Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
File: 3Vi43ud7iv5uKRpbggWxMTFpeE8.cer (raw, json)
Hash identifier: kIzND3CYrvWn5qKdFgJeFyIZ+bayJdTmEDPN4/FroqM=
Subject key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:10:49 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 45112
IP: 103.108.164.0/22
IP: 2402:6bc0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57973 (0xe275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:10:49 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:af:0f:bd:e6:83:80:03:bf:0c:81:cc:d3:
84:07:6f:bd:f0:e3:ca:ae:61:ad:f0:ca:68:82:cb:
a0:5d:8f:6e:b3:2d:38:67:3e:62:d9:9c:23:b0:ac:
27:f5:72:89:a0:8a:d8:2a:6b:2e:a5:ae:a6:d1:04:
b4:d4:ca:ae:1d:59:15:f8:30:19:c2:46:cc:49:71:
44:34:a6:9d:97:42:44:e8:80:02:46:cf:5e:9b:ae:
bd:b0:97:10:d7:80:8c:29:b7:60:48:93:ab:71:ac:
3a:1e:b9:2d:e5:61:f7:fa:1c:c0:f6:d8:35:a7:41:
36:55:f6:c6:95:5b:c1:aa:83:c8:e6:ec:71:dc:0d:
ee:0d:ad:b1:99:6b:64:59:b4:6e:84:62:0f:0a:19:
02:f3:62:fb:3a:49:54:0a:7a:06:59:80:f1:a5:bb:
c1:ac:0f:4b:68:21:be:09:5d:39:8b:7a:e7:af:8c:
ba:7a:03:bb:db:8e:fd:1a:7d:61:23:9e:99:db:ba:
2e:48:b8:08:9d:d4:54:b6:97:ee:35:f7:63:db:ee:
67:7a:fe:94:29:67:ab:63:21:c9:b7:7a:de:a8:a8:
b3:69:c1:0f:02:0a:49:a3:67:64:97:59:52:b4:fa:
ad:87:7b:88:3c:fa:a2:6a:2b:52:70:ff:d8:07:dc:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45112
sbgp-ipAddrBlock: critical
IPv4:
103.108.164.0/22
IPv6:
2402:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
34:be:94:30:c9:d2:94:6c:de:3f:b7:c2:e3:7f:42:ff:c9:08:
6c:79:3f:53:42:77:64:45:5c:8b:1f:a3:b5:66:30:af:52:80:
77:75:53:b6:49:6a:25:e6:34:72:02:df:b0:b9:d4:a6:33:75:
b8:56:1c:7e:a9:ab:bd:a2:80:ba:cd:45:a3:db:7b:38:b9:14:
d9:10:8e:e5:b5:77:95:12:01:08:37:7d:77:cd:b0:a8:90:b4:
2e:dd:a5:1b:60:84:56:f2:15:4d:68:b6:bd:db:7e:88:95:80:
97:c9:74:5b:70:6a:17:fb:53:b4:d3:3f:50:ec:a1:2e:35:5c:
23:a3:90:04:d5:59:43:49:d5:6f:b2:7b:1b:59:e8:19:17:85:
c9:46:45:72:15:6c:b5:8d:48:f9:e2:cf:db:c2:d8:6a:26:27:
9a:d6:9d:a6:c3:2c:e8:63:12:95:21:3f:5b:02:a6:cb:03:4b:
56:b2:50:5c:77:fb:51:62:86:2e:06:61:58:35:b0:b4:9b:7c:
d1:fd:2a:5c:60:6a:9a:9e:8f:4d:4f:c1:09:42:9a:1d:ce:5e:
66:45:fb:82:0e:aa:41:bd:ee:a4:73:bd:62:64:9e:d1:e3:16:
b3:54:00:24:83:b9:59:3d:72:c4:1d:71:35:9d:75:7f:c3:57:
db:7b:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:36:24 2025 by rpki-client