Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
File:                     6st7UPM43yeU66P2GMcjOyKD5kQ.cer (raw, json)
Hash identifier:          Rar3p3CMEq8M4gj1vo3JsbEBp6XBgtp9BllTFPYL8JY=
Subject key identifier:   EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7A35
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 24 Apr 2026 06:55:20 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    IP: 139.170.0.0/16
                          IP: 139.208.0.0/13
                          IP: 139.226.0.0/15
                          IP: 140.206.0.0/15
                          IP: 157.0.0.0/16
                          IP: 157.18.0.0/16
                          IP: 157.61.0.0/16
                          IP: 157.122.0.0/16
                          IP: 157.148.0.0/16
                          IP: 157.156.0.0/16
                          IP: 157.255.0.0/16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31285 (0x7a35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr 24 06:55:20 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:41:26:65:59:d3:c2:2c:51:50:ad:2b:71:
                    61:4f:1c:30:c7:25:9d:10:4f:ef:f6:c0:06:06:3c:
                    d9:9d:a3:c0:34:aa:f6:d9:49:db:6d:9c:14:00:78:
                    b5:83:79:72:57:6e:91:bf:62:fc:e0:3e:35:2c:f6:
                    62:e0:c0:a9:c3:4f:02:d8:8f:2e:11:eb:e2:2a:6a:
                    3a:24:bb:bc:68:ed:df:f6:8a:7c:83:b7:b5:88:3e:
                    9a:36:88:9e:11:2b:d0:19:5a:a5:93:68:13:48:f8:
                    49:5d:28:4e:b8:de:17:ae:06:9e:f7:4e:cf:f2:17:
                    67:8d:de:16:c3:41:f9:90:2d:5f:52:47:55:48:65:
                    de:b1:b2:1a:87:a6:05:23:a5:b7:63:f1:f4:ae:48:
                    38:84:1f:79:07:8f:3c:25:a9:ef:43:a2:4d:93:f6:
                    72:1d:b3:f3:4a:39:28:a5:c3:c6:a9:ae:9e:95:9d:
                    65:c6:aa:0c:cb:06:cd:1e:b5:a9:92:bf:85:e4:e7:
                    86:2b:8d:5e:cb:92:fe:7b:97:94:a1:9f:2d:1b:47:
                    e4:06:3e:ee:fa:89:ba:89:13:f7:90:d5:c1:15:0a:
                    d3:07:dd:65:92:b6:f3:eb:49:77:22:e1:58:e1:90:
                    b1:8a:c6:23:72:cd:4a:93:90:6e:f2:ff:85:be:b8:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.170.0.0/16
                  139.208.0.0/13
                  139.226.0.0/15
                  140.206.0.0/15
                  157.0.0.0/16
                  157.18.0.0/16
                  157.61.0.0/16
                  157.122.0.0/16
                  157.148.0.0/16
                  157.156.0.0/16
                  157.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:35:47:95:db:4d:3e:9d:11:ee:55:da:2c:90:48:2a:56:64:
         f4:fd:96:0b:9c:d9:bb:26:1c:07:15:50:61:6d:8f:2c:17:29:
         a0:6b:d8:81:ed:f7:9e:74:5f:92:53:30:ba:85:f3:1c:34:19:
         2e:35:81:fe:b6:83:3f:0c:be:14:0a:32:99:21:22:4f:b3:98:
         e3:d0:9d:0d:e1:19:d6:fa:08:06:26:a2:14:54:52:76:0c:78:
         12:f2:7d:9e:34:57:c6:93:2a:53:92:81:87:43:cc:e0:ae:94:
         a7:51:da:01:fd:7e:31:39:9a:2e:7d:e2:f4:c9:ae:0a:b8:40:
         55:bb:c8:6f:8f:b6:ca:43:01:3c:33:f4:cf:4c:20:22:21:00:
         d9:39:86:0f:d6:50:78:9f:df:c9:86:87:31:51:a8:64:63:1e:
         ca:de:12:36:7f:98:6d:eb:82:fb:a5:aa:f1:c4:ff:52:1b:df:
         04:37:3b:23:4b:62:75:26:20:81:a6:6d:15:45:f5:4e:94:2c:
         f2:14:8d:87:4e:3c:8a:97:08:c3:7b:cb:9a:25:a1:3a:0e:fa:
         68:b2:ad:bf:4b:e3:68:c9:78:1a:49:12:66:0e:bc:2e:fc:e6:
         70:cc:9b:a4:0e:b3:93:ba:7b:38:b0:47:f2:d3:05:96:88:54:
         54:f2:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:18:57 2026 by rpki-client