Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
File: 92yeQzYd6kRgd61wKQVzgK__MmY.cer (raw, json)
Hash identifier: 73ywtO449HpEUeY3UrqqcYN3zJ/mriuzsTelISWlqjI=
Subject key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:14:10 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 103.203.212.0/22
IP: 2404:280::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52125 (0xcb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:14:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F76C9E43361DEA446077AD7029057380AFFF3266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:44:d0:1c:af:35:44:8d:e3:97:a7:23:06:
a6:c3:38:2b:e0:17:56:d7:25:79:5f:75:31:34:cd:
aa:34:bc:5f:10:bb:e6:ae:c1:90:86:0c:be:32:12:
23:7c:6b:f9:b2:c1:23:19:2a:4e:ab:58:c1:4b:36:
b2:b9:7b:21:0a:12:3f:ad:09:bd:45:1f:b0:ad:bd:
39:df:64:92:88:ae:26:35:5d:02:f3:27:0f:f0:87:
49:b5:de:34:02:b3:67:d3:e4:92:e5:32:f9:d5:42:
be:b8:30:21:82:df:b9:de:3b:fe:dd:4a:4c:22:7e:
88:18:28:5e:aa:9d:37:45:a3:68:8a:5f:46:ab:51:
22:c3:4b:82:36:5e:42:c1:ad:60:09:5a:ff:1f:c7:
ec:00:d1:af:65:fd:8d:e7:ab:48:18:43:f6:a3:af:
c3:b3:1d:81:5f:0d:cd:86:7c:11:15:71:fc:5f:ed:
a3:64:43:89:fc:68:2f:f8:e6:e6:17:41:e7:bb:80:
34:01:4f:97:cb:ec:9d:ee:81:43:9b:a5:39:52:8d:
09:6f:03:31:5f:a8:fa:4e:bd:ce:1c:b6:17:70:26:
85:81:ba:55:17:22:20:99:50:85:8b:52:e2:0b:43:
58:43:62:bd:3c:af:95:a3:b4:f4:b2:27:03:6c:6e:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.212.0/22
IPv6:
2404:280::/32
Signature Algorithm: sha256WithRSAEncryption
00:57:a0:2c:4e:72:9c:74:33:0e:e6:96:01:83:94:6c:fb:37:
bd:21:b4:cd:70:69:1f:00:b6:e0:94:fa:9f:87:7a:f3:85:f1:
9b:29:83:2d:46:4e:15:52:da:e1:8a:19:2f:a8:cd:d9:69:a1:
e1:2e:a0:46:80:01:43:29:99:f2:5d:e1:6d:7a:74:9a:60:3f:
44:eb:28:c8:b8:c3:f0:a2:e5:7a:f5:fb:20:a4:b7:87:af:fd:
a9:64:82:95:30:3a:d4:1c:4f:48:42:7f:ab:77:66:1f:19:67:
15:df:86:bf:c4:a4:29:e1:fe:5b:c4:ce:bb:b4:08:9a:68:9f:
57:bd:e9:70:07:4a:6d:91:69:19:d5:20:70:1f:d9:a0:40:63:
ff:dc:30:1b:0d:0d:50:26:13:a6:6b:9c:6f:49:31:bb:ed:2e:
2f:bb:e6:2d:64:39:b7:af:b3:dc:9c:30:19:77:cd:88:08:b2:
c5:cf:4d:22:98:35:aa:c3:49:7c:26:a1:cb:69:4c:62:3b:92:
7a:ac:c5:e8:30:61:8b:15:6b:d9:1d:9e:df:8f:b9:65:ae:95:
a9:cc:05:45:4e:64:dc:a0:62:9f:cc:d4:68:31:8d:6e:96:bb:
e1:f3:e9:33:4f:3f:90:61:ef:e7:5c:3c:02:ec:7f:2e:74:ee:
f8:a8:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:02 2025 by rpki-client