Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
File: 51110140697A5E791546E594A2208042F4C4C6DB.cer (raw, json)
Hash identifier: WV0nB+XgGXOa77ADXBzq/ZCpZ9CTxg4QAlQiFam+chE=
Subject key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 2A189248C9295C19394C3745636E534181D8FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 20 Apr 2026 05:59:06 +0000
Certificate not after: Mon 19 Apr 2027 06:04:06 +0000
Subordinate resources: AS: 58829
AS: 59023
IP: 42.62.8.0 -- 42.62.31.255
IP: 42.62.40.0/21
IP: 42.62.64.0/20
IP: 42.62.96.0/19
IP: 103.216.4.0 -- 103.216.39.255
IP: 103.253.232.0/22
IP: 124.243.192.0/18
IP: 125.254.128.0 -- 125.254.167.255
IP: 125.254.184.0/21
IP: 157.119.132.0 -- 157.119.167.255
IP: 202.123.120.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:18:92:48:c9:29:5c:19:39:4c:37:45:63:6e:53:41:81:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 20 05:59:06 2026 GMT
Not After : Apr 19 06:04:06 2027 GMT
Subject: CN=51110140697A5E791546E594A2208042F4C4C6DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:74:03:b7:64:c1:50:07:ae:9a:57:f3:82:
79:26:28:b1:5e:9d:47:8d:16:e0:35:ae:f6:71:3b:
58:14:b7:8d:8c:49:82:1f:18:b7:b3:18:15:cf:85:
7c:d0:5f:5a:a3:d9:33:27:4b:16:12:d6:2c:bc:e4:
7e:f4:81:c4:c2:5a:cd:cc:f7:67:2d:38:1b:d0:f1:
34:89:01:e5:9a:4d:99:2a:8b:85:73:d9:fb:45:e4:
28:6d:c1:eb:4a:b5:e9:55:9c:0e:cf:de:d0:a3:40:
e6:04:71:bd:03:ea:fb:0b:47:d9:07:37:00:49:43:
88:48:df:f8:07:2e:f2:8f:06:04:b9:15:0e:5c:a4:
1b:52:93:92:88:71:54:b9:69:2d:b6:5a:9d:31:60:
88:c2:65:1d:4e:a2:a6:7f:f8:14:82:7e:b7:3e:56:
40:9d:43:eb:9f:90:20:f7:83:49:a0:b5:c4:14:b3:
44:d1:47:67:7f:8d:e4:1c:48:8e:be:7a:2a:7f:5c:
d8:01:6a:f9:0a:92:ec:69:74:5f:11:c7:31:2e:89:
9a:e8:e7:e7:74:a2:d4:bc:1e:e9:99:0b:af:7b:1d:
4b:64:42:80:f5:eb:8f:ab:2b:94:2f:1e:15:ea:de:
d4:53:65:66:bc:72:f9:fb:d9:4a:d6:44:b1:95:f5:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.8.0-42.62.31.255
42.62.40.0/21
42.62.64.0/20
42.62.96.0/19
103.216.4.0-103.216.39.255
103.253.232.0/22
124.243.192.0/18
125.254.128.0-125.254.167.255
125.254.184.0/21
157.119.132.0-157.119.167.255
202.123.120.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58829
59023
Signature Algorithm: sha256WithRSAEncryption
30:45:77:b6:22:e6:76:74:b1:23:f7:be:26:4f:8d:b2:e9:b7:
4a:a7:40:9b:fc:3c:57:36:fb:b3:1f:78:4e:6d:1a:5f:57:c1:
1c:a8:2e:8f:e5:a4:0f:57:38:08:5b:e1:84:26:43:ec:a0:02:
96:cf:04:c7:bb:f4:76:16:71:7e:e5:c9:87:18:21:1e:67:46:
c1:d3:99:7c:c9:b6:cf:c4:3b:71:69:bc:34:3c:9e:f6:88:4a:
7a:6c:8c:3f:33:9c:3c:83:0a:29:59:30:70:cc:b1:aa:44:2d:
e2:5d:03:0e:94:e0:42:00:c7:08:54:36:c7:54:88:d9:63:16:
66:ff:14:fc:8e:5e:22:f1:1d:97:69:d6:3a:4e:ed:3c:09:88:
60:9a:0e:a8:ac:2f:b1:ec:0a:c1:95:bf:11:b0:11:8d:1a:c0:
45:c3:1c:1f:07:0a:ca:e1:bf:c7:67:52:a1:d7:58:ac:0c:7a:
51:65:6b:2f:11:30:7f:7e:29:88:ba:e2:74:7c:b0:80:14:1c:
e6:80:91:b3:db:dc:27:5e:2d:65:8d:4f:7f:4c:32:6a:49:fd:
bf:82:b1:43:7a:0f:af:37:b8:ae:14:f7:b9:5b:4f:4c:68:fd:
87:60:2c:89:16:fc:43:18:e3:26:dc:35:7c:ef:ba:69:d2:1b:
e8:08:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:29 2026 by rpki-client