Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer
File: 6ExiO8s49imh7IolaGifaOjftzI.cer (raw, json)
Hash identifier: b00Kb/ivyYTlfeKe947nJuX+VkmtqDrIrXi1QRe12gA=
Subject key identifier: E8:4C:62:3B:CB:38:F6:29:A1:EC:8A:25:68:68:9F:68:E8:DF:B7:32
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:13:20 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 151281 -- 151282
IP: 2401:ab60::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52083 (0xcb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:13:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E84C623BCB38F629A1EC8A2568689F68E8DFB732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:e6:1d:88:f9:01:32:18:65:c3:f0:2f:7b:
33:85:47:41:1c:c8:ca:8d:80:a6:24:ba:50:78:4d:
79:fc:69:13:bb:55:64:a3:63:f9:f5:d3:99:f8:15:
fa:23:32:84:1b:6d:2e:b3:df:00:9a:bb:31:0b:b2:
b0:0a:b9:26:a7:2a:8f:4f:24:29:b5:03:19:eb:28:
8c:bc:4e:9a:f3:51:09:2c:87:e2:f9:1f:05:ae:d0:
45:b0:63:ff:46:7d:b9:aa:45:a3:7b:24:51:35:b5:
38:27:48:c5:06:10:f4:54:98:ab:a6:08:23:5e:e4:
c5:6e:7f:57:4f:d3:12:4d:c2:7f:1f:1c:3e:1e:92:
9e:96:38:fc:aa:8b:c6:c1:55:e5:87:62:ca:8e:9d:
66:bd:28:d8:cf:f8:0f:7e:69:62:46:9d:4e:da:c1:
d8:d8:be:59:94:55:ce:ca:c5:c2:4a:91:cc:28:c4:
e7:83:33:f1:7a:f4:d3:61:a3:da:62:d9:29:5c:45:
7e:b9:9a:7f:43:5a:52:41:b4:e0:fb:6a:41:eb:33:
d5:a6:d9:73:27:07:2d:dc:2d:89:fd:4d:5e:19:0b:
35:ae:e3:dd:d8:0b:d5:da:b0:f9:79:4b:d2:74:6f:
33:eb:76:30:1e:d6:b4:e4:86:9d:25:32:21:ee:22:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:62:3B:CB:38:F6:29:A1:EC:8A:25:68:68:9F:68:E8:DF:B7:32
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151281-151282
sbgp-ipAddrBlock: critical
IPv6:
2401:ab60::/32
Signature Algorithm: sha256WithRSAEncryption
82:be:f9:ff:03:ef:a4:6e:c7:0c:c7:55:7f:12:cd:7f:cd:f1:
b7:82:0d:b7:b5:14:9a:d0:a6:bc:ee:49:5a:32:e0:17:da:80:
24:56:3b:de:88:d6:68:58:50:0a:6c:1a:86:09:58:c3:94:a8:
d3:11:3b:54:3f:c1:bb:2f:5a:ca:3a:fa:bc:f5:f9:b8:6e:be:
92:67:b4:09:21:64:ad:b8:27:7c:38:cf:63:38:8e:10:2b:de:
09:ef:b7:c8:b5:bc:de:88:fd:bc:25:ec:1a:e5:1d:39:d1:43:
e6:0c:77:ad:f9:e8:91:19:ba:d4:1b:9e:36:36:81:4b:6a:5b:
bd:e2:c4:71:fa:99:c4:01:b8:91:84:c9:1b:41:d4:1e:de:4b:
6c:e5:91:2a:49:3b:9f:e4:c3:fe:b2:9a:b3:05:25:a9:8e:6e:
a4:28:fa:8f:d2:60:e3:f5:8a:26:ae:86:06:3d:2e:a9:1b:e1:
1e:3d:99:33:cd:86:5b:6f:dd:61:22:2c:43:69:cd:a6:08:d8:
be:b4:37:8c:f7:4c:85:cf:0a:a7:dc:2c:48:f5:c7:14:c7:f8:
dc:0b:e8:ad:e6:f1:9b:e6:31:c0:c4:ff:91:74:28:f6:9c:4f:
aa:21:e4:b9:70:5f:d8:a8:34:97:fd:d1:49:c3:2b:8b:fb:d8:
c6:de:4f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:52 2025 by rpki-client