Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer
File: FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer (raw, json)
Hash identifier: WEF8p8qC3g/3T1foG0VyaV6clV7rbFAz8lKJAHrA838=
Subject key identifier: 15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CAED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:10:52 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 131553
IP: 103.164.42.0/23
IP: 2407:3540::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51949 (0xcaed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:10:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=15103AD9A15D7E417C67087793D514CF238AF254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:ef:8e:97:e0:38:be:02:76:2b:7b:49:c2:
24:49:9e:1e:85:10:3e:ed:b6:79:63:13:a9:57:93:
e5:dc:ea:f6:75:28:32:d0:4c:96:75:ec:cc:e5:fa:
26:1a:60:19:39:0c:bc:45:1d:f1:d3:99:66:2f:5f:
99:41:1d:66:62:fc:f7:90:36:65:cf:a0:4d:e4:9a:
aa:f4:15:ad:f3:86:72:e5:7f:d5:7a:7f:03:95:53:
0c:bb:7d:a1:97:51:cc:8b:27:aa:17:2a:b8:0f:08:
84:b1:e3:77:2f:18:e2:6f:68:28:aa:97:7b:1d:82:
19:df:e5:f4:e6:d6:d0:64:fa:8c:97:19:82:15:1a:
be:af:12:91:a1:26:f0:41:3b:90:c1:b3:af:4f:b1:
a7:0f:97:35:96:3c:f1:5a:1b:53:ed:23:4b:41:26:
e8:d0:a2:27:ad:5a:f6:25:e4:48:9e:44:30:b3:1b:
3c:3c:5b:41:a5:bc:ec:1f:1b:e2:cf:06:50:83:bf:
86:ef:2a:b3:08:57:46:74:09:f9:51:87:fd:cb:4b:
db:c8:4b:9f:1b:9c:0e:4b:31:0a:e0:57:8e:6a:cd:
76:4b:a6:e0:88:d9:c8:9c:79:4c:98:b5:2c:3b:58:
78:6e:a8:4e:97:e2:62:71:c6:a1:18:fa:2b:5c:2b:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131553
sbgp-ipAddrBlock: critical
IPv4:
103.164.42.0/23
IPv6:
2407:3540::/32
Signature Algorithm: sha256WithRSAEncryption
60:ea:4f:b7:b9:3c:cf:47:97:6f:24:63:82:4d:f2:93:d5:d1:
e9:d9:97:01:32:57:91:2b:75:81:15:85:c8:04:50:e6:45:f3:
cc:66:a7:6b:19:b1:93:84:43:81:d2:4d:2f:55:8d:90:45:17:
b9:61:87:8d:59:ac:65:53:00:3c:a0:17:b7:07:0c:71:90:20:
14:5a:f5:af:64:1a:1c:e3:dc:83:57:60:28:46:31:99:c1:f9:
d5:4b:41:08:74:d0:80:a8:0a:55:7c:8d:13:51:b3:35:6b:db:
14:40:41:6b:69:67:6d:5b:3f:0f:2a:02:be:71:65:b9:e2:0d:
79:f5:f6:1b:96:bd:db:59:9a:ab:ca:33:c4:21:8b:d3:77:58:
cd:b5:7c:95:67:9b:dc:7e:70:b3:5d:8a:71:85:6b:ed:b1:ea:
70:2a:39:65:5a:df:8c:5e:0e:72:82:a1:8f:e4:05:f8:d6:52:
7f:bc:c7:3a:73:39:02:51:32:93:e8:9f:4e:cf:43:0d:8a:21:
bf:b9:37:c1:43:cc:6e:0b:1a:1a:05:59:8b:12:a2:6c:45:32:
18:e6:ba:cd:c3:f7:c4:51:dd:2a:ea:9a:0f:28:c5:05:23:17:
4d:ea:5c:29:a6:25:9d:a7:02:af:5d:fb:72:df:1f:d7:1d:9a:
71:c3:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:18 2025 by rpki-client