Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/0nSmm8nbHrdzE59WVLspO9KNVZ0.cer
File: 0nSmm8nbHrdzE59WVLspO9KNVZ0.cer (raw, json)
Hash identifier: CqeZ4SE4vUc6F8mXxFGW0kRQEaTK2zLYkB6awQ09/zM=
Subject key identifier: D2:74:A6:9B:C9:DB:1E:B7:73:13:9F:56:54:BB:29:3B:D2:8D:55:9D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/0nSmm8nbHrdzE59WVLspO9KNVZ0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:11:30 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 146786
IP: 103.240.200.0/23
IP: 2401:1c60::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51985 (0xcb11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:11:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D274A69BC9DB1EB773139F5654BB293BD28D559D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:5f:d6:41:a8:b3:70:5b:e5:83:ed:be:11:
91:c5:b0:17:35:2e:94:14:4c:c3:62:ca:4a:70:51:
6f:26:ea:4c:c5:7d:52:b3:99:ad:1d:71:c3:70:47:
ae:96:e2:a9:02:dd:6c:63:2b:a0:a9:8e:cc:7b:81:
46:4a:4a:75:16:a8:45:89:38:35:f4:31:2f:40:1d:
3d:89:4d:e3:fc:a5:06:23:6e:41:21:68:e6:22:49:
bd:21:af:99:be:06:da:63:28:bd:9c:b9:b9:1a:68:
90:2e:bf:9b:b4:8c:73:1d:0b:00:cf:52:e3:1e:e8:
63:de:bd:06:29:e9:7b:bd:86:cd:6f:30:e1:b5:bf:
d6:10:6a:5b:bd:b4:5b:ed:83:8c:07:c7:db:82:0a:
aa:e3:1f:76:02:df:cf:fe:89:21:93:d0:5e:14:c3:
53:48:71:f4:59:be:ab:bb:2d:c3:fb:a2:0c:b1:3c:
e3:88:a7:68:b3:f2:2e:b8:b8:f8:31:13:73:7b:dc:
ce:de:cd:90:b6:a9:e4:52:ce:a3:05:21:1a:0c:42:
db:39:a0:5c:f3:cf:7b:96:3b:12:60:61:31:72:c1:
c1:37:47:3f:85:84:be:39:00:55:df:2e:24:21:cf:
ca:4e:3d:23:b3:2d:a4:92:00:cb:98:38:1b:80:3f:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:A6:9B:C9:DB:1E:B7:73:13:9F:56:54:BB:29:3B:D2:8D:55:9D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3231/0nSmm8nbHrdzE59WVLspO9KNVZ0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146786
sbgp-ipAddrBlock: critical
IPv4:
103.240.200.0/23
IPv6:
2401:1c60::/32
Signature Algorithm: sha256WithRSAEncryption
77:38:5c:2d:84:ca:71:bc:cd:b3:5e:ef:50:d6:2b:39:02:b6:
5f:43:62:49:ed:de:58:a9:71:24:cd:77:7c:f2:07:68:56:d6:
0d:cb:a1:dd:d2:31:34:0b:86:9d:74:3c:e4:e4:d7:04:20:df:
f5:02:37:7a:54:5b:42:df:36:b3:ff:18:d0:c1:00:ae:49:00:
b1:fc:02:96:9d:37:2f:c4:63:0a:13:d3:87:01:a7:97:03:23:
51:60:0a:eb:1b:2c:8e:8c:66:45:9c:e4:fc:ff:40:df:64:6e:
0d:60:c3:25:c8:0c:50:b3:3f:12:54:21:43:c2:88:0f:a4:42:
73:e3:84:07:c8:32:53:f6:74:78:0d:c6:52:32:b8:19:ba:68:
81:10:dd:72:8f:5f:d9:47:74:11:bb:c6:8a:50:91:02:7a:61:
5a:f3:a0:07:b5:37:6f:29:c7:33:17:d4:d8:1a:03:9e:44:94:
10:42:e7:26:21:98:9a:8e:81:25:6b:99:dd:f1:2a:1c:7e:16:
57:96:7d:81:d9:8c:95:13:39:ef:b7:e8:0a:89:5e:d1:ea:67:
fe:79:cf:4c:41:31:d7:5e:04:91:c0:56:f2:06:df:16:8d:32:
87:2b:3d:a9:7a:cd:d5:f9:30:4d:d0:7f:88:7a:32:98:8f:8e:
de:7d:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:47 2025 by rpki-client