:d5:36:da:f9:54:d3:16:b4:9b:86:7a:7d:c5:
                    44:b6:62:8f:79:ff:d3:97:20:11:4a:77:1c:47:aa:
                    23:64:18:7f:1d:d1:68:2b:91:e6:e7:bb:9f:f5:3b:
                    d6:10:c7:68:cb:11:c0:68:0e:f3:4b:f1:88:60:d4:
                    c7:94:ec:08:63:10:24:09:c8:36:89:95:59:52:48:
                    a1:71:02:55:57:8b:71:7f:d6:05:67:a2:80:63:0d:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.93.0.0/16
                  14.103.0.0/16
                  27.54.192.0/18
                  27.103.0.0/16
                  27.109.32.0/19
                  36.0.64.0/18
                  42.157.64.0/18
                  43.236.0.0/16
                  43.239.0.0/19
                  43.247.200.0/22
                  45.255.0.0/18
                  49.4.192.0/18
                  59.109.0.0/16
                  60.55.0.0/16
                  61.45.128.0/18
                  101.78.32.0/19
                  101.96.160.0-101.96.255.255
                  101.126.0.0/16
                  101.238.0.0/16
                  101.251.96.0/19
                  103.35.0.0/19
                  103.64.32.0-103.64.127.255
                  103.159.142.0/23
                  103.223.32.0/19
                  103.238.20.0/22
                  106.2.160.0-106.2.223.255
                  112.75.0.0/16
                  113.31.0.0-113.31.95.255
                  113.209.0.0/17
                  115.47.0.0/16
                  115.100.0.0/15
                  115.103.0.0/16
                  115.172.64.0/19
                  115.172.192.0/18
                  115.173.128.0/17
                  115.181.0.0/16
                  115.190.0.0/15
                  116.70.0.0/18
                  116.213.64.0-116.213.255.255
                  117.76.0.0/15
                  117.78.64.0-117.78.255.255
                  117.121.0.0/19
                  117.121.64.0/18
                  117.122.128.0/18
                  118.126.0.0/19
                  118.145.32.0-118.145.255.255
                  118.196.0.0/15
                  118.199.0.0/16
                  119.10.0.0/17
                  119.16.0.0/16
                  119.27.64.0/18
                  120.128.0.0-120.130.255.255
                  123.100.0.0/19
                  123.137.0.0/16
                  123.199.160.0-123.199.255.255
                  124.6.64.0/18
                  124.15.192.0/18
                  124.174.0.0/15
                  124.242.0.0/16
                  125.61.192.0/18
                  125.169.0.0/16
                  180.184.0.0/15
                  182.238.0.0-182.239.31.255
                  202.70.0.0/19
                  203.100.96.0/19
                  203.128.32.0/19
                  203.128.96.0/19
                  203.175.192.0-203.176.63.255
                  210.16.128.0/19
                  210.78.96.0/19
                  220.112.64.0/18
                  221.136.0.0/16
                  223.255.0.0/17
                IPv6:
                  2406:d440::/32
                  240b:6000::/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137718

    Signature Algorithm: sha256WithRSAEncryption
         38:e0:c7:f9:a2:2d:f0:34:49:e3:1c:0b:fb:73:4c:b1:9a:42:
         1f:4b:fb:44:ea:2f:8d:c9:4a:08:0f:21:fc:a8:9f:14:c9:3a:
         ab:a4:60:2e:f2:1f:f7:e1:3f:ae:d8:17:c7:63:f6:e3:ec:11:
         4d:ab:58:e5:05:39:f4:13:e1:eb:74:13:26:b3:58:16:56:95:
         88:77:fe:02:1a:5c:cb:22:9f:6f:64:16:dd:25:5a:bb:80:b0:
         d3:48:db:71:d6:a0:c9:20:76:68:3e:99:8d:8d:32:6a:65:90:
         15:c2:34:e8:bd:79:f8:5d:40:c7:23:40:8c:09:7f:ee:a5:6a:
         85:c4:1a:aa:4a:6f:5a:a0:86:30:fb:7b:9a:9e:52:0e:0e:58:
         ff:8a:b2:45:20:44:33:6a:62:ba:02:9e:20:ca:a1:9d:4a:e7:
         11:07:d4:43:75:c7:6c:72:b2:83:94:cc:f5:12:12:0b:7b:f0:
         28:e0:26:14:75:b1:9a:f2:a1:06:17:cd:47:77:e7:25:a1:c4:
         d3:7e:73:ed:96:f5:ef:d4:61:af:1d:e9:67:29:d6:bc:f4:a6:
         ff:4a:ec:e0:fd:12:d9:27:3a:2c:b8:24:6d:3b:fb:3e:40:23:
         09:38:fe:b3:24:4d:07:c5:47:d8:ea:b3:7b:c3:a9:ca:60:20:
         9c:88:5e:6f
-----BEGIN CERTIFICATE-----
MIIHyTCCBrGgAwIBAgIUYFBpn31FGydwMQUd4WZRDr0nO9gwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYzMDA3MTIzN1oX
DTI3MDYyOTA3MTczN1owMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4
QkJGRkQ3M0E1QzJEMUVFRjM4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKaFhhCtb1ZsoLrMLRiZbzuprM3+COByTn2toA9THRv4sOWnl3jnNo/knXHP
ROGOhzl+9QNc84yL3SbS4MEwaSCwqAcjve8PK4DfuZopcyKwKV8Q2XyrjvIPyuvk
HhvGvK4fi4KkRQFccHyKkjCyUc2CtjVGpHqGDixC4JBE9Ebrhfhk+QAsbS7IbvdA
/a0EyJJSPWTMdaceh6dw5Y3n3JbEYm/06pzVNtr5VNMWtJuGen3FRLZij3n/05cg
EUp3HEeqI2QYfx3RaCuR5ue7n/U71hDHaMsRwGgO80vxiGDUx5TsCGMQJAnINomV
WVJIoXECVVeLcX/WBWeigGMNJT8CAwEAAaOCBLwwggS4MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFDB3RlOzt78Vs4uLv/1zpcLR7vOPMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4NTY0OTM0NTY5MTY1MC8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUw
LzAvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggIjBggrBgEF
BQcBBwEB/wSCAhIwggIOMIIB9QQCAAEwggHtAwMAAV0DAwAOZwMEBhs2wAMDABtn
AwQFG20gAwQGJABAAwQGKp1AAwMAK+wDBAUr7wADBAIr98gDBAYt/wADBAYxBMAD
AwA7bQMDADw3AwQGPS2AAwQFZU4gMAsDBAVlYKADAwBlYAMDAGV+AwMAZe4DBAVl
+2ADBAVnIwAwDAMEBWdAIAMEB2dAAAMEAWefjgMEBWffIAMEAmfuFDAMAwQFagKg
AwQFagLAAwMAcEswCwMDAHEfAwQFcR9AAwQHcdEAAwMAcy8DAwFzZAMDAHNnAwQF
c6xAAwQGc6zAAwQHc62AAwMAc7UDAwFzvgMEBnRGADALAwQGdNVAAwMBdNQDAwF1
TDALAwQGdU5AAwMAdU4DBAV1eQADBAZ1eUADBAZ1eoADBAV2fgAwCwMEBXaRIAMD
AXaQAwMBdsQDAwB2xwMEB3cKAAMDAHcQAwQGdxtAMAoDAwd4gAMDAHiCAwQFe2QA
AwMAe4kwCwMEBXvHoAMDA3vAAwQGfAZAAwQGfA/AAwMBfK4DAwB88gMEBn09wAMD
AH2pAwMBtLgwCwMDAbbuAwQFtu8AAwQFykYAAwQFy2RgAwQFy4AgAwQFy4BgMAwD
BAbLr8ADBAbLsAADBAXSEIADBAXSTmADBAbccEADAwDdiAMEB9//ADATBAIAAjAN
AwUAJAbUQAMEBCQLYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCGfYwDQYJKoZI
hvcNAQELBQADggEBADjgx/miLfA0SeMcC/tzTLGaQh9L+0TqL43JSggPIfyonxTJ
OqukYC7yH/fhP67YF8dj9uPsEU2rWOUFOfQT4et0EyazWBZWlYh3/gIaXMsin29k
Ft0lWruAsNNI23HWoMkgdmg+mY2NMmplkBXCNOi9efhdQMcjQIwJf+6laoXEGqpK
b1qghjD7e5qeUg4OWP+KskUgRDNqYroCniDKoZ1K5xEH1EN1x2xysoOUzPUSEgt7
8CjgJhR1sZryoQYXzUd35yWhxNN+c+2W9e/UYa8d6Wcp1rz0pv9K7OD9EtknOiy4
JG07+z5AIwk4/rMkTQfFR9jqs3vDqcpgIJyIXm8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:18:12 2026 by rpki-client