Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/E2CTbmfETZO_WT2GobjJ3gG6y8w.cer
File: E2CTbmfETZO_WT2GobjJ3gG6y8w.cer (raw, json)
Hash identifier: Kb/esVNa8ghha0k0i76zqzdIeR4TFNS+iuBH5Tnrrg8=
Subject key identifier: 13:60:93:6E:67:C4:4D:93:BF:59:3D:86:A1:B8:C9:DE:01:BA:CB:CC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C6C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3357/E2CTbmfETZO_WT2GobjJ3gG6y8w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3357/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 10 Mar 2025 23:20:34 +0000
Certificate not after: Tue 10 Mar 2026 23:06:01 +0000
Subordinate resources: IP: 163.223.68.0/23
IP: 2401:f4a0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50883 (0xc6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 10 23:20:34 2025 GMT
Not After : Mar 10 23:06:01 2026 GMT
Subject: CN=1360936E67C44D93BF593D86A1B8C9DE01BACBCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:0d:21:8c:fe:15:ef:09:c2:6b:99:e5:72:
91:d6:5c:00:6c:28:88:10:65:45:b5:a8:62:f0:c5:
fc:b0:26:89:12:42:c0:0a:34:5f:e3:c8:ab:3a:5b:
a9:67:80:15:98:ee:c2:8b:34:2c:88:6d:91:fc:cc:
4b:a2:ad:69:19:f5:60:ec:c2:28:41:47:02:e1:8e:
e3:bf:f8:ac:d2:2e:5a:98:67:15:a7:0b:3d:d5:12:
32:50:ad:bd:0c:86:77:b8:7b:ff:0d:6e:c4:d0:c5:
50:20:61:58:87:20:83:ac:9e:f4:da:2c:12:5f:c3:
76:e4:a1:79:78:85:7e:e2:40:fc:50:14:29:1e:d5:
fe:1d:ee:0c:88:cd:f2:cb:4b:a2:cd:39:5e:14:13:
f0:6d:a2:43:b4:fa:48:61:aa:4e:1a:1b:94:82:ef:
6a:9b:f5:61:0e:05:0b:0b:42:09:41:5c:ef:e8:a1:
4f:ba:14:fe:9c:91:36:e5:eb:34:6d:59:77:28:6e:
5c:ee:46:02:f4:77:89:d2:1c:1b:16:cc:c0:c2:50:
4f:21:32:dc:4d:65:b2:f2:da:aa:a3:e1:ab:47:88:
38:99:28:f5:72:45:87:e0:1d:94:d4:39:5c:07:0b:
72:0d:84:af:9c:5d:f0:c4:c9:73:8e:d6:29:c2:a7:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:60:93:6E:67:C4:4D:93:BF:59:3D:86:A1:B8:C9:DE:01:BA:CB:CC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3357/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3357/E2CTbmfETZO_WT2GobjJ3gG6y8w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.68.0/23
IPv6:
2401:f4a0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:25:ed:1f:16:33:d7:e5:ef:48:96:37:67:2b:f1:5d:70:9f:
e0:54:ee:04:a2:9e:2f:68:8a:d7:ec:e5:7c:55:d1:67:93:ab:
ca:9a:f1:ff:df:f3:91:f5:62:f7:1c:29:da:13:33:18:64:11:
c0:50:a0:c1:ab:6c:1f:dc:db:39:a7:36:c7:4e:67:64:ae:9e:
94:1c:75:dd:ed:43:5e:fc:ec:ee:29:ad:b1:91:ac:82:db:78:
bc:ee:9a:31:c7:e2:32:d8:3d:72:2f:2d:c8:3d:c7:01:b8:57:
5a:84:df:3c:e5:7e:d5:8a:84:8e:67:6c:54:77:8a:35:dd:6b:
e0:ae:ce:2a:9d:80:17:64:c8:d7:d7:ad:7d:d3:e0:67:4e:a5:
e0:86:e9:e9:0e:be:7c:d1:02:c5:27:3e:49:e6:a1:46:82:ca:
ae:36:dc:d8:10:34:05:50:29:06:f8:6b:e1:de:8d:7a:3d:a0:
99:94:fb:ed:33:82:2b:40:75:dd:88:0e:d7:b8:cb:a5:bc:d3:
bb:2d:0d:f5:ed:ca:fe:5f:8f:98:e3:01:5c:bf:98:df:8c:35:
c7:4f:61:3a:5e:f6:da:69:2d:5d:f6:d0:dc:1f:2c:19:2e:52:
e5:d7:c1:4d:95:0f:42:2c:4f:49:76:82:85:cd:47:63:6e:e4:
0e:65:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:50 2025 by rpki-client