Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GCxI0kg50SP5l56XkJ1BMn9OVj8.cer
File: GCxI0kg50SP5l56XkJ1BMn9OVj8.cer (raw, json)
Hash identifier: hwOLuSigZ45RlbxvQXHi/LgAfb3H+LUEvwBYmojxaPw=
Subject key identifier: 18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:14:17 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 45075
AS: 55468
IP: 43.248.112.0/22
IP: 101.129.0.0/16
IP: 103.39.204.0/22
IP: 122.10.132.0/23
IP: 122.10.136.0/23
IP: 2400:d100::/32
IP: 2402:bac0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52131 (0xcba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:14:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=182C48D24839D123F9979E97909D41327F4E563F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:93:c7:fb:2c:b5:be:33:2d:45:1c:c3:a5:
ce:8d:4a:03:f8:39:28:ea:17:94:6d:f4:7c:4e:43:
e3:4c:84:f5:7d:7c:38:e5:8e:f0:25:2c:c7:5e:16:
a1:ee:35:94:9b:e7:f4:2f:67:65:41:d1:11:b1:07:
a5:17:47:dd:31:f5:4c:0e:70:b7:94:d5:bd:46:ec:
2f:3a:bc:b8:a6:0e:cd:55:1d:07:25:a1:f6:1d:89:
68:8e:61:b6:48:f1:b8:af:33:16:92:97:ae:06:ab:
d7:90:8d:26:e0:63:4f:2c:4a:2a:b7:d4:2e:63:38:
ca:91:5b:f9:62:ca:fd:eb:4e:e1:04:f2:f9:ad:f4:
78:68:e7:77:9f:4a:5f:ca:73:cb:a7:4d:36:f0:43:
a1:f0:af:ce:18:78:e5:cc:51:9e:33:8a:58:db:84:
5f:9f:78:8d:d5:e9:c2:16:1e:9b:ce:5d:54:28:f9:
7a:fd:90:72:6a:6c:60:a4:b5:86:c0:4c:7e:91:3d:
6b:45:c6:7b:93:94:a1:28:ec:3c:fb:b9:aa:e5:2a:
80:26:ad:de:df:2b:b3:b9:76:24:cd:a8:3f:0e:4f:
40:fb:25:8c:c9:a9:f2:06:91:9e:48:ec:2b:29:42:
09:49:a7:f6:f9:e7:85:25:d0:c8:6e:97:1b:d5:99:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45075
55468
sbgp-ipAddrBlock: critical
IPv4:
43.248.112.0/22
101.129.0.0/16
103.39.204.0/22
122.10.132.0/23
122.10.136.0/23
IPv6:
2400:d100::/32
2402:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
37:26:fa:df:7b:91:ce:9b:96:11:42:e2:30:67:f5:ec:6b:77:
08:2c:44:1c:e1:fc:a2:c2:3f:42:a9:6a:48:e2:c0:17:57:6a:
9d:2e:b0:83:eb:6c:ba:d6:88:ca:cd:2d:89:1e:a5:83:67:f6:
97:f6:51:62:be:1d:0c:ba:60:3f:c8:2a:13:17:69:ba:64:74:
36:d3:7d:11:01:f2:ad:2f:99:35:1c:65:3a:e6:3b:46:72:df:
f5:34:3a:c7:64:ca:a0:f3:36:6f:f9:ec:06:50:77:36:a6:4b:
ca:78:28:d3:04:5e:d9:56:48:53:f5:92:e4:b2:99:df:3a:4c:
e9:80:4d:0a:7d:e5:1e:dd:99:fc:82:9a:9b:d7:73:70:59:31:
17:c5:13:5f:6f:fe:bc:c8:3c:c8:f8:e1:89:03:1d:32:81:c9:
7c:e4:7f:6a:f7:15:db:c2:ad:ec:a5:90:aa:09:ae:bb:d3:a7:
25:1f:9b:e5:c2:d4:ed:fe:17:8f:40:15:4c:8d:c3:7c:78:a8:
fb:1a:08:cc:2f:17:46:66:06:e3:6a:18:f2:e8:f8:73:f9:72:
33:33:d6:db:8d:be:f5:ea:66:f1:13:89:3f:68:02:e9:34:be:
3b:4c:7e:4e:56:51:2d:e4:88:3d:2e:2f:35:d2:e9:6d:13:32:
ae:8a:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:01 2025 by rpki-client