Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3RJeXvjndIYA-q71VO3x22h64zs.cer
File: 3RJeXvjndIYA-q71VO3x22h64zs.cer (raw, json)
Hash identifier: lCDA1mXz876sDS3VT9M8mSfhu3dFxfq+2BAEy+yGZZU=
Subject key identifier: DD:12:5E:5E:F8:E7:74:86:00:FA:AE:F5:54:ED:F1:DB:68:7A:E3:3B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CC0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 22 Mar 2025 19:57:29 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 24416
IP: 113.209.128.0/17
IP: 117.122.192.0/18
IP: 125.208.0.0/20
IP: 125.208.24.0/21
IP: 211.154.0.0/20
IP: 219.232.96.0/19
IP: 2401:8380::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52237 (0xcc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 22 19:57:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DD125E5EF8E7748600FAAEF554EDF1DB687AE33B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:65:fc:64:1c:c6:81:e9:51:b4:cd:06:48:
4b:db:a0:2d:73:76:38:4a:e5:85:f9:d5:62:dc:56:
9d:70:46:84:a7:05:9a:60:04:90:ff:25:8b:bc:11:
bc:72:f1:ad:e4:3e:0a:57:9a:70:cb:74:e1:74:99:
d6:91:f5:a0:3f:8c:2b:76:26:be:c2:41:c5:a8:bc:
77:b1:7b:83:28:ac:41:64:db:35:8c:ae:4f:16:4f:
80:f3:fe:a9:4c:b5:61:e9:03:96:a0:34:85:36:33:
03:9d:6a:a5:86:71:7f:b2:e8:03:96:b9:54:3d:da:
37:b4:87:dd:80:ba:0f:bb:5c:fc:7e:32:f8:71:9a:
bb:18:2f:3f:00:00:63:59:dd:fe:45:c5:fe:ae:63:
e6:48:81:33:57:df:00:98:d2:46:d0:36:ef:14:59:
7b:36:e6:fd:92:d3:eb:25:03:7c:f2:bf:e7:4b:c5:
05:48:b2:49:1b:9b:cf:a5:c9:19:59:52:7b:91:50:
f2:67:14:67:4f:6b:40:1b:1b:f6:54:ca:47:a2:5f:
ff:95:35:21:2a:6d:1f:ee:fc:5b:8b:6a:bd:ce:04:
7f:f7:7a:64:5b:5c:ac:1f:20:de:f0:a7:fa:d1:49:
06:8f:7a:16:80:96:5b:40:cd:6b:75:98:22:dd:a8:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:5E:5E:F8:E7:74:86:00:FA:AE:F5:54:ED:F1:DB:68:7A:E3:3B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/3RJeXvjndIYA-q71VO3x22h64zs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24416
sbgp-ipAddrBlock: critical
IPv4:
113.209.128.0/17
117.122.192.0/18
125.208.0.0/20
125.208.24.0/21
211.154.0.0/20
219.232.96.0/19
IPv6:
2401:8380::/32
Signature Algorithm: sha256WithRSAEncryption
4b:d3:01:f0:14:b6:fa:df:95:57:8d:83:4f:7e:86:f5:dd:0f:
a7:4b:9e:f8:cb:c3:b3:0d:00:61:31:33:55:bd:c6:2e:5d:ee:
9e:e8:81:a0:c1:98:36:c1:eb:70:39:bf:82:ee:e5:93:1c:7c:
e8:f2:87:c0:5c:93:2e:44:53:60:28:18:da:1b:dd:9e:cd:e2:
08:bd:27:72:73:c3:fb:89:01:4d:f7:d0:40:7d:2b:51:0d:f4:
4a:25:ee:b2:b9:82:75:d9:36:07:0d:0f:af:92:24:7e:fd:d4:
fc:77:1a:87:f5:a6:a9:58:cc:7d:59:57:cf:41:b5:dc:57:4f:
f1:d0:b1:75:a2:72:df:3e:7e:42:a2:b3:f6:e7:2e:23:e7:ec:
e2:18:02:9e:c8:0e:6e:5c:95:e2:22:eb:88:0f:38:34:44:68:
95:95:ce:63:45:53:fd:31:04:ad:64:35:cf:4a:2b:b7:11:66:
a5:2f:76:e2:f7:7b:08:e3:15:fa:34:03:1b:fb:71:97:a1:f1:
1c:63:0f:88:71:3e:b6:97:63:aa:6b:a4:39:71:6a:73:1d:25:
e7:b3:70:1a:39:f5:95:79:66:81:d9:60:03:77:0b:c6:6d:60:
ea:de:37:18:1d:f2:82:40:57:9f:0e:cd:b6:bc:c7:92:e3:0e:
fe:71:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:49 2025 by rpki-client