Certificate

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
File:                     79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer (raw, json)
Hash identifier:          3RX2E5yAUs0NrsyjLzoRWbc9r36dcfSiUOPcJJu0wXg=
Subject key identifier:   79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       78D1CF5D5FEB7A8274B370D2627C694E6D2E57AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 02 Apr 2026 03:20:13 +0000
Certificate not after:    Thu 01 Apr 2027 03:25:13 +0000
Subordinate resources:    IP: 43.226.32.0/20
                          IP: 43.226.50.0/23
                          IP: 43.226.53.0 -- 43.226.54.255
                          IP: 43.226.64.0/21
                          IP: 43.226.76.0/23
                          IP: 43.226.144.0/20
                          IP: 43.227.64.0/22
                          IP: 43.227.72.0/21
                          IP: 103.39.208.0 -- 103.39.235.255
                          IP: 103.40.240.0/20
                          IP: 103.44.236.0 -- 103.45.63.255
                          IP: 103.45.96.0/19
                          IP: 103.45.172.0 -- 103.45.191.255
                          IP: 103.45.248.0/22
Validation:               Failed, certificate revoked on Thu 02 Apr 2026 07:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d1:cf:5d:5f:eb:7a:82:74:b3:70:d2:62:7c:69:4e:6d:2e:57:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr  2 03:20:13 2026 GMT
            Not After : Apr  1 03:25:13 2027 GMT
        Subject: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:e2:52:45:41:58:87:da:48:22:d2:8a:92:
                    16:14:21:9a:84:a2:a7:5c:2e:12:3d:2a:38:30:28:
                    55:0e:06:42:bc:6e:45:6b:8e:67:00:36:17:a7:58:
                    d8:f9:3e:bf:86:4b:c9:74:24:34:6b:5b:75:59:c1:
                    c8:04:6b:6d:50:ed:13:49:15:9a:45:3f:08:42:24:
                    d1:b8:78:d6:87:d0:ec:3c:4c:e4:a9:4c:17:22:0a:
                    5e:ff:bc:c6:26:03:d2:83:48:36:f4:3a:53:a2:ba:
                    17:a9:0f:f4:bf:d8:83:f0:da:2d:1a:e8:66:e4:bb:
                    af:53:02:39:8f:a3:0d:56:99:c3:05:16:1b:7b:c0:
                    f4:d0:7f:cd:37:63:76:07:22:34:1e:df:bd:79:f4:
                    2d:36:c2:55:35:b0:b3:e4:f2:79:63:93:8e:39:dd:
                    1f:47:6b:50:99:42:17:15:e5:5d:09:c2:7c:a3:c2:
                    ce:33:26:05:22:f0:17:f8:6f:af:fe:7a:c7:5f:75:
                    12:97:a1:3c:98:aa:4f:84:95:62:63:e4:0c:e8:cb:
                    ad:56:57:c8:8e:9d:21:a3:6f:7e:bd:b4:7f:d9:80:
                    1b:f6:a5:bc:62:39:60:3e:51:76:b2:d1:96:27:f8:
                    87:6b:33:b3:27:b0:e4:5f:7a:18:92:d7:2e:95:68:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.32.0/20
                  43.226.50.0/23
                  43.226.53.0-43.226.54.255
                  43.226.64.0/21
                  43.226.76.0/23
                  43.226.144.0/20
                  43.227.64.0/22
                  43.227.72.0/21
                  103.39.208.0-103.39.235.255
                  103.40.240.0/20
                  103.44.236.0-103.45.63.255
                  103.45.96.0/19
                  103.45.172.0-103.45.191.255
                  103.45.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d1:37:fa:b0:c4:c4:03:85:eb:18:10:76:55:ca:78:c8:f4:
         3a:70:dd:7a:70:34:f7:f2:82:d0:72:1f:3a:05:74:4f:29:6c:
         08:d1:4d:75:a9:1d:44:35:1f:11:35:dd:3b:6f:d6:7d:ea:29:
         aa:b2:5b:ef:06:c4:80:1a:29:20:16:03:f4:03:f5:fe:b6:70:
         29:86:7c:c1:48:3c:55:c6:5a:12:87:77:c5:c8:85:71:bf:0e:
         a1:b5:87:b3:b9:ee:b6:72:ec:db:0f:6f:56:4c:21:3e:6a:96:
         7a:9c:3c:d6:ee:34:5d:54:e6:48:00:15:16:e5:ee:d2:ea:e2:
         a1:d2:49:f6:27:16:4f:a0:03:92:04:30:22:b5:c3:d0:ac:f8:
         63:bf:47:4b:3b:1b:fb:3c:ac:be:41:b9:5c:4a:5f:6a:e2:34:
         15:a7:c6:94:5f:2f:d1:65:92:c7:be:63:6d:d0:5d:11:03:14:
         aa:95:16:42:a0:d3:a2:e0:04:42:38:7d:78:2a:1e:1e:63:a1:
         dc:07:d5:30:89:2e:76:82:be:f9:e8:26:9e:96:9d:cc:8c:2a:
         e4:49:71:1d:f7:36:3c:1a:f5:04:5d:b6:a4:81:1d:09:af:47:
         59:fc:87:f8:68:0d:6c:75:02:63:6e:47:8b:9e:6c:49:d6:30:
         b0:ef:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:42:42 2026 by rpki-client