Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
File: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer (raw, json)
Hash identifier: SUnOodIW2CDcSWDbciQwt9znOhe39d2iQn7dJivl7p4=
Subject key identifier: 13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CA51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:07:12 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 146799
AS: 146801
IP: 103.29.24.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51793 (0xca51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:07:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:9b:b5:c8:ad:5c:2b:bd:56:c3:77:18:39:
4a:c1:79:ab:d4:f8:b1:57:4c:a2:fd:5d:cc:d0:84:
1d:88:b8:28:16:ec:91:ee:fc:78:5c:77:10:c3:80:
d6:89:2f:d9:fb:55:06:06:af:8a:41:df:00:a4:38:
1c:3b:49:35:73:88:18:95:c4:97:fe:22:32:06:0f:
48:89:7a:6c:0d:90:01:95:db:ce:60:eb:bb:a2:59:
d1:e5:01:13:f7:47:14:ff:fb:9f:50:0c:a6:dd:36:
4a:29:c5:7f:c4:cf:60:05:37:75:b0:d1:7a:18:44:
e5:ec:77:31:ae:ba:9a:12:c0:ea:76:bb:d9:cc:b4:
c2:97:3d:b1:99:63:ad:25:70:28:6e:e1:4e:55:1a:
22:ec:43:ed:c1:05:53:d7:f0:9f:7f:52:77:7c:47:
ad:e7:01:e9:6a:0c:00:c4:0d:82:32:df:09:0c:8d:
6d:c2:fa:0a:d6:f0:fd:ca:dc:9b:78:0d:06:e2:8c:
93:90:a0:5f:34:56:78:c2:2b:ae:9c:03:23:d2:af:
5a:3a:e5:89:73:1c:ec:ae:08:2d:fb:c9:11:ec:7f:
1b:89:59:fa:c6:aa:5b:36:00:b1:b8:a6:5e:99:31:
24:be:8b:d6:1f:6c:fb:a5:0d:76:e8:c7:7c:74:68:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146799
146801
sbgp-ipAddrBlock: critical
IPv4:
103.29.24.0/23
Signature Algorithm: sha256WithRSAEncryption
97:23:5e:10:6f:d2:95:01:eb:5e:6f:f6:60:8e:8c:b6:69:bc:
69:a0:6e:a3:9b:5d:a1:d3:c6:32:6b:3e:e1:65:2d:a4:aa:79:
fb:ed:77:02:a1:ce:d9:bd:d5:1c:fc:18:73:6c:60:e5:96:7c:
9a:9a:3d:24:05:b0:b7:c2:30:c4:4a:1f:92:96:0a:90:50:c2:
a3:1d:91:70:9a:ad:a9:94:28:1e:79:85:22:28:a6:6b:ba:6f:
fd:ed:c9:1e:1d:0f:be:6c:de:cc:7e:3d:89:0a:d1:51:b3:4c:
5a:fc:71:10:2f:7c:da:d8:7b:64:3f:0f:54:74:a6:76:d2:bb:
45:e5:1c:09:68:92:1d:89:5c:1c:48:7a:e5:f7:47:c9:b1:d3:
a8:1f:04:7d:cb:97:08:99:a9:36:fd:7d:4d:57:df:31:c9:3c:
8d:4b:68:de:7e:5f:c6:3c:46:c2:b7:21:9e:0c:40:ba:23:40:
73:ef:97:7c:fa:56:88:b5:5d:8a:ad:34:ca:93:db:18:92:d9:
c8:ca:a8:5b:84:54:c6:90:55:97:5e:5e:ac:d4:b8:df:bd:23:
7b:19:65:85:e6:16:b7:ca:c0:e8:4a:ee:99:8e:71:4d:69:8a:
70:92:1b:19:0b:63:e4:ba:05:52:f4:d0:17:ae:3f:7f:58:a4:
1e:76:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:42 2025 by rpki-client