Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4D4PjKiQjhc6NwrDMIv3bA6iep0.cer
File: 4D4PjKiQjhc6NwrDMIv3bA6iep0.cer (raw, json)
Hash identifier: AvOfb7/PIfo97d5J63zQidP2KjWcAmxXt5s/ZGEsvhI=
Subject key identifier: E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:11:49 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 151223
IP: 2401:b6e0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52003 (0xcb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:11:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E03E0F8CA8908E173A370AC3308BF76C0EA27A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:6c:e4:60:11:f0:85:90:0f:41:0a:d8:e4:
21:5a:e9:4f:72:6b:6f:39:7f:8c:e9:1a:03:73:08:
79:fc:db:da:23:47:06:72:a4:28:41:a5:da:cb:e4:
96:91:4d:12:bc:c9:c2:1f:d5:5d:e5:2b:c5:84:5e:
7b:12:0a:60:c3:d4:7a:a7:8d:a2:74:aa:45:42:a1:
1a:f1:81:e9:6b:52:d7:c8:51:2b:24:7a:73:3a:d4:
1b:36:15:0d:16:ee:48:fb:4b:20:22:22:c6:46:92:
64:0a:65:9e:41:68:14:fd:93:9c:c0:bc:a9:00:6e:
8a:b0:06:7a:91:18:4d:b5:2c:2d:ff:d0:f9:99:42:
bc:a1:91:0d:e0:1b:f7:5f:72:26:f4:69:ee:e5:92:
f0:a7:5d:ae:18:29:0c:82:95:c9:9b:33:26:5b:6c:
37:d0:48:12:61:62:10:19:9f:e0:29:19:10:46:27:
f9:25:38:9d:8b:c3:fb:b2:bb:f1:49:4c:e1:49:ef:
95:2d:06:bb:a3:70:a4:2a:f5:74:54:f8:ee:5e:59:
5c:28:aa:7f:c9:8e:ba:99:f7:39:99:a7:41:88:29:
ba:ba:e8:01:cb:e2:ca:76:f4:e6:f5:f6:4d:58:23:
88:b9:2f:98:b3:41:5e:44:d0:74:21:00:f1:d2:b1:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3E:0F:8C:A8:90:8E:17:3A:37:0A:C3:30:8B:F7:6C:0E:A2:7A:9D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3307/4D4PjKiQjhc6NwrDMIv3bA6iep0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151223
sbgp-ipAddrBlock: critical
IPv6:
2401:b6e0::/32
Signature Algorithm: sha256WithRSAEncryption
71:de:96:f0:1b:a0:2c:48:af:eb:47:a0:10:69:67:7c:28:eb:
f0:ac:2e:60:db:b4:00:48:a5:1c:b0:6a:0a:fd:b4:db:cd:47:
2f:e7:f6:2b:60:12:a3:78:64:11:e2:77:0b:c9:6c:28:f8:24:
8c:11:9c:b6:53:90:b5:78:7b:e4:23:ef:ad:54:78:99:48:52:
e3:73:db:8a:c5:20:9a:51:df:0e:37:94:30:24:3b:a5:dc:9f:
21:53:03:35:08:10:4b:99:42:32:0f:c8:01:95:cd:79:c7:c4:
27:10:af:24:56:e8:0a:86:c2:74:81:40:fa:ed:2f:6e:6f:04:
96:98:7c:8b:4f:a2:ee:29:2d:67:94:93:26:9e:55:c7:a8:50:
89:67:02:f8:23:b9:58:c9:fa:9f:9b:27:1e:e4:e1:33:6d:3c:
59:d0:51:90:e6:85:be:66:05:ae:fe:95:91:22:2f:92:cc:b4:
7e:7d:3c:a1:f7:30:2e:88:0a:aa:55:c5:bd:74:74:8f:e4:b0:
3a:fc:3d:39:d6:11:e4:c4:3c:27:4c:68:f5:60:3a:dc:da:3d:
ec:48:2f:be:55:0a:48:f9:29:9b:40:30:c5:98:16:63:2e:84:
e0:89:af:76:e2:66:01:73:2d:13:5a:05:4b:f3:e4:63:ec:00:
4a:12:2b:b7
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIDAMsjMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMzExNDlaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKEUwM0UwRjhDQTg5MDhFMTczQTM3MEFDMzMwOEJGNzZDMEVBMjdB
OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4GzkYBHwhZAPQQrY
5CFa6U9ya285f4zpGgNzCHn829ojRwZypChBpdrL5JaRTRK8ycIf1V3lK8WEXnsS
CmDD1HqnjaJ0qkVCoRrxgelrUtfIUSskenM61Bs2FQ0W7kj7SyAiIsZGkmQKZZ5B
aBT9k5zAvKkAboqwBnqRGE21LC3/0PmZQryhkQ3gG/dfcib0ae7lkvCnXa4YKQyC
lcmbMyZbbDfQSBJhYhAZn+ApGRBGJ/klOJ2Lw/uyu/FJTOFJ75UtBrujcKQq9XRU
+O5eWVwoqn/JjrqZ9zmZp0GIKbq66AHL4sp29Ob19k1YI4i5L5izQV5E0HQhAPHS
sb6rAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQU4D4PjKiQjhc6NwrDMIv3bA6iep0w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
MDcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzMwNy80RDRQaktpUWpoYzZOd3JETUl2M2JBNmllcDAubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOtzAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQBtuAwDQYJKoZIhvcNAQELBQADggEBAHHelvAboCxIr+tHoBBp
Z3wo6/CsLmDbtABIpRywagr9tNvNRy/n9itgEqN4ZBHidwvJbCj4JIwRnLZTkLV4
e+Qj761UeJlIUuNz24rFIJpR3w43lDAkO6XcnyFTAzUIEEuZQjIPyAGVzXnHxCcQ
ryRW6AqGwnSBQPrtL25vBJaYfItPou4pLWeUkyaeVceoUIlnAvgjuVjJ+p+bJx7k
4TNtPFnQUZDmhb5mBa7+lZEiL5LMtH59PKH3MC6ICqpVxb10dI/ksDr8PTnWEeTE
PCdMaPVgOtzaPexIL75VCkj5KZtAMMWYFmMuhOCJr3biZgFzLRNaBUvz5GPsAEoS
K7c=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:34 2025 by rpki-client