Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer
File:                     CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer (raw, json)
Hash identifier:          R0AQMHOHudihQU9XijDEIbi91ELK6ZUwf56P9LTAS9Y=
Subject key identifier:   CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       5A39FAE332F2D1FC800FE7E252FE2077FCDD66C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 20 Apr 2026 09:10:29 +0000
Certificate not after:    Mon 19 Apr 2027 09:15:29 +0000
Subordinate resources:    AS: 131523 -- 131524
                          IP: 103.97.60.0/22
                          IP: 2401:82c0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:39:fa:e3:32:f2:d1:fc:80:0f:e7:e2:52:fe:20:77:fc:dd:66:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 20 09:10:29 2026 GMT
            Not After : Apr 19 09:15:29 2027 GMT
        Subject: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:28:94:ec:c4:7c:54:a3:0d:f0:b2:b6:a8:
                    72:35:af:03:1d:78:1e:f3:4f:9f:f4:3a:2d:c4:41:
                    3b:70:f3:40:93:c4:42:f6:1d:5e:8d:6d:e7:8e:f2:
                    7b:ee:b7:16:d9:4c:22:a1:97:be:d1:68:5d:46:40:
                    29:ea:6e:37:dd:c3:05:e6:a2:50:af:c7:08:f9:fc:
                    21:1f:f1:d7:7f:ed:cd:5c:c1:7d:33:cc:b8:7d:d0:
                    35:86:25:06:28:c9:eb:0d:a9:7b:ec:25:34:d8:07:
                    3c:ad:aa:48:84:93:8c:0b:e4:20:e5:e4:4f:09:5b:
                    f4:c0:14:0f:3a:68:4b:f0:17:10:45:88:14:f0:b3:
                    b9:e8:ac:6d:6d:b9:c0:4f:3e:66:34:00:35:df:2b:
                    21:f3:68:d5:bb:73:28:50:2a:0d:e2:e1:c1:56:6a:
                    5a:54:1a:98:4d:02:eb:d1:31:2e:90:a9:63:e2:c1:
                    3d:d2:0a:22:dd:81:20:82:37:33:0b:a7:0e:75:94:
                    67:4c:40:20:f6:40:76:49:f8:d3:47:a2:45:9c:fe:
                    9b:63:6b:81:64:16:19:d2:45:a9:0d:be:a6:20:5b:
                    48:c9:9c:b8:96:e4:6e:73:2b:ef:c3:4d:5b:c4:ad:
                    e6:d0:6b:f6:e5:12:0f:fe:f1:f9:29:ec:c9:19:9d:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.60.0/22
                IPv6:
                  2401:82c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131523-131524

    Signature Algorithm: sha256WithRSAEncryption
         82:94:f3:a8:20:fc:3a:e4:d0:4a:d0:91:77:03:1e:2f:56:41:
         8f:03:60:31:85:5c:4c:69:cc:5a:a8:f8:06:6f:f7:31:af:02:
         1a:64:77:6e:cd:30:fd:04:74:cd:0c:9b:31:bc:b5:f2:5d:08:
         1e:fc:56:06:74:68:b1:a7:1e:d8:b0:00:cb:ce:be:4f:01:ff:
         5b:9a:a1:b7:b3:9e:46:16:81:8d:b1:65:ee:1f:72:f5:9f:26:
         0c:2b:0d:9c:a7:94:5f:12:ba:94:08:ca:6e:70:eb:e8:3f:d5:
         f9:d2:af:32:69:dc:68:45:76:3f:2c:ae:e2:5d:7e:89:74:78:
         a1:45:df:0d:a0:15:69:1d:f3:9b:21:3b:6f:8f:8e:2c:97:58:
         95:14:d7:e6:a6:07:d4:e2:60:17:f8:cd:94:72:9d:b3:4f:d6:
         3b:fa:4e:bc:a8:a1:ce:d0:dd:34:c9:72:78:85:89:60:14:93:
         a6:1c:1a:d2:96:77:5d:14:e6:6f:46:41:22:6f:56:07:19:bd:
         2e:79:3f:d0:11:eb:b7:2d:ec:37:11:c1:32:47:b5:df:dc:fd:
         b4:80:cc:6f:10:bb:84:80:eb:8a:f5:a2:44:e8:71:ae:c9:9a:
         47:bc:fb:65:61:ec:46:12:9d:af:63:fa:58:25:7a:91:11:bd:
         56:a2:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:34 2026 by rpki-client