Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer (raw, json)
Hash identifier: UY4Td5M2xD6y42YhiMFdRVKpzv6xoVQkOvsaKyp/Co8=
Subject key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C921
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 02:58:14 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 45081
IP: 202.141.160.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51489 (0xc921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 02:58:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:f5:b5:df:6c:77:c7:c5:1a:52:d8:dd:5e:
30:a7:f4:78:b7:d5:93:77:2d:9a:37:c1:b3:07:00:
d7:3e:27:18:00:6b:db:84:96:f0:b4:24:6c:df:78:
5b:f9:1f:09:d9:b2:5b:6d:1e:e7:cf:aa:5c:43:38:
cb:ed:71:6f:1b:16:40:89:e0:e7:c9:b0:89:08:f4:
6c:59:8a:ef:1c:16:e1:8d:0c:c2:42:3c:3f:7b:5d:
12:ca:2d:76:17:00:b2:bc:c8:c8:6e:28:24:20:7f:
39:0a:8e:d3:eb:aa:93:d8:4b:a9:c2:70:1b:7b:0a:
61:46:3a:ea:6e:20:57:a1:6d:33:2c:a4:c4:29:08:
41:89:dd:6f:46:a3:0c:33:ad:8c:c6:d9:76:17:7a:
8c:70:58:be:52:7a:e2:d5:63:de:64:89:42:ea:90:
b3:30:f8:4a:6f:d6:54:53:6a:38:79:89:d9:cd:18:
a9:45:f6:c3:10:15:a3:2b:56:95:c6:a2:7e:5e:6b:
69:b2:e6:db:39:da:48:b6:6f:31:ba:87:f8:89:08:
bb:b8:13:46:75:4f:a8:69:58:4d:07:f3:f5:b3:da:
91:7a:67:f8:2a:59:fa:83:8e:e8:28:2b:a4:06:5d:
a6:cf:49:8a:05:aa:18:54:c7:51:83:b2:17:d8:a5:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45081
sbgp-ipAddrBlock: critical
IPv4:
202.141.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:58:73:95:7c:89:77:ef:84:36:a5:01:ee:73:7d:2a:92:39:
6f:b8:91:2b:88:75:e3:64:aa:1f:97:96:70:f3:6d:9f:c1:e2:
32:b2:40:99:35:e1:12:c3:34:25:1c:51:2b:f7:10:e3:3d:77:
34:89:a0:79:0a:3e:eb:cd:88:84:c1:77:fc:90:42:0e:6c:a3:
df:d1:d7:b6:27:f8:67:1f:82:13:b5:9d:5b:58:8f:52:32:4d:
7a:12:0e:e5:16:d8:27:97:6e:00:2f:42:a4:59:09:71:ed:93:
d8:da:6f:d3:d0:98:ce:80:5d:01:51:65:fd:78:a3:90:31:df:
d4:37:88:94:b9:03:5b:61:75:46:9c:dd:f5:c5:36:b8:cc:4f:
e5:4b:4b:84:4a:d0:1e:98:90:2f:ae:91:fc:ce:6b:5d:e9:fb:
2e:69:ef:66:40:e2:71:53:7d:77:f8:fd:59:e1:1a:35:9b:8b:
1a:c8:9c:cb:3c:29:d7:bf:ce:7a:62:a1:f5:a2:91:7e:3b:ff:
14:e8:59:4a:c9:0d:94:da:c4:99:b1:fa:6c:06:e2:50:bd:33:
b7:ad:3b:29:66:ba:65:6c:93:7b:3e:91:09:21:29:0a:c7:ba:
19:59:e5:7b:08:fd:4c:9a:ae:c2:d5:c3:f2:65:b5:1a:60:de:
04:56:43:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:53 2025 by rpki-client