Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DLBMxaazmxSN1xDvXG4_LZOAtFU.cer
File: DLBMxaazmxSN1xDvXG4_LZOAtFU.cer (raw, json)
Hash identifier: U4cPs3k9EqxZRkB7fhLGTJ3d3Awk4lAy2DmztL9MJ78=
Subject key identifier: 0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CAD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:09:51 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 55989
IP: 45.124.76.0/22
IP: 103.43.132.0/22
IP: 103.157.212.0/23
IP: 103.192.208.0/22
IP: 103.235.100.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51923 (0xcad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:09:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0CB04CC5A6B39B148DD710EF5C6E3F2D9380B455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:c6:32:88:0d:3d:7f:d7:d6:ce:f9:ee:ab:
6b:dd:e0:96:44:da:62:2e:12:ed:08:42:b9:15:23:
d1:a0:3c:86:ee:62:ad:db:96:42:6c:b0:5b:38:05:
3c:93:77:02:53:1e:db:42:3f:73:71:db:be:2a:f1:
8c:71:92:b5:42:87:8a:e4:5c:eb:be:a8:75:7e:6b:
dc:d0:fd:fc:31:02:be:6f:98:19:f7:4b:a6:26:0c:
7f:05:42:19:02:9a:94:07:9b:5b:65:ed:15:f9:58:
b1:49:f6:4f:bd:e6:51:67:19:d1:00:58:e1:3a:1e:
58:5f:4c:b0:ec:e9:ac:c6:70:bb:52:4c:6b:f7:df:
04:3d:91:b8:48:94:b6:20:59:51:16:bb:68:71:04:
fd:14:2c:06:c2:52:ab:c2:0e:60:3d:54:e1:ca:88:
21:9f:ce:8e:af:dd:27:22:74:eb:d2:f4:76:fd:8b:
9e:ed:c6:36:a1:b5:f8:80:23:8b:ce:9d:13:a8:af:
ef:c5:60:1e:69:2d:c9:79:16:e3:ea:56:e8:bd:ae:
b3:42:37:34:33:30:4d:dd:6b:25:fd:2c:3e:ce:e4:
93:84:94:8f:ba:a8:df:3d:12:e8:3f:0a:b1:ad:52:
cf:6e:1c:2a:ea:1b:d9:12:ce:46:57:49:7f:00:c1:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55989
sbgp-ipAddrBlock: critical
IPv4:
45.124.76.0/22
103.43.132.0/22
103.157.212.0/23
103.192.208.0/22
103.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
10:1c:67:88:48:cd:2f:e6:4e:ba:47:dd:85:d3:e1:cc:61:da:
72:b5:23:e3:a3:e6:08:84:e9:8c:c1:06:11:db:12:49:fd:ed:
62:51:3e:17:e8:9e:72:55:7f:83:9b:00:1c:26:0b:97:92:c4:
1d:02:00:9d:14:39:1c:c4:ad:d6:46:46:6a:fe:3c:ce:08:37:
60:02:13:fa:84:bd:1a:ce:b4:18:a8:04:17:52:7b:bd:75:f8:
9e:fa:d2:17:e0:f9:57:7b:24:b0:a2:9d:59:a5:ab:46:46:dc:
b6:ba:34:ac:95:b8:4b:4c:57:da:7c:c4:ff:00:b7:6a:9f:99:
0e:f7:fb:21:ae:45:f8:c6:be:b5:17:57:7d:6b:e8:d7:0f:50:
97:9e:a2:42:a0:24:8c:04:bb:70:72:c8:30:1b:f3:6e:14:84:
0c:dc:54:16:c1:95:ad:ff:5b:d9:2d:54:7f:15:7b:79:f3:90:
7d:5f:d5:cc:a1:13:72:f0:8a:0e:f8:fa:c9:b5:30:ee:d0:f8:
1c:33:51:d7:38:17:dc:c2:55:26:89:25:8a:f9:67:66:ad:68:
2c:7d:f9:a1:fd:d7:d6:c6:06:2a:1d:c0:e8:3a:32:11:50:76:
c1:f1:b2:6c:bd:70:82:c8:4a:c9:e2:52:75:55:da:23:43:70:
16:02:81:d3
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIDAMrTMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMzA5NTFaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDBDQjA0Q0M1QTZCMzlCMTQ4REQ3MTBFRjVDNkUzRjJEOTM4MEI0
NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVcYyiA09f9fWzvnu
q2vd4JZE2mIuEu0IQrkVI9GgPIbuYq3blkJssFs4BTyTdwJTHttCP3Nx274q8Yxx
krVCh4rkXOu+qHV+a9zQ/fwxAr5vmBn3S6YmDH8FQhkCmpQHm1tl7RX5WLFJ9k+9
5lFnGdEAWOE6HlhfTLDs6azGcLtSTGv33wQ9kbhIlLYgWVEWu2hxBP0ULAbCUqvC
DmA9VOHKiCGfzo6v3ScidOvS9Hb9i57txjahtfiAI4vOnROor+/FYB5pLcl5FuPq
Vui9rrNCNzQzME3dayX9LD7O5JOElI+6qN89Eug/CrGtUs9uHCrqG9kSzkZXSX8A
waH7AgMBAAGjggKJMIIChTAdBgNVHQ4EFgQUDLBMxaazmxSN1xDvXG4/LZOAtFUw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw
MjYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzAyNi9ETEJNeGFhem14U04xeER2WEc0X0xaT0F0RlUubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDatTA3BggrBgEFBQcBBwEB/wQoMCYw
JAQCAAEwHgMEAi18TAMEAmcrhAMEAWed1AMEAmfA0AMEAmfrZDANBgkqhkiG9w0B
AQsFAAOCAQEAEBxniEjNL+ZOukfdhdPhzGHacrUj46PmCITpjMEGEdsSSf3tYlE+
F+ieclV/g5sAHCYLl5LEHQIAnRQ5HMSt1kZGav48zgg3YAIT+oS9Gs60GKgEF1J7
vXX4nvrSF+D5V3sksKKdWaWrRkbctro0rJW4S0xX2nzE/wC3ap+ZDvf7Ia5F+Ma+
tRdXfWvo1w9Ql56iQqAkjAS7cHLIMBvzbhSEDNxUFsGVrf9b2S1UfxV7efOQfV/V
zKETcvCKDvj6ybUw7tD4HDNR1zgX3MJVJoklivlnZq1oLH35of3X1sYGKh3A6Doy
EVB2wfGybL1wgshKyeJSdVXaI0NwFgKB0w==
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:42 2025 by rpki-client