Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-uNYTtOYjHd8BuPUBWD7q6Axfk8.cer
File: -uNYTtOYjHd8BuPUBWD7q6Axfk8.cer (raw, json)
Hash identifier: 87gMGHX7ztWlvAZJBQH/VAo8NkTSYxJueXETiO9AMu8=
Subject key identifier: FA:E3:58:4E:D3:98:8C:77:7C:06:E3:D4:05:60:FB:AB:A0:31:7E:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7802
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/-uNYTtOYjHd8BuPUBWD7q6Axfk8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:07:11 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 58996
IP: 45.249.12.0 -- 45.249.39.255
IP: 45.249.188.0 -- 45.249.211.255
IP: 103.21.140.0/22
IP: 103.214.240.0/21
IP: 103.217.180.0 -- 103.217.207.255
IP: 103.218.192.0 -- 103.218.215.255
IP: 144.48.180.0 -- 144.48.187.255
IP: 210.16.128.0/18
IP: 2400:1940::/32
IP: 2400:19c0::/32
IP: 2400:1ac0::/32
IP: 2400:1cc0::/32
IP: 2400:1d40::/32
IP: 2400:1dc0::/32
IP: 2400:1e40::/32
IP: 2400:1ec0::/32
IP: 2400:1f40::/32
IP: 2400:1fc0::/32
IP: 2400:3040::/32
IP: 2400:3340::/32
IP: 2400:33c0::/32
IP: 2400:5cc0::/32
IP: 2400:7640::/32
IP: 2405:af00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30722 (0x7802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:07:11 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=FAE3584ED3988C777C06E3D40560FBABA0317E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:16:e4:a0:4b:23:70:e9:ad:a9:5d:04:64:3d:
69:a3:a2:0f:84:67:ae:d9:31:ca:2d:ac:cd:be:d2:
07:8d:0b:45:5c:c0:07:a2:af:48:71:f1:b2:55:03:
68:ef:6e:de:73:a4:c0:bc:b9:95:b9:ba:5c:5d:d5:
a9:0b:b5:9d:5c:68:8d:27:04:8e:d0:8a:1a:d6:a7:
8e:84:36:43:3d:cb:07:20:33:5b:93:83:c9:72:35:
23:4f:e7:96:34:79:42:f4:dc:8d:82:fb:25:3c:39:
e3:72:39:f3:c7:b4:52:e9:f0:83:24:e3:d6:c1:25:
f7:dc:30:a0:6d:9f:fd:a3:04:da:80:d6:15:1d:03:
df:0f:9d:cf:02:3e:db:84:a2:90:0c:7e:31:e2:12:
ad:06:bc:b3:e6:f0:3d:a9:cb:ff:70:bd:ee:e3:f1:
b4:62:f5:f7:45:d3:89:88:eb:34:64:73:be:f5:9b:
cf:26:5a:b7:d4:97:8d:a1:62:b9:66:dc:05:3e:0b:
9c:59:39:17:4a:52:a4:75:ba:b9:35:4a:87:67:3b:
3e:51:a6:94:ad:43:a5:02:c3:c1:90:a9:f3:51:25:
b9:9f:a2:0b:64:06:19:6b:fa:7d:51:cf:a4:15:68:
dc:e9:90:4a:0b:0a:45:4b:42:17:89:18:5d:f7:5f:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E3:58:4E:D3:98:8C:77:7C:06:E3:D4:05:60:FB:AB:A0:31:7E:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/518/-uNYTtOYjHd8BuPUBWD7q6Axfk8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58996
sbgp-ipAddrBlock: critical
IPv4:
45.249.12.0-45.249.39.255
45.249.188.0-45.249.211.255
103.21.140.0/22
103.214.240.0/21
103.217.180.0-103.217.207.255
103.218.192.0-103.218.215.255
144.48.180.0-144.48.187.255
210.16.128.0/18
IPv6:
2400:1940::/32
2400:19c0::/32
2400:1ac0::/32
2400:1cc0::/32
2400:1d40::/32
2400:1dc0::/32
2400:1e40::/32
2400:1ec0::/32
2400:1f40::/32
2400:1fc0::/32
2400:3040::/32
2400:3340::/32
2400:33c0::/32
2400:5cc0::/32
2400:7640::/32
2405:af00::/32
Signature Algorithm: sha256WithRSAEncryption
04:b0:b3:1a:7c:e8:b4:da:31:a7:af:cd:a6:54:0b:8b:13:23:
cb:68:27:3a:67:14:2b:4c:dd:ca:4b:34:35:eb:3c:77:7c:06:
f3:a9:a4:f2:87:d6:be:0c:8d:e1:e6:21:d4:8d:df:e2:62:6c:
e2:ad:64:f4:09:7c:cb:3e:bf:6d:99:99:b9:53:6f:07:c7:cf:
35:af:e9:b1:e7:13:2b:f8:f6:0d:8a:7d:64:84:13:1d:bb:24:
f3:4c:aa:bb:54:9a:e4:09:11:c7:f7:ff:c8:d7:65:22:b9:26:
e5:76:d7:36:f7:9f:fb:98:3c:3a:f7:43:26:e2:36:74:c8:69:
cc:f8:91:0c:bd:7d:30:3a:d1:02:e5:6b:94:d4:ee:a2:5a:13:
ed:a6:34:ab:0c:59:a9:cd:de:3d:7a:66:24:b2:2b:42:87:16:
ac:09:bf:0d:e3:d1:0d:77:09:e9:c3:aa:e0:ab:6a:63:4f:a6:
7e:d0:4d:4b:8b:3e:17:2c:41:85:c5:54:56:01:a1:2d:9e:a8:
b4:15:8f:72:be:43:1f:55:fa:f8:17:95:e8:df:88:7b:f5:4a:
13:38:49:d5:92:4c:5c:03:cf:c7:70:e7:ea:fa:b3:10:b0:08:
17:4b:fd:3e:74:a4:25:6b:36:b4:6f:7c:9b:dd:45:48:91:15:
dd:18:e3:05
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgICeAIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDcxMVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRkFFMzU4NEVEMzk4OEM3NzdDMDZFM0Q0MDU2MEZCQUJBMDMxN0U0
RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO8W5KBLI3DpraldBGQ9
aaOiD4Rnrtkxyi2szb7SB40LRVzAB6KvSHHxslUDaO9u3nOkwLy5lbm6XF3VqQu1
nVxojScEjtCKGtanjoQ2Qz3LByAzW5ODyXI1I0/nljR5QvTcjYL7JTw543I588e0
UunwgyTj1sEl99wwoG2f/aME2oDWFR0D3w+dzwI+24SikAx+MeISrQa8s+bwPanL
/3C97uPxtGL190XTiYjrNGRzvvWbzyZat9SXjaFiuWbcBT4LnFk5F0pSpHW6uTVK
h2c7PlGmlK1DpQLDwZCp81EluZ+iC2QGGWv6fVHPpBVo3OmQSgsKRUtCF4kYXfdf
dSUCAwEAAaOCAzwwggM4MB0GA1UdDgQWBBT641hO05iMd3wG49QFYPuroDF+TzAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTE4
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzUxOC8tdU5ZVHRPWWpIZDhCdVBVQldEN3E2QXhmazgubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmdDCB6wYIKwYBBQUHAQcBAf8Egdswgdgw
XgQCAAEwWDAMAwQCLfkMAwQDLfkgMAwDBAIt+bwDBAIt+dADBAJnFYwDBANn1vAw
DAMEAmfZtAMEBGfZwDAMAwQGZ9rAAwQDZ9rQMAwDBAKQMLQDBAKQMLgDBAbSEIAw
dgQCAAIwcAMFACQAGUADBQAkABnAAwUAJAAawAMFACQAHMADBQAkAB1AAwUAJAAd
wAMFACQAHkADBQAkAB7AAwUAJAAfQAMFACQAH8ADBQAkADBAAwUAJAAzQAMFACQA
M8ADBQAkAFzAAwUAJAB2QAMFACQFrwAwDQYJKoZIhvcNAQELBQADggEBAASwsxp8
6LTaMaevzaZUC4sTI8toJzpnFCtM3cpLNDXrPHd8BvOppPKH1r4MjeHmIdSN3+Ji
bOKtZPQJfMs+v22ZmblTbwfHzzWv6bHnEyv49g2KfWSEEx27JPNMqrtUmuQJEcf3
/8jXZSK5JuV21zb3n/uYPDr3QybiNnTIacz4kQy9fTA60QLla5TU7qJaE+2mNKsM
WanN3j16ZiSyK0KHFqwJvw3j0Q13CenDquCramNPpn7QTUuLPhcsQYXFVFYBoS2e
qLQVj3K+Qx9V+vgXlejfiHv1ShM4SdWSTFwDz8dw5+r6sxCwCBdL/T50pCVrNrRv
fJvdRUiRFd0Y4wU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-ams.rpki-client.org