
Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
File: A_B12cbxjcCb2mK3CH6oDcW3EcU.cer (raw, json)
Hash identifier: 1hcXdALWLtvdo2ZQ+mkdTyM6RhcyCl8gs53rzvOthew=
Subject key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CADF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:10:38 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 131484
IP: 103.159.122.0/23
IP: 2406:d140::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51935 (0xcadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:10:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:d2:e0:a7:ea:9e:05:64:9b:97:ec:a3:20:
7e:67:c6:b1:ff:b7:97:f3:6b:9c:f2:0d:5f:11:29:
6d:47:a1:84:92:ee:e9:dc:cf:d5:bf:17:40:37:6f:
39:3f:bc:99:72:ae:7b:a9:d7:47:30:51:56:9c:00:
42:e5:b0:7f:9d:07:c6:da:75:04:11:b4:3f:7f:75:
92:92:fc:e3:1e:5a:ed:8c:51:77:75:7f:7e:89:0b:
01:36:89:16:7c:65:d8:43:a7:b6:bd:2a:48:3e:38:
c0:19:f2:83:57:02:9b:78:ed:ac:d6:ea:8b:9f:84:
0f:11:52:29:ed:21:8b:a9:49:a6:ad:16:a3:ed:54:
a3:33:08:20:a4:22:db:15:2a:e7:b1:e1:94:96:14:
53:13:9e:d7:e0:03:e6:b6:6f:f1:dc:22:b0:f0:8b:
e6:ce:64:c8:f0:7f:96:91:d8:38:20:05:c0:0d:cf:
86:ad:9e:f3:c0:5b:94:9a:d4:d8:6c:5d:31:1e:3d:
e0:46:2b:2d:c2:00:30:eb:f4:a0:3f:3b:5c:c4:cf:
4e:70:56:e4:b1:b9:81:5d:fe:b8:15:60:42:9e:43:
91:f5:f2:a6:bc:69:09:f3:28:2e:84:9a:7e:eb:dc:
46:f2:77:13:09:9d:a7:ad:3f:2c:d5:36:a4:8f:6b:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131484
sbgp-ipAddrBlock: critical
IPv4:
103.159.122.0/23
IPv6:
2406:d140::/32
Signature Algorithm: sha256WithRSAEncryption
2f:66:7a:99:cb:c5:24:7d:0a:41:06:af:cc:80:c0:41:e4:95:
31:93:75:75:72:8e:27:9b:ce:59:1d:91:0a:8f:18:18:75:bb:
d5:b5:db:1d:e1:6e:58:94:8e:be:80:fc:c5:63:39:81:ff:bf:
bb:ba:96:64:10:c9:98:0f:95:56:cd:db:03:40:cb:24:ec:83:
5d:ea:d3:93:a4:e0:4d:e2:2b:5d:9e:4a:73:23:62:28:bc:53:
ac:cf:04:85:4b:16:fc:bf:31:b5:91:2c:37:fd:9f:a9:6e:a8:
f8:36:cc:43:b0:98:e7:cd:5a:ed:46:17:0c:2a:0b:f2:45:04:
6b:9e:14:bf:2e:67:b8:85:43:a3:98:7b:95:01:c2:f5:cf:5f:
c1:a9:f5:ce:9c:32:d8:12:b9:e8:0d:3e:84:a4:e8:68:d5:d2:
f7:22:9a:c0:48:41:97:db:6f:c6:01:93:eb:62:d6:fa:24:2b:
4a:22:9d:c0:3c:dc:30:ee:55:f2:36:f4:09:ae:e6:1b:0d:e4:
c4:2f:17:d0:b1:38:02:2d:c7:37:66:65:a9:42:0f:24:97:29:
42:0d:19:32:e2:ff:d4:ad:3e:a9:82:1a:8f:b6:87:e5:7f:f9:
9e:fd:5e:8d:e9:88:12:ba:eb:ee:88:a5:ff:5f:05:a1:4b:db:
ea:2e:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:44 2025 by rpki-client