Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7BRTzo9P3rT2cWhPomfBhndJeXc.cer
File: 7BRTzo9P3rT2cWhPomfBhndJeXc.cer (raw, json)
Hash identifier: LhapZDA8lNeCQ5oF+0B3+35FCYMBHmIwqWlrMFDyMac=
Subject key identifier: EC:14:53:CE:8F:4F:DE:B4:F6:71:68:4F:A2:67:C1:86:77:49:79:77
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BE2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:27:53 +0000
Certificate not after: Wed 07 Jan 2026 03:18:54 +0000
Subordinate resources: IP: 161.248.112.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15330 (0x3be2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:27:53 2025 GMT
Not After : Jan 7 03:18:54 2026 GMT
Subject: CN=EC1453CE8F4FDEB4F671684FA267C18677497977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:32:5f:77:c9:9e:1c:62:ae:38:90:7b:ae:
71:52:2b:4f:09:71:a4:0c:8b:43:1d:e2:76:0b:0d:
60:db:e7:67:10:36:cc:91:bb:dc:59:f0:64:d4:e3:
40:51:31:b4:86:50:0c:96:b1:52:6b:67:77:fe:7c:
5f:84:5a:7b:00:61:97:40:98:68:14:ef:3c:a9:ea:
61:31:d6:be:38:f5:49:d9:cc:73:07:3a:7e:ca:fd:
e3:92:04:ac:f4:8b:83:6c:d5:62:9c:10:60:28:4b:
e5:88:74:c7:b1:d7:07:62:cb:7f:51:8b:d6:a9:5c:
84:b7:ff:cc:af:bb:21:05:10:b2:72:78:f8:8a:13:
1b:12:ea:4e:3e:94:24:46:72:da:07:31:06:7b:6c:
74:ae:48:66:10:4e:41:bc:a4:03:ab:8e:20:ad:42:
b9:7e:2a:32:aa:2d:ef:ae:f4:d9:fd:1f:ae:76:ac:
57:07:77:4b:ef:32:e2:4c:56:ec:9e:ae:66:49:d8:
0c:0b:26:aa:ea:3a:9d:73:68:2f:f5:b8:8f:54:b2:
3e:75:c2:87:06:91:0f:9c:bf:a2:1e:4e:34:6e:da:
6f:57:7c:a9:b4:25:33:85:0c:77:5e:57:c4:ce:e8:
fa:e9:e7:de:eb:28:d2:ca:90:90:6d:1b:20:b0:79:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:53:CE:8F:4F:DE:B4:F6:71:68:4F:A2:67:C1:86:77:49:79:77
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.112.0/23
Signature Algorithm: sha256WithRSAEncryption
86:d1:16:58:22:49:19:72:fc:d1:f4:98:f2:eb:0c:6d:00:7e:
3e:2d:2c:b4:a0:14:d1:dc:44:89:4e:76:cf:5a:7b:01:7e:ef:
0c:17:e7:75:cb:e5:dd:2e:98:0f:f8:ce:1c:0a:f3:ff:63:a5:
38:70:8b:66:81:0e:b4:44:0b:fe:a9:ce:d1:6e:e1:cf:69:34:
6d:eb:5d:52:fb:f2:b2:92:02:26:d3:2e:72:7c:0f:c8:8e:ad:
8d:cf:d4:1a:f7:21:5b:be:8a:04:d6:de:47:64:b6:5b:8b:f4:
94:3b:ee:f8:ca:7c:99:f6:1d:f1:44:94:29:e9:15:16:67:58:
72:8d:70:9f:e9:27:70:74:95:b5:8b:e7:70:8f:fd:3a:0d:12:
b1:d9:fc:7d:9d:fd:ae:14:ad:e9:2c:f0:8f:e2:00:44:b6:27:
28:01:d5:ee:22:79:73:f3:56:45:ed:8c:6d:13:72:82:e8:9c:
8a:43:da:3b:2c:79:fc:e0:b7:f2:2f:52:87:b7:76:d2:d0:29:
af:c7:e7:63:eb:62:ae:b2:54:2f:d0:6d:60:42:0e:c8:11:80:
b4:1a:98:b6:e4:00:d1:25:67:70:0a:3c:28:a0:bd:28:c3:15:
71:d5:10:41:0e:37:58:f3:bb:cb:b5:e2:ec:1f:47:03:1b:be:
0e:3a:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:38 2025 by rpki-client