$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer File: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer (raw, json) Hash identifier: qHX6t3XRikZux8OWATKfZqtgtGCO20rMp/r29/zuD8M= Subject key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 07969E10FC71DCC4188E958A8CD37EB4A65BBF95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 24 Apr 2026 09:20:14 +0000 Certificate not after: Fri 23 Apr 2027 09:25:14 +0000 Subordinate resources: AS: 23842 IP: 203.91.32.0/19 IP: 203.175.128.0/19 IP: 2402:7d00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:96:9e:10:fc:71:dc:c4:18:8e:95:8a:8c:d3:7e:b4:a6:5b:bf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 24 09:20:14 2026 GMT Not After : Apr 23 09:25:14 2027 GMT Subject: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:ac:66:16:6d:5b:74:96:31:f4:78:68:ac: 44:45:f1:72:bc:88:5d:92:b4:63:ec:ac:a8:5a:51: f8:97:77:ae:5d:1f:84:1f:58:a5:8b:59:fa:4d:a4: c7:44:68:58:c1:ca:ce:18:d7:cb:41:a7:42:fd:5d: 8c:b4:74:bc:dd:9a:eb:39:6f:3e:fc:a3:68:ec:40: 19:dc:a9:1d:f4:96:81:a5:f6:38:d8:cc:af:3f:44: c6:c5:29:84:65:e7:b4:5c:37:c3:78:b6:bd:e9:b2: 2d:93:2a:ae:d9:6d:a2:4d:4a:57:31:36:cc:9c:0c: a4:b2:bf:4e:fa:3e:93:b1:78:b3:c2:b0:0d:4c:17: 7c:5c:7d:56:3b:86:a5:20:4a:d6:71:56:95:9d:05: 01:cd:91:d4:6b:37:46:b7:9e:93:12:35:65:ca:cb: ea:a0:05:f1:e1:26:3b:33:5b:69:01:c9:04:8d:c5: 25:f5:e2:1b:73:4e:d9:4b:7e:19:53:d0:16:fc:cd: 66:7e:d2:1d:e0:c4:a4:ab:f4:0f:96:40:d0:a0:63: 8d:f3:fa:81:ba:cf:ff:4a:5d:80:ab:34:25:16:d9: 3a:b4:ce:29:48:e3:76:3b:d1:ac:c5:ae:6a:85:30: c8:81:ee:1c:f4:1e:7d:2b:38:29:dc:b3:a9:b9:b7: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.91.32.0/19 203.175.128.0/19 IPv6: 2402:7d00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23842 Signature Algorithm: sha256WithRSAEncryption 7d:f4:c4:85:ac:6b:57:c9:5c:fd:8d:d4:f8:31:2d:ce:53:82: 73:49:cf:da:2d:39:f1:31:86:9a:4a:62:30:4a:70:3d:cb:ee: 93:36:80:42:31:fd:70:34:0b:d6:0e:9d:61:fa:76:93:97:af: 97:b2:9e:2d:71:4f:7e:e8:9c:c1:ba:14:32:57:58:a9:dc:45: 1b:f4:0a:8a:1b:61:c7:eb:35:83:f9:40:62:30:78:8d:6c:16: ef:28:ea:26:6b:17:b6:43:79:0b:24:a8:70:a6:93:ce:4a:00: d1:8e:3c:4e:13:88:6b:1f:ae:3c:42:b8:47:db:7c:13:5e:d2: e5:ee:13:4f:24:a4:42:27:3c:4c:56:ff:1d:60:9d:27:b8:f0: 27:10:6c:2e:4d:10:83:16:ae:b9:f7:cf:be:12:b1:d8:21:2b: 9f:23:83:ed:76:b2:65:bc:d1:b1:5d:1a:16:7c:0d:65:72:3f: e4:11:c1:19:f8:88:cc:ed:33:6a:e3:2a:cd:78:bf:06:96:94: d0:7f:ba:e9:55:9c:f4:11:a8:c5:f9:07:11:bf:f4:20:12:4e: 11:d2:40:ad:c3:1c:10:9b:2f:45:6b:64:b4:ff:a8:71:2e:2e: d7:ab:88:1e:32:90:b4:2d:45:c6:e9:1b:cd:07:fa:a8:02:ee: 48:a7:47:8a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUB5aeEPxx3MQYjpWKjNN+tKZbv5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNDA5MjAxNFoX DTI3MDQyMzA5MjUxNFowMzExMC8GA1UEAxMoQjBEMTI0QTdEQTcxRjFDNzQ2NkVC OUUwNzEwRTc0NjgwRTVEMzE3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANt3rGYWbVt0ljH0eGisREXxcryIXZK0Y+ysqFpR+Jd3rl0fhB9YpYtZ+k2k x0RoWMHKzhjXy0GnQv1djLR0vN2a6zlvPvyjaOxAGdypHfSWgaX2ONjMrz9ExsUp hGXntFw3w3i2vemyLZMqrtltok1KVzE2zJwMpLK/Tvo+k7F4s8KwDUwXfFx9VjuG pSBK1nFWlZ0FAc2R1Gs3RreekxI1ZcrL6qAF8eEmOzNbaQHJBI3FJfXiG3NO2Ut+ GVPQFvzNZn7SHeDEpKv0D5ZA0KBjjfP6gbrP/0pdgKs0JRbZOrTOKUjjdjvRrMWu aoUwyIHuHPQefSs4Kdyzqbm3wnECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLDRJKfacfHHRm654HEOdGgOXTFyMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5OTk4OTQwOTU5NzQ4OTE1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTg5NDA5NTk3NDg5MTUz LzAvQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0NjgwRTVEMzE3Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAXLWyADBAXLr4AwDQQCAAIwBwMFACQCfQAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICXSIwDQYJKoZIhvcNAQELBQADggEBAH30xIWs a1fJXP2N1PgxLc5TgnNJz9otOfExhppKYjBKcD3L7pM2gEIx/XA0C9YOnWH6dpOX r5eyni1xT37onMG6FDJXWKncRRv0CoobYcfrNYP5QGIweI1sFu8o6iZrF7ZDeQsk qHCmk85KANGOPE4TiGsfrjxCuEfbfBNe0uXuE08kpEInPExW/x1gnSe48CcQbC5N EIMWrrn3z74SsdghK58jg+12smW80bFdGhZ8DWVyP+QRwRn4iMztM2rjKs14vwaW lNB/uulVnPQRqMX5BxG/9CASThHSQK3DHBCbL0VrZLT/qHEuLteriB4ykLQtRcbp G80H+qgC7kinR4o= -----END CERTIFICATE-----Generated at Wed May 13 20:17:13 2026 by rpki-client