Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/F1mdmaUx-BsV172e8tRomDHw2F0.cer
File: F1mdmaUx-BsV172e8tRomDHw2F0.cer (raw, json)
Hash identifier: GDjZr/vm/qwor4uvluJcQYh6RQQAgt8NLrN28HpXGjw=
Subject key identifier: 17:59:9D:99:A5:31:F8:1B:15:D7:BD:9E:F2:D4:68:98:31:F0:D8:5D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:30:42 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 103.152.246.0/23
IP: 2406:3ac0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52193 (0xcbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:30:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=17599D99A531F81B15D7BD9EF2D4689831F0D85D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:2c:84:9a:b6:e8:5d:65:19:05:97:de:39:
9e:8a:ce:16:03:2b:bd:e5:9a:25:76:4e:57:20:7a:
84:43:e5:e3:86:a6:36:70:dd:1c:1c:93:e6:a2:44:
11:07:16:0c:fa:79:7b:a4:d7:5c:77:f2:09:18:39:
65:fc:b6:ab:d0:1e:e8:bd:07:24:a9:76:39:57:2a:
af:1c:09:6f:24:e6:e5:7d:28:26:0e:37:e8:59:75:
05:2e:09:1e:ca:45:a0:c6:68:90:c5:fe:41:18:37:
ac:60:23:d8:d6:52:2d:3b:28:ff:49:25:5e:fb:1f:
0c:7f:cb:cd:5d:73:48:46:80:1d:92:d3:f2:03:82:
eb:18:e3:3b:44:4e:e5:50:96:13:c7:09:4b:68:68:
2e:7e:1d:9c:92:69:a5:3f:f7:af:0c:02:da:45:32:
4f:ef:2c:f3:56:f0:55:93:b4:97:cb:5f:68:ad:d4:
9e:de:16:22:14:8a:e9:89:20:9f:87:5d:b5:e1:8d:
af:02:48:d0:5e:65:66:f8:0b:67:43:e5:84:9c:55:
6e:90:27:93:a7:57:65:b5:c0:0a:d4:4a:02:63:6e:
42:d4:43:e6:8e:53:4f:b5:12:5f:ad:e7:ae:81:35:
7d:39:10:6a:4a:6e:74:17:2b:a5:34:1d:c1:cd:30:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:9D:99:A5:31:F8:1B:15:D7:BD:9E:F2:D4:68:98:31:F0:D8:5D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F1mdmaUx-BsV172e8tRomDHw2F0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.246.0/23
IPv6:
2406:3ac0::/32
Signature Algorithm: sha256WithRSAEncryption
23:8e:a8:fe:43:ed:5c:64:76:10:2b:fc:70:8d:fa:38:de:95:
c2:c9:8c:fd:92:a7:7f:ee:e2:25:79:ff:5d:cc:56:6c:62:da:
c7:99:73:63:88:85:00:fe:4a:10:d8:d9:50:a8:10:c1:92:c8:
3b:fa:35:0a:5d:5b:b5:51:cd:84:96:ac:2f:f6:08:d4:92:64:
91:6d:dc:63:15:a6:d6:53:b7:15:d1:5f:29:7d:f4:8d:0c:5e:
69:97:58:5f:d4:52:65:01:50:32:14:93:09:9f:ce:1e:47:9f:
a8:22:9f:91:59:eb:12:aa:41:f8:a5:26:5c:a5:7c:04:9c:75:
f9:81:99:59:68:0a:ec:6a:2a:48:49:a9:22:d3:8e:0d:0c:8e:
7d:35:fd:1d:33:12:95:85:04:f5:59:71:c7:71:0e:ff:bc:8f:
09:95:45:96:4a:4a:80:0b:f9:51:b4:1e:2f:f8:80:4f:7b:b5:
5d:f7:66:4c:51:ec:43:0f:0c:b5:aa:3e:43:32:88:8d:7f:27:
b0:f6:66:1b:90:be:bd:07:66:ae:35:a4:c9:da:ac:86:a1:70:
e8:c0:21:b3:1d:c4:dd:15:a7:c1:1c:8c:0e:c2:4c:03:d3:b5:
af:c2:b1:77:54:d8:e3:ed:62:90:4c:9d:28:e6:5e:d1:08:1b:
8c:a1:44:37
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDAMvhMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMzMwNDJaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDE3NTk5RDk5QTUzMUY4MUIxNUQ3QkQ5RUYyRDQ2ODk4MzFGMEQ4
NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOCyEmrboXWUZBZfe
OZ6KzhYDK73lmiV2TlcgeoRD5eOGpjZw3Rwck+aiRBEHFgz6eXuk11x38gkYOWX8
tqvQHui9BySpdjlXKq8cCW8k5uV9KCYON+hZdQUuCR7KRaDGaJDF/kEYN6xgI9jW
Ui07KP9JJV77Hwx/y81dc0hGgB2S0/IDgusY4ztETuVQlhPHCUtoaC5+HZySaaU/
968MAtpFMk/vLPNW8FWTtJfLX2it1J7eFiIUiumJIJ+HXbXhja8CSNBeZWb4C2dD
5YScVW6QJ5OnV2W1wArUSgJjbkLUQ+aOU0+1El+t566BNX05EGpKbnQXK6U0HcHN
MM0/AgMBAAGjggJkMIICYDAdBgNVHQ4EFgQUF1mdmaUx+BsV172e8tRomDHw2F0w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5
OTQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjk5NC9GMW1kbWFVeC1Cc1YxNzJlOHRSb21ESHcyRjAubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5j2MA0EAgACMAcDBQAkBjrA
MA0GCSqGSIb3DQEBCwUAA4IBAQAjjqj+Q+1cZHYQK/xwjfo43pXCyYz9kqd/7uIl
ef9dzFZsYtrHmXNjiIUA/koQ2NlQqBDBksg7+jUKXVu1Uc2Elqwv9gjUkmSRbdxj
FabWU7cV0V8pffSNDF5pl1hf1FJlAVAyFJMJn84eR5+oIp+RWesSqkH4pSZcpXwE
nHX5gZlZaArsaipISaki044NDI59Nf0dMxKVhQT1WXHHcQ7/vI8JlUWWSkqAC/lR
tB4v+IBPe7Vd92ZMUexDDwy1qj5DMoiNfyew9mYbkL69B2auNaTJ2qyGoXDowCGz
HcTdFafBHIwOwkwD07WvwrF3VNjj7WKQTJ0o5l7RCBuMoUQ3
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:39 2025 by rpki-client