Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
File: 6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer (raw, json)
Hash identifier: 6nloOP+OYI17YAePAqRVLiP4wTxrO1e2svAocDe2UD0=
Subject key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CA0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 02:58:44 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 131482
IP: 103.72.120.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51722 (0xca0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 02:58:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:81:52:79:17:03:89:c7:be:2e:7b:44:10:72:
90:23:4e:fe:67:ca:ad:23:b0:04:62:8a:97:6f:52:
21:c3:c7:81:52:4a:cd:69:1d:66:5e:93:e6:6d:33:
45:f9:26:ba:4b:03:26:4f:f1:e6:0a:b2:17:e7:18:
d1:07:9e:b1:a8:8a:12:e0:bc:42:c2:8f:96:f6:53:
82:53:06:dd:20:2a:a1:96:3c:aa:b1:df:c5:ed:fa:
a5:e4:99:02:03:c6:c4:09:1b:ec:c4:0c:5a:f7:e5:
3d:60:fb:81:a0:5a:e6:ff:d8:85:2c:55:7a:f5:95:
4b:6c:ae:69:b9:80:bb:a3:ae:4c:bc:4b:f1:9d:f1:
7b:6b:19:bd:a0:0e:fd:3d:6b:dc:3b:21:5d:f7:82:
b7:74:99:ba:a8:0b:e9:ff:8d:4c:6d:81:a6:3a:94:
25:e4:e4:c1:c6:06:1f:62:64:34:fc:8d:26:b3:14:
29:9b:53:f1:60:f0:a7:2a:74:07:a4:4d:b9:7c:f2:
23:4f:b1:ff:0d:af:de:e7:dd:24:64:ff:0c:56:33:
57:99:39:79:b3:c2:2d:f8:3e:20:24:b1:54:96:90:
cc:2b:56:a2:39:f8:c0:d4:89:d7:40:79:09:95:b3:
e4:35:88:50:c7:c1:a3:a4:c9:55:13:32:0d:92:b9:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131482
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:7c:af:46:1a:1f:3d:d1:35:61:c8:dc:1b:80:74:c5:6d:9d:
3e:37:09:91:62:c3:85:3d:73:81:40:a5:a1:e7:92:59:eb:b6:
46:c3:27:85:68:76:34:26:94:83:2e:a9:b5:f5:65:04:fd:fb:
59:39:2d:ea:9e:5a:61:7a:a2:e0:ef:f0:66:35:8e:01:25:59:
4a:b9:1f:86:57:f0:97:22:db:ce:ca:e0:9a:9a:a7:75:85:ae:
2b:16:5a:52:a2:7d:af:d6:15:3e:16:16:d3:ce:12:f6:f6:58:
77:85:7f:1e:01:eb:e8:67:29:d7:67:d1:4e:60:29:1a:32:62:
65:7a:de:fc:cd:07:9a:4a:ec:2d:28:af:96:a4:87:72:c2:42:
6f:08:c3:4f:87:f1:8a:e1:aa:fc:98:d9:e8:45:a6:d3:c6:00:
62:35:a5:38:a5:40:66:92:ed:65:d2:e4:6d:16:ae:ad:d8:b7:
f0:db:42:92:0b:fb:a2:54:38:62:04:8d:d0:3e:d7:fb:e9:24:
67:bc:61:b8:f7:16:b8:c8:db:44:45:55:3b:6a:06:e2:ef:42:
3b:7b:c2:6a:fb:15:4e:58:0d:c0:ec:6e:1a:95:31:ec:fe:e1:
8f:e7:97:a3:7f:9a:0f:2b:65:27:49:71:61:61:00:24:cc:e3:
fd:99:83:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:43 2025 by rpki-client