Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
File: 38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer (raw, json)
Hash identifier: 0J57PjcEJxlb8zEZ8hqqB/fw7UOCT1Rw6xeoAekUgzQ=
Subject key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 101B862B1005448BE5D471A4A8F81EC976C8DAF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 07 May 2026 01:46:51 +0000
Certificate not after: Thu 06 May 2027 01:51:51 +0000
Subordinate resources: AS: 9389
AS: 137756 -- 137757
IP: 103.235.144.0/22
IP: 113.48.0.0/14
IP: 118.64.0.0 -- 118.66.255.255
IP: 121.38.0.0/15
IP: 150.242.164.0/22
IP: 210.77.224.0/19
IP: 211.164.0.0 -- 211.166.255.255
IP: 2001:4510::/29
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1b:86:2b:10:05:44:8b:e5:d4:71:a4:a8:f8:1e:c9:76:c8:da:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 7 01:46:51 2026 GMT
Not After : May 6 01:51:51 2027 GMT
Subject: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:ac:ad:12:04:40:04:a2:68:25:4c:16:2d:
ce:27:30:f2:7e:eb:93:6b:73:a2:dd:90:f3:2c:a9:
68:1b:1f:6c:4a:5e:73:66:16:ce:d9:90:6b:72:f7:
e3:63:10:4f:7d:27:83:7a:b3:44:96:62:15:e0:4c:
27:76:c9:a9:8a:50:0b:d1:00:3b:85:58:60:86:88:
89:ef:24:8b:d6:12:6d:1b:7a:13:58:de:b5:b2:2f:
90:fe:9d:b0:df:02:ce:a8:d4:a1:2e:bf:67:a6:79:
38:80:27:ad:01:1f:c1:d6:b4:74:9a:4c:3d:7e:2d:
ae:48:fb:9f:a2:10:fc:3c:9d:06:a5:1d:63:81:da:
61:9c:a7:47:d7:a1:3c:11:b8:10:8d:24:3e:52:3b:
d3:fd:f0:8d:b4:cf:09:35:a8:d8:25:f4:26:72:c6:
4b:ec:02:fb:5e:81:f5:1c:2e:01:73:65:4a:0f:b1:
fb:7a:4c:58:e0:1b:68:a9:91:35:79:44:46:f6:cf:
18:7e:cd:54:76:d9:c3:19:87:e3:da:4c:d0:96:3f:
23:7c:67:64:16:0c:f0:06:44:33:23:46:fe:2f:22:
f4:88:8f:c7:38:0c:b0:0f:fa:0f:a3:6e:39:37:93:
58:ac:c4:fc:2d:60:a5:0e:f3:67:5a:38:ab:89:8e:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.144.0/22
113.48.0.0/14
118.64.0.0-118.66.255.255
121.38.0.0/15
150.242.164.0/22
210.77.224.0/19
211.164.0.0-211.166.255.255
IPv6:
2001:4510::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9389
137756-137757
Signature Algorithm: sha256WithRSAEncryption
84:a2:8d:90:5a:51:7c:dd:96:0e:b7:a5:e4:f4:2d:1f:cc:24:
c5:c0:36:60:d0:0f:c2:33:6c:ee:95:5d:fe:aa:6c:9e:3e:75:
0a:bd:7c:90:e8:39:2f:54:a5:4e:fb:d8:46:52:d5:a3:41:1e:
02:15:75:3a:e1:ac:ff:0b:a0:e2:62:d0:e5:af:90:95:75:bd:
f5:80:86:ce:e0:58:82:e2:55:7c:36:87:47:b0:02:88:cd:70:
cb:09:ee:14:83:bc:ac:39:a1:8c:d2:dc:84:fd:08:35:1d:0c:
83:37:29:a1:6c:3f:62:56:9b:76:b5:bd:6a:db:7a:e3:2c:c2:
e6:28:0f:12:16:3d:5a:ad:34:f2:7e:7f:02:b6:38:eb:94:7c:
7a:42:18:a0:c6:48:ec:20:aa:8d:e0:61:11:1b:b6:a3:f8:b2:
4d:03:6a:03:19:22:5c:99:82:5a:cf:b0:f7:85:ec:e9:44:4c:
16:d2:ec:f2:56:9d:86:9e:3b:c6:73:48:c4:a6:2d:40:28:ce:
af:53:2d:ae:8f:ed:76:25:d1:95:0a:6e:53:98:49:7a:42:ca:
1a:8f:eb:f7:ec:98:c2:65:c4:fb:17:32:b6:41:b2:8c:22:7a:
02:ee:a9:1e:5c:37:34:69:df:d2:bf:64:36:f0:82:c0:e1:dd:
17:17:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:42 2026 by rpki-client