Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
File: 5W2kwnXzzMktCGICoe2neD8MPQ0.cer (raw, json)
Hash identifier: gt3O/Jx7Vjz3wUacwbLOAimtnDxvklRwMzjI1+6cE5c=
Subject key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CAEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:10:54 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 58854
IP: 27.0.132.0/22
IP: 43.242.72.0/22
IP: 45.119.60.0/22
IP: 45.126.120.0/22
IP: 103.27.4.0/22
IP: 103.59.112.0/22
IP: 103.64.156.0/22
IP: 103.64.212.0/22
IP: 103.73.136.0/21
IP: 103.81.8.0/22
IP: 103.81.16.0/21
IP: 103.105.60.0/22
IP: 103.236.252.0/22
IP: 150.242.96.0/22
IP: 211.155.96.0/19
IP: 2400:60c0::/32
IP: 2400:73c0::/32
IP: 2400:74c0::/32
IP: 2402:2bc0::/32
IP: 2402:d980::/32
IP: 2407:7d00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51951 (0xcaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:10:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:7b:ed:1d:6d:aa:33:9a:67:6b:9c:da:3a:
bb:aa:e9:0e:c7:65:89:73:bb:fa:a9:19:f2:f2:ff:
37:40:7f:77:3e:c0:de:3b:ac:3b:aa:b6:49:ca:73:
93:7a:26:d1:21:75:6a:00:a8:b0:06:28:ff:f5:a4:
c7:a1:0d:65:cf:62:ed:06:0b:73:e0:9b:85:a1:1b:
e1:0d:c9:66:22:99:15:0a:cd:a0:5c:af:bb:79:ba:
18:1e:92:fa:45:d9:ca:93:4f:c5:e6:6e:4d:3c:12:
df:4f:a5:44:de:44:bd:da:16:06:60:8d:1f:4d:8c:
11:39:e6:4d:97:56:8d:75:70:b7:e8:d4:13:f7:0c:
f3:e0:83:fb:ab:e4:5a:55:0a:d8:e0:3c:4d:7a:5e:
d4:09:43:d1:af:64:7e:da:e5:d9:53:8d:f6:e9:59:
f8:17:d4:f6:61:6c:1b:5a:59:e5:c9:e1:dc:56:89:
71:9e:74:6c:7d:f7:85:9f:de:d5:de:c8:f3:41:8c:
dc:5b:1a:43:bc:00:ba:6d:1a:6c:2b:ee:7d:cb:9c:
c6:ca:84:df:18:47:30:87:07:45:ed:cd:57:06:60:
e2:27:6d:d5:ba:72:f7:59:90:cb:de:86:3f:ed:9a:
41:12:3a:4a:c7:1f:7e:dd:7b:d7:41:9a:23:1b:ff:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58854
sbgp-ipAddrBlock: critical
IPv4:
27.0.132.0/22
43.242.72.0/22
45.119.60.0/22
45.126.120.0/22
103.27.4.0/22
103.59.112.0/22
103.64.156.0/22
103.64.212.0/22
103.73.136.0/21
103.81.8.0/22
103.81.16.0/21
103.105.60.0/22
103.236.252.0/22
150.242.96.0/22
211.155.96.0/19
IPv6:
2400:60c0::/32
2400:73c0::/32
2400:74c0::/32
2402:2bc0::/32
2402:d980::/32
2407:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
94:3a:88:d6:9a:48:c3:f5:25:81:8e:a5:1c:7c:82:4c:34:9d:
f7:43:83:d0:0a:d4:f3:81:7d:87:c5:b2:dc:a2:a7:b9:f4:b2:
17:45:90:94:4b:52:50:63:8a:0d:52:6d:4b:08:f4:cc:cf:eb:
2f:a7:2e:83:4f:bd:b7:b3:21:13:55:f8:c8:8c:be:9d:fd:2f:
1a:b8:74:74:4f:a5:c5:bf:f3:6e:38:6b:29:09:c0:bc:55:1c:
b4:05:57:2c:a4:3c:a5:98:cf:c7:a8:49:ba:0d:b1:59:3d:5d:
ac:7a:dd:a2:e5:5a:54:d4:db:e8:3f:05:22:fe:c8:c7:84:dc:
66:36:03:4d:60:b1:cb:1e:68:fc:7f:53:1c:86:2d:de:87:eb:
9c:a7:7c:0b:7d:1b:c9:e7:48:b9:f9:3a:3d:e1:15:7f:96:1f:
b2:80:54:d0:3e:d4:19:b9:16:f5:92:ba:1d:97:fd:53:62:90:
12:c3:2e:2a:34:fd:98:7c:34:c2:80:92:41:81:c0:53:5b:be:
52:24:7e:f3:7d:48:b5:be:5c:bc:60:e7:25:12:6f:7f:a3:63:
e6:b2:86:fd:98:b5:ff:71:ca:a9:9d:62:6b:5e:4d:5b:02:02:
f6:cb:dc:57:04:30:3b:d4:9b:03:c5:c6:bf:6e:7f:27:99:89:
98:c6:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:40 2025 by rpki-client