Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer
File: 54ohJpBQ-1UbuVd7ovUQEFoUzrI.cer (raw, json)
Hash identifier: 3hMdZeWl5BsVXnZeLxenkZ1qCU4Iq68lMo6BnyIT4FM=
Subject key identifier: E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BE6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:28:03 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 160.30.194.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15334 (0x3be6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:28:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E78A21269050FB551BB9577BA2F510105A14CEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:04:3c:df:24:4e:c5:d3:6e:62:33:65:f8:
45:b6:0d:d4:b9:57:f4:9f:52:86:81:02:a2:d2:2b:
68:1d:29:81:3f:fd:74:f9:ee:6d:13:3a:f7:b4:0c:
9c:4f:7d:3e:b0:a3:63:d2:13:cb:59:d3:37:ec:c7:
6b:7f:a2:63:f2:8c:e5:5e:41:2a:11:78:4e:f4:41:
84:67:82:bb:b0:cc:90:40:e7:e3:b6:15:a4:ee:c2:
3d:60:d9:be:62:ea:a8:6f:43:3f:65:4f:fc:a0:cc:
40:d5:c3:8d:d2:b7:7a:cb:8f:95:1c:02:da:a3:69:
33:9e:62:20:32:81:da:1b:68:fb:df:14:55:ce:5b:
c4:e6:de:69:0a:6d:b6:b2:13:8c:d5:b6:69:28:45:
51:ad:bf:1d:ef:0d:4c:a1:66:19:e7:b5:11:35:1a:
a9:be:7a:12:c8:d4:7e:bc:e2:c0:50:e5:d4:2d:66:
fa:7c:bd:35:77:8b:77:82:9f:c6:a2:12:d9:31:dd:
05:df:70:41:5b:cb:f5:7a:85:fa:c8:3e:7b:3c:6b:
fd:d7:b3:f2:e3:5f:8d:95:df:e5:24:3c:42:fe:a0:
29:c4:f1:a1:9f:e6:4f:56:2e:1a:3b:87:98:93:dc:
4a:f3:f4:12:91:f1:d8:4d:8f:8e:5e:b1:30:55:c9:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:21:26:90:50:FB:55:1B:B9:57:7B:A2:F5:10:10:5A:14:CE:B2
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3312/54ohJpBQ-1UbuVd7ovUQEFoUzrI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.194.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:91:56:b6:fd:22:2f:7f:16:3d:b8:fb:8d:57:fc:d5:fd:7b:
50:af:de:46:16:63:a1:7e:7b:51:df:6a:52:e5:ad:96:fc:75:
b2:94:82:02:21:9f:23:e2:b8:52:ca:d8:d6:04:9d:36:52:cc:
54:d6:eb:01:81:4a:5b:84:76:38:30:13:24:4f:fc:c3:9c:56:
d9:ec:2b:27:81:5a:28:52:56:a0:97:14:0f:1c:b6:66:c6:b9:
64:08:17:2e:6d:18:04:76:50:13:78:7c:9d:e3:53:3f:65:ab:
92:5c:30:a7:bf:88:ad:80:a8:2a:18:63:e8:41:f3:6e:b5:f9:
57:ce:79:20:37:9f:06:f7:c7:55:78:a2:98:fe:87:bf:fb:c0:
3e:ed:c9:74:6b:90:b4:5e:a3:2f:32:8a:0f:bd:e4:0f:8c:53:
8b:40:32:71:72:5a:ed:1e:16:23:5f:72:b1:8b:12:9d:87:aa:
f7:42:68:fb:59:73:8d:0d:5e:ae:ca:5e:a4:f1:79:65:48:17:
4c:fd:6f:0c:56:5e:cd:4b:bb:c7:2b:3b:45:fc:12:61:b4:7f:
e6:4d:18:9a:4f:ce:8a:dc:73:e9:c5:f5:10:a5:58:83:51:b0:
24:20:f7:43:76:81:c1:83:f0:6f:99:bb:5e:ec:9e:e9:6f:ba:
1d:a3:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:47 2025 by rpki-client