Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-aja-D62Sb7KwTY-7r2dHk6dd0Y.cer
File:                     -aja-D62Sb7KwTY-7r2dHk6dd0Y.cer (raw, json)
Hash identifier:          lQYi6bAXpD55WZ6JXi2RMfXu7Dk9zIO4qfulP/5VKLM=
Subject key identifier:   F9:A8:DA:F8:3E:B6:49:BE:CA:C1:36:3E:EE:BD:9D:1E:4E:9D:77:46
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       AF63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/-aja-D62Sb7KwTY-7r2dHk6dd0Y.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 01 Feb 2024 01:23:55 +0000
Certificate not after:    Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources:    IP: 103.108.192.0/22

Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44899 (0xaf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb  1 01:23:55 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=F9A8DAF83EB649BECAC1363EEEBD9D1E4E9D7746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:f9:b7:ea:75:db:fb:a2:3e:1a:1f:55:c4:
                    47:79:48:8b:62:bf:a2:49:e8:5e:56:61:b8:dc:16:
                    f8:e5:84:5c:96:41:bb:3c:73:2f:1d:08:84:69:04:
                    de:9e:05:8f:42:9b:aa:e9:cd:32:28:45:f4:51:a0:
                    e4:8f:9c:91:42:bc:d9:6d:2f:50:9c:64:67:72:ef:
                    7a:5b:2c:25:d3:4d:9e:38:31:4d:f5:ba:44:79:19:
                    92:09:f3:3c:03:a0:44:07:f3:0b:0e:60:9f:ff:1e:
                    81:4b:ad:37:87:b4:48:94:a6:86:3b:2b:9a:0d:f8:
                    24:3b:1e:59:21:5d:b9:df:5c:8a:66:e9:3f:3e:6a:
                    46:e4:be:34:9c:ca:08:a2:9f:8a:40:56:cc:b6:b4:
                    1d:4d:45:50:2c:4a:99:cd:5e:72:e2:2a:dc:84:96:
                    c1:18:6a:29:b6:da:b3:fb:b9:1e:6b:e7:b3:8e:30:
                    22:80:87:95:22:e6:60:e4:75:97:aa:53:b1:9f:e4:
                    33:ac:f1:b8:a2:55:79:0c:81:70:d6:01:db:8a:7a:
                    73:3c:e1:85:f0:71:27:07:3f:62:a5:a4:ce:44:6c:
                    76:03:b5:49:fb:5d:d3:df:c3:ec:fb:94:e1:43:9c:
                    10:ff:b2:95:78:73:6e:60:c4:5f:6a:38:9f:56:44:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A8:DA:F8:3E:B6:49:BE:CA:C1:36:3E:EE:BD:9D:1E:4E:9D:77:46
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/-aja-D62Sb7KwTY-7r2dHk6dd0Y.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:95:41:17:65:ce:87:59:eb:01:a9:7d:64:33:4a:10:4c:5b:
         a5:2a:2d:d5:37:da:ca:57:2e:e3:44:10:c3:fc:f3:6f:27:bf:
         a5:4a:ef:20:75:6a:04:89:13:87:6e:0b:2e:16:97:26:f0:74:
         d9:2b:69:00:7b:2a:45:ee:5c:c5:4d:2c:07:6a:a8:a0:a1:99:
         68:39:e8:f3:c3:5d:1a:69:75:44:73:50:d3:74:e2:f3:f2:20:
         87:fe:a3:fe:28:d1:b2:24:4d:08:1d:2c:a9:72:ed:68:2a:ac:
         ba:c1:64:f0:39:8b:f4:2f:76:0f:8e:c6:80:e2:f8:37:24:11:
         d5:42:a3:e8:f1:d2:c3:13:76:98:e1:e7:f2:19:ca:9d:8b:7e:
         66:c1:0c:3c:c4:5f:45:38:91:a1:5e:e0:ec:52:74:73:e0:e0:
         af:b9:6c:48:c1:21:42:47:68:94:f8:bc:30:5f:69:61:e5:61:
         0f:28:a8:f8:3e:0f:a8:8c:62:ba:70:7b:57:af:97:c2:5e:e4:
         4b:8f:67:c9:7a:9d:78:16:be:96:b8:a0:4f:1d:d0:2d:3e:bf:
         09:0c:b6:1f:09:4d:b2:53:a3:33:f6:40:58:b3:c0:b9:5c:2e:
         a3:e1:8b:57:3e:5e:c3:9b:8c:51:b8:01:bf:48:52:e6:ab:c8:
         3a:73:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org