
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
File: AA39AE9FC417219D4A84D7759F82869F86905204.cer (raw, json)
Hash identifier: l7Q2IvY8kORbu3MMqcUbX+dJj3TKkJxU9a6J42KX+wI=
Subject key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 551619CDE8A95871F19A8BB9B9EBE874E2A11226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 05:24:38 +0000
Certificate not after: Tue 11 May 2027 05:29:38 +0000
Subordinate resources: AS: 55977
IP: 43.225.76.0/22
IP: 103.17.228.0/22
IP: 2406:6100::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:16:19:cd:e8:a9:58:71:f1:9a:8b:b9:b9:eb:e8:74:e2:a1:12:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 12 05:24:38 2026 GMT
Not After : May 11 05:29:38 2027 GMT
Subject: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:d9:46:a2:d4:cc:0a:93:2b:1f:32:ca:b5:
e3:72:07:1a:99:9c:6a:7b:56:2c:0a:dc:e7:a0:61:
4a:c8:79:2a:57:3d:43:5a:2a:e4:7a:b3:62:3a:31:
e1:bf:7d:be:d3:7f:6c:50:a8:2a:20:51:b0:12:4b:
be:e9:ae:be:d7:24:af:13:17:8d:48:99:7c:2e:2f:
8b:2d:42:22:19:71:6b:88:6f:aa:ab:d3:2c:4d:f7:
7d:ae:6a:94:48:88:64:71:2a:84:9f:f7:3c:c1:10:
06:ea:2b:c4:7c:55:d3:c8:6d:1c:c9:50:eb:38:56:
e9:f1:28:e1:ae:1f:10:6b:0f:f5:a3:47:22:eb:97:
48:a7:00:6f:89:79:18:fe:fa:1e:39:1c:03:6f:a7:
8f:51:7c:30:f9:30:ed:0a:86:ea:70:37:a5:62:34:
21:9d:c8:9d:fa:da:d2:82:b5:89:0d:2a:ab:d6:db:
d3:ca:76:b8:b1:d3:43:61:ef:ac:4f:54:2a:3e:24:
30:d6:0a:f1:3d:a6:8a:3f:5c:3f:f4:1b:9f:d5:13:
87:eb:e5:1b:b0:73:16:52:05:72:ad:7a:c2:ae:95:
01:54:7f:98:8f:e8:25:27:11:30:c8:fa:76:e3:56:
da:85:10:66:93:a7:d7:eb:a4:28:19:4a:fa:e0:cf:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.76.0/22
103.17.228.0/22
IPv6:
2406:6100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55977
Signature Algorithm: sha256WithRSAEncryption
52:aa:73:10:72:e1:ee:a8:77:ee:58:55:6a:d1:cd:d3:26:5e:
52:8b:e6:11:67:b8:b0:14:bd:90:ba:20:d8:44:1c:79:73:2d:
b6:94:9d:4c:dc:07:4e:b9:77:da:d3:d3:6f:7b:d4:45:e4:9d:
fc:61:7f:b3:21:e7:0f:ff:cd:ec:72:b7:15:1e:d0:26:d6:26:
a3:df:57:bc:c5:ea:dd:73:b1:24:f2:b5:a4:b8:49:de:15:3d:
4e:7d:0d:57:98:b9:bc:39:ba:e4:dc:ef:c0:91:78:e5:b8:06:
78:cd:4a:94:c5:ee:e5:95:83:7e:1e:2b:d0:46:e2:d8:2b:b5:
d0:64:c1:4c:44:77:3a:b4:07:d8:a6:08:90:87:9f:a6:cf:28:
6c:a1:77:36:c7:44:88:24:c7:a7:64:78:17:f2:f2:a2:9c:3f:
ad:d4:80:48:16:d0:79:95:7c:20:b0:bb:6f:cb:c4:65:d1:11:
52:e1:5d:df:61:a1:8d:7b:e1:2e:ac:40:c9:89:4f:53:24:b8:
c4:3a:f9:ec:40:86:38:7a:45:d4:79:01:6e:25:27:85:23:28:
93:f5:fc:87:33:b4:5d:c1:93:dd:77:3a:8a:3b:6b:23:32:9a:
ac:44:2d:7a:7f:d9:fe:3e:48:38:f7:2d:2e:71:5a:0c:a0:77:
80:99:ff:1d
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUVRYZzeipWHHxmou5uevodOKhEiYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMjA1MjQzOFoX
DTI3MDUxMTA1MjkzOFowMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRE
Nzc1OUY4Mjg2OUY4NjkwNTIwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALTM2Uai1MwKkysfMsq143IHGpmcantWLArc56BhSsh5Klc9Q1oq5HqzYjox
4b99vtN/bFCoKiBRsBJLvumuvtckrxMXjUiZfC4viy1CIhlxa4hvqqvTLE33fa5q
lEiIZHEqhJ/3PMEQBuorxHxV08htHMlQ6zhW6fEo4a4fEGsP9aNHIuuXSKcAb4l5
GP76HjkcA2+nj1F8MPkw7QqG6nA3pWI0IZ3Infra0oK1iQ0qq9bb08p2uLHTQ2Hv
rE9UKj4kMNYK8T2mij9cP/Qbn9UTh+vlG7BzFlIFcq16wq6VAVR/mI/oJScRMMj6
duNW2oUQZpOn1+ukKBlK+uDPxD0CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKo5rp/EFyGdSoTXdZ+Chp+GkFIEMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTEwNjQ1MzA5OTEyNTQwNzc2My8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2NDUzMDk5MTI1NDA3NzYz
LzAvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAIr4UwDBAJnEeQwDQQCAAIwBwMFACQGYQAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDANqpMA0GCSqGSIb3DQEBCwUAA4IBAQBSqnMQ
cuHuqHfuWFVq0c3TJl5Si+YRZ7iwFL2QuiDYRBx5cy22lJ1M3AdOuXfa09Nve9RF
5J38YX+zIecP/83scrcVHtAm1iaj31e8xerdc7Ek8rWkuEneFT1OfQ1XmLm8Obrk
3O/AkXjluAZ4zUqUxe7llYN+HivQRuLYK7XQZMFMRHc6tAfYpgiQh5+mzyhsoXc2
x0SIJMenZHgX8vKinD+t1IBIFtB5lXwgsLtvy8Rl0RFS4V3fYaGNe+EurEDJiU9T
JLjEOvnsQIY4ekXUeQFuJSeFIyiT9fyHM7RdwZPddzqKO2sjMpqsRC16f9n+Pkg4
9y0ucVoMoHeAmf8d
-----END CERTIFICATE-----
Generated at Wed May 13 20:17:08 2026 by rpki-client