Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
File:                     79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer (raw, json)
Hash identifier:          NPBx8VhMHfVSbAjk9b48+nV1Uf2B8uvzsrobza+q5jE=
Subject key identifier:   79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       6D186A295834D38D607C4BE0C9D9F0897A97CE7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 02 Apr 2026 07:16:57 +0000
Certificate not after:    Thu 01 Apr 2027 07:21:57 +0000
Subordinate resources:    IP: 43.226.32.0/20
                          IP: 43.226.50.0/23
                          IP: 43.226.53.0 -- 43.226.54.255
                          IP: 43.226.64.0/21
                          IP: 43.226.76.0/23
                          IP: 43.226.144.0/20
                          IP: 43.227.64.0/22
                          IP: 43.227.72.0/21
                          IP: 103.39.224.0/21
                          IP: 103.44.236.0 -- 103.44.255.255
                          IP: 103.45.172.0/22
                          IP: 103.45.248.0/22
Validation:               Failed, certificate revoked on Thu 02 Apr 2026 07:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:18:6a:29:58:34:d3:8d:60:7c:4b:e0:c9:d9:f0:89:7a:97:ce:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr  2 07:16:57 2026 GMT
            Not After : Apr  1 07:21:57 2027 GMT
        Subject: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:e2:52:45:41:58:87:da:48:22:d2:8a:92:
                    16:14:21:9a:84:a2:a7:5c:2e:12:3d:2a:38:30:28:
                    55:0e:06:42:bc:6e:45:6b:8e:67:00:36:17:a7:58:
                    d8:f9:3e:bf:86:4b:c9:74:24:34:6b:5b:75:59:c1:
                    c8:04:6b:6d:50:ed:13:49:15:9a:45:3f:08:42:24:
                    d1:b8:78:d6:87:d0:ec:3c:4c:e4:a9:4c:17:22:0a:
                    5e:ff:bc:c6:26:03:d2:83:48:36:f4:3a:53:a2:ba:
                    17:a9:0f:f4:bf:d8:83:f0:da:2d:1a:e8:66:e4:bb:
                    af:53:02:39:8f:a3:0d:56:99:c3:05:16:1b:7b:c0:
                    f4:d0:7f:cd:37:63:76:07:22:34:1e:df:bd:79:f4:
                    2d:36:c2:55:35:b0:b3:e4:f2:79:63:93:8e:39:dd:
                    1f:47:6b:50:99:42:17:15:e5:5d:09:c2:7c:a3:c2:
                    ce:33:26:05:22:f0:17:f8:6f:af:fe:7a:c7:5f:75:
                    12:97:a1:3c:98:aa:4f:84:95:62:63:e4:0c:e8:cb:
                    ad:56:57:c8:8e:9d:21:a3:6f:7e:bd:b4:7f:d9:80:
                    1b:f6:a5:bc:62:39:60:3e:51:76:b2:d1:96:27:f8:
                    87:6b:33:b3:27:b0:e4:5f:7a:18:92:d7:2e:95:68:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.32.0/20
                  43.226.50.0/23
                  43.226.53.0-43.226.54.255
                  43.226.64.0/21
                  43.226.76.0/23
                  43.226.144.0/20
                  43.227.64.0/22
                  43.227.72.0/21
                  103.39.224.0/21
                  103.44.236.0-103.44.255.255
                  103.45.172.0/22
                  103.45.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:6c:b8:0f:77:ca:ba:cd:79:c9:93:e9:bd:24:78:4b:2c:5b:
         74:1f:77:12:bc:49:9d:56:54:b8:00:11:da:80:c6:0a:25:09:
         2c:98:51:16:c2:fb:b1:8c:7e:20:ce:cf:92:81:a7:8f:ff:a7:
         f3:25:fe:69:36:26:7e:31:06:77:4c:7a:93:7f:44:56:9f:af:
         b8:14:e6:80:d2:f8:ff:f3:b4:ed:f9:8c:d0:9c:37:8a:24:4b:
         e6:f0:b5:66:a6:12:ef:f7:e7:ec:b7:13:4a:79:10:b4:71:f4:
         80:e3:2f:86:f8:af:99:b4:9c:74:b0:39:88:4e:0b:54:e0:92:
         d4:86:a6:1d:9d:7c:dc:bb:ba:35:79:2f:ef:44:c8:35:0c:27:
         7c:36:06:9f:59:5f:30:fa:ae:e7:d0:a2:50:a5:a5:30:e3:02:
         50:f8:8e:49:d4:d1:e1:a8:1e:82:c5:5f:d4:5a:72:17:90:d5:
         7c:43:27:b3:80:bc:3a:62:2c:49:f2:be:2e:38:e0:6d:af:4a:
         0e:8c:22:e2:14:a2:57:59:ad:07:b8:9a:fb:31:47:ff:e0:55:
         4a:8d:59:64:9d:4c:73:f3:ad:67:40:5b:07:58:13:01:4f:c4:
         2b:cf:72:77:be:4f:60:76:82:8a:30:df:10:d4:94:7e:4d:9c:
         a3:34:9a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 10:52:46 2026 by rpki-client