Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer
File: A8JGgRHqHFTvizzN765RbDCabsg.cer (raw, json)
Hash identifier: O0LZiLlnhurHdHWuKzU7q88M4s70yGgWPA0dqzTJhJk=
Subject key identifier: 03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: EBC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 03 Mar 2026 20:00:52 +0000
Certificate not after: Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources: IP: 43.228.76.0/22
IP: 43.254.252.0/22
IP: 103.23.8.0/22
IP: 103.47.80.0/22
IP: 103.90.192.0/22
IP: 103.203.140.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60358 (0xebc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Mar 3 20:00:52 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:bd:8c:e0:da:52:dd:ac:23:8b:63:a4:df:
6d:d4:e3:30:66:c5:8d:29:ef:c1:75:bf:e7:34:32:
9e:00:9e:79:54:5c:71:2d:3f:c1:48:53:94:50:be:
20:4a:51:f6:db:4f:85:ab:f1:d7:9f:92:85:7d:28:
1d:2d:6d:5b:71:d3:c9:21:c6:d1:24:5d:e5:74:ac:
dd:60:32:6b:25:57:d3:a5:0c:70:2b:72:47:25:d2:
06:f7:95:53:b6:2b:9e:13:b7:30:59:b8:d7:ad:76:
3a:d3:e4:fd:c1:30:a5:40:7b:28:2d:c5:09:81:77:
f7:a7:f2:2c:0e:a2:79:b7:75:3b:2e:83:7c:a9:ee:
dc:0c:a2:9b:2a:d2:ac:e3:31:84:d6:0b:77:c3:d4:
d9:03:dc:ef:73:74:b1:bd:a9:06:9a:20:8e:19:cc:
1e:44:7a:8a:ae:98:54:53:08:19:69:b4:8e:f1:05:
94:77:7f:e1:2b:e9:68:1b:2f:c4:ee:d5:a2:9f:e0:
41:bb:24:9c:ad:e4:c3:69:d6:a4:0c:cf:3f:b5:d2:
56:6a:f8:51:19:95:0e:9a:96:62:f6:95:bd:1a:62:
5a:36:0b:d6:1a:ec:e9:f9:db:b3:58:63:8c:64:b0:
11:71:35:1e:55:a4:b5:73:6f:0f:85:dc:66:4c:11:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.76.0/22
43.254.252.0/22
103.23.8.0/22
103.47.80.0/22
103.90.192.0/22
103.203.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:ee:e3:b0:ec:d4:56:41:a3:34:94:0c:fa:d8:97:02:eb:75:
d9:f6:e7:3f:46:a3:5c:48:5c:0c:c1:fb:8f:12:b8:f1:75:db:
30:08:33:4a:cd:93:c4:af:1b:ae:7e:ba:97:d5:e1:29:65:29:
18:6c:cb:90:ec:b3:7d:81:03:ac:6b:cd:60:43:ae:9a:49:c2:
db:10:81:41:78:db:a3:a5:00:ff:63:e3:83:ac:74:cc:5d:6d:
ec:d2:54:b4:26:11:0d:41:c0:bd:a8:40:3b:c0:19:f3:e5:fa:
40:62:7e:fc:f7:9a:2e:c4:3b:3c:ed:1f:66:28:5f:6f:1e:8a:
b2:73:f5:8b:51:d4:a7:e1:7d:5b:c7:59:fa:58:61:60:90:25:
7c:47:4d:65:42:d4:3d:fd:76:ba:79:d0:88:14:63:3c:f8:56:
c9:bd:3c:d6:59:8a:39:0a:c0:8b:6b:6d:3c:3b:26:19:b0:ff:
8b:33:02:ce:75:8f:c9:6b:d0:7e:b4:8d:9e:58:0e:11:c6:6d:
9d:02:31:20:20:2f:2d:a2:91:66:af:5e:f2:1c:ac:31:58:62:
ed:18:63:17:9f:b2:4b:76:1d:6f:27:ce:ef:dd:3c:23:cb:5c:
6e:34:ae:64:e3:2e:0b:49:59:d3:30:b0:af:0c:b2:6d:1f:52:
bd:cc:65:35
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIDAOvGMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAzMDMyMDAwNTJaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDAzQzI0NjgxMTFFQTFDNTRFRjhCM0NDREVGQUU1MTZDMzA5QTZF
QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzur2M4NpS3awji2Ok
323U4zBmxY0p78F1v+c0Mp4AnnlUXHEtP8FIU5RQviBKUfbbT4Wr8defkoV9KB0t
bVtx08khxtEkXeV0rN1gMmslV9OlDHArckcl0gb3lVO2K54TtzBZuNetdjrT5P3B
MKVAeygtxQmBd/en8iwOonm3dTsug3yp7twMopsq0qzjMYTWC3fD1NkD3O9zdLG9
qQaaII4ZzB5EeoqumFRTCBlptI7xBZR3f+Er6WgbL8Tu1aKf4EG7JJyt5MNp1qQM
zz+10lZq+FEZlQ6almL2lb0aYlo2C9Ya7On527NYY4xksBFxNR5VpLVzbw+F3GZM
EUm1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA8JGgRHqHFTvizzN765RbDCabsgw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEw
ODIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMTA4Mi9BOEpHZ1JIcUhGVHZpenpONzY1UmJEQ2Fic2cubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCK+RMAwQCK/78AwQCZxcIAwQC
Zy9QAwQCZ1rAAwQCZ8uMMA0GCSqGSIb3DQEBCwUAA4IBAQBP7uOw7NRWQaM0lAz6
2JcC63XZ9uc/RqNcSFwMwfuPErjxddswCDNKzZPErxuufrqX1eEpZSkYbMuQ7LN9
gQOsa81gQ66aScLbEIFBeNujpQD/Y+ODrHTMXW3s0lS0JhENQcC9qEA7wBnz5fpA
Yn7895ouxDs87R9mKF9vHoqyc/WLUdSn4X1bx1n6WGFgkCV8R01lQtQ9/Xa6edCI
FGM8+FbJvTzWWYo5CsCLa208OyYZsP+LMwLOdY/Ja9B+tI2eWA4Rxm2dAjEgIC8t
opFmr17yHKwxWGLtGGMXn7JLdh1vJ87v3Twjy1xuNK5k4y4LSVnTMLCvDLJtH1K9
zGU1
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:33:56 2026 by rpki-client