Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer
File: 82uLa5gte__1JH2mSO9nP3cW7wg.cer (raw, json)
Hash identifier: +cncCL8bTsjaauRR/YWfe48cDPglHPRtJsb+RY4e3zc=
Subject key identifier: F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:30:52 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 103.21.102.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52199 (0xcbe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:30:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:76:4c:bc:e6:fc:a5:e0:ec:3e:43:bc:2f:
e6:87:c1:de:6a:15:ae:98:d2:81:43:53:9a:08:01:
53:ff:94:dc:2f:3b:79:f5:40:76:ce:89:ff:e4:28:
b3:13:bb:5a:16:09:c6:49:26:13:36:ca:31:31:30:
ca:ef:b1:16:35:11:10:5a:b6:f0:6e:31:84:c0:49:
84:58:22:b1:3c:ca:94:31:1c:d9:cb:4a:f2:ba:5a:
e9:0b:d5:fb:73:4b:ce:ff:f6:7a:6c:8a:cf:ba:74:
c3:d6:c1:3e:15:64:87:2f:59:28:1f:59:fa:f5:b4:
26:1a:74:7d:1d:c2:26:4c:f7:1a:55:72:96:d5:94:
fe:06:be:13:e9:f4:cb:32:77:9f:2a:42:c3:1d:a9:
0f:8c:3b:5b:da:09:71:b5:0d:15:9f:99:6c:d5:c8:
f5:f3:eb:c8:8b:f4:70:d5:41:14:37:12:0d:66:b0:
4e:4a:9c:5d:46:5d:6a:2a:c2:f6:90:59:a2:43:8b:
0d:a9:f3:14:af:71:9d:f5:7d:6d:de:f2:e6:35:74:
e8:c3:8b:b2:fb:bf:c0:bc:d2:48:e0:42:c1:85:63:
a8:9b:83:ee:5d:62:80:a4:d7:2c:78:72:42:0c:12:
dd:0b:47:6a:f3:43:e0:c9:c7:cc:f4:5f:96:6e:25:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.102.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:88:0f:d2:ef:c3:80:0d:cd:11:7b:bf:fd:30:3b:40:ad:17:
21:e7:ff:c9:c3:46:c5:f7:a5:9d:ac:61:0b:7d:b7:88:22:c7:
e1:e1:3d:31:5a:1f:58:72:80:9f:f0:c0:7c:73:83:6a:ba:be:
d1:81:c3:88:66:28:19:92:8e:4d:f3:04:17:83:10:69:d8:30:
35:30:96:4e:56:9b:b2:78:f9:ff:fa:8a:49:d9:82:6b:0b:6f:
eb:ad:01:00:bc:a1:ff:60:fb:3b:b7:2b:99:2f:3d:f2:dd:eb:
43:ee:c8:ef:5d:49:9b:0e:c3:4f:6d:e3:ac:da:14:ee:35:97:
91:94:9f:55:63:38:e2:66:eb:a2:fc:2a:dc:1b:e0:a1:3e:df:
fe:5f:d2:e3:18:59:37:d9:cd:a9:db:fb:01:4d:d6:e9:03:95:
18:5f:56:d8:5b:51:d5:94:64:a5:52:9d:fb:64:8b:a7:a8:36:
e7:06:19:0c:10:59:ee:e8:19:f4:fc:a0:ff:6c:33:62:4c:cd:
af:82:3d:ec:6e:3c:76:de:e4:f9:b6:43:05:dd:eb:e8:b9:3d:
7f:51:41:60:6e:89:c3:ca:a4:dc:42:e0:83:c5:4d:ea:8c:a8:
59:79:9a:85:03:ce:ba:87:0c:16:c0:e1:b2:0a:69:21:91:29:
7b:fb:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:42 2025 by rpki-client