Certificate

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
File:                     CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer (raw, json)
Hash identifier:          czfKe+CJAm7AhRTv9syep6VsGAcNQaVYcHqJlLVpDyo=
Subject key identifier:   CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       01C3EE1E22031508B96DFD1621F46B00DC1835C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 14 Sep 2026 02:19:12 +0000
Certificate not after:    Mon 13 Sep 2027 02:24:12 +0000
Subordinate resources:    AS: 151248 -- 151249
                          IP: 163.227.34.0/23
                          IP: 2401:fc60::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c3:ee:1e:22:03:15:08:b9:6d:fd:16:21:f4:6b:00:dc:18:35:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Sep 14 02:19:12 2026 GMT
            Not After : Sep 13 02:24:12 2027 GMT
        Subject: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:f7:2d:44:b7:87:d0:ad:b6:2c:37:bc:0b:
                    25:2f:46:8d:9f:d1:35:aa:7d:8b:1b:5d:6a:cb:7d:
                    a4:8a:4a:dc:a3:1d:47:c9:2b:6b:c1:0e:0b:26:1d:
                    1a:c8:77:cf:03:f3:c0:88:f6:83:cf:07:2a:d4:34:
                    ca:9e:de:43:2d:15:72:dc:7d:a5:97:30:39:f0:e6:
                    ee:ff:99:bd:1a:db:c6:62:ba:46:da:ad:42:24:2d:
                    2e:6c:a8:95:96:59:d7:91:f9:a2:13:be:e3:a5:dc:
                    2c:bf:9e:8d:92:8e:5e:90:70:af:c8:b5:81:47:f4:
                    22:bc:35:62:ed:20:d9:d8:02:d0:a4:d5:96:a1:89:
                    22:6d:07:c7:5c:ad:1d:e1:83:7f:ff:60:55:ce:64:
                    b5:80:4d:77:f3:3f:9c:16:c6:0f:ff:c8:99:db:74:
                    d3:5d:6a:c3:02:c3:81:b0:06:7f:c8:c0:3e:97:a2:
                    0b:64:46:05:1d:78:67:64:3d:18:cd:d4:df:67:f9:
                    f1:d4:3d:61:b6:45:75:ee:42:bf:43:8c:93:a9:1e:
                    2b:7d:2c:e5:a8:86:d5:53:4e:38:ed:a8:6e:c5:5a:
                    45:5d:05:9c:fc:dd:f9:67:03:1d:4a:da:08:8b:19:
                    92:94:0b:dd:46:f0:28:fc:ed:cc:37:f3:e9:24:c5:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.34.0/23
                IPv6:
                  2401:fc60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151248-151249

    Signature Algorithm: sha256WithRSAEncryption
         64:19:66:f4:62:1b:57:71:71:c4:a3:42:65:33:e7:07:11:fe:
         d2:f9:53:0f:96:9b:30:58:e4:ec:37:0e:ff:52:fa:5c:1c:3a:
         5f:e0:9a:59:05:c3:a7:f3:18:a8:cd:13:09:89:62:49:d1:3e:
         46:b9:f9:f6:4f:08:81:c6:24:84:f2:c0:f2:bb:e5:50:3e:2f:
         3e:23:23:f5:ae:e2:18:7c:4d:12:bc:f0:76:14:2d:86:30:f1:
         21:89:83:dd:ec:30:b6:57:bf:92:2b:10:a7:f2:88:11:f6:65:
         d1:fd:53:b7:3a:ce:f6:27:fd:04:ad:e0:79:c1:10:d5:3e:c6:
         0a:f3:aa:cc:87:cb:81:91:c0:fe:85:5e:0f:b3:d2:60:49:52:
         78:f2:ba:1e:e3:fb:8d:f9:55:c6:a1:04:54:c2:6e:53:c5:f2:
         0c:dc:06:81:30:e0:25:0e:30:5f:10:df:10:5e:1e:35:36:6d:
         64:31:75:9e:31:11:93:5d:69:d0:d4:c5:ba:0c:39:5e:bb:65:
         ec:3b:4e:46:df:4a:79:f9:29:ed:19:52:45:92:10:e0:53:e0:
         20:78:72:ef:09:f0:31:3b:0d:75:13:33:01:e3:11:fd:0c:b6:
         0f:30:05:0d:5b:86:5e:76:7e:16:62:8c:42:4b:b9:97:e8:56:
         28:82:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:32:20 2026 by rpki-client