Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GRRCCqTTqQi4XigNXJTTeV7ZApo.cer
File:                     GRRCCqTTqQi4XigNXJTTeV7ZApo.cer (raw, json)
Hash identifier:          sfxYzpW2UAgWUbmKgiC9MrabcK1wIqzuNKi/i2ILcRc=
Subject key identifier:   19:14:42:0A:A4:D3:A9:08:B8:5E:28:0D:5C:94:D3:79:5E:D9:02:9A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       C4E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/GRRCCqTTqQi4XigNXJTTeV7ZApo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 06 Feb 2025 03:22:16 +0000
Certificate not after:    Fri 06 Feb 2026 03:05:20 +0000
Subordinate resources:    IP: 163.61.62.0/23
Validation:               Failed, certificate revoked on Fri 21 Mar 2025 02:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50403 (0xc4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000
        Validity
            Not Before: Feb  6 03:22:16 2025 GMT
            Not After : Feb  6 03:05:20 2026 GMT
        Subject: CN=1914420AA4D3A908B85E280D5C94D3795ED9029A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:63:78:4d:a2:45:68:37:87:f8:e9:7c:49:
                    3f:fa:07:30:f4:31:ed:21:e6:a6:b2:8b:63:f1:54:
                    df:f0:ff:c0:2b:af:bf:34:c2:b9:8c:c2:ba:2a:17:
                    09:45:91:20:ed:0f:e6:b8:d2:68:2b:fc:29:02:31:
                    64:e8:9a:fb:bb:f5:a3:ba:d0:7f:0f:95:2a:c1:2a:
                    c9:43:96:61:b3:ea:c3:1c:a8:ba:c2:34:8c:bd:58:
                    6f:25:2d:a5:71:09:d5:f7:9f:ae:f9:23:0d:9b:6c:
                    d1:70:fe:c2:02:8b:85:ec:97:14:a2:64:f4:c4:fc:
                    e5:00:25:4c:ca:54:d9:d7:b5:bb:1f:19:b1:b7:61:
                    3d:16:00:c0:a9:98:03:93:a2:ff:3a:74:d9:82:4c:
                    dc:bc:d1:23:19:df:a7:53:9c:94:28:6d:7e:43:21:
                    58:aa:33:c0:ec:1d:81:04:ad:90:6d:96:4a:1f:9f:
                    1d:82:fb:fe:22:71:54:b4:17:99:1c:c8:b5:6f:f8:
                    7a:de:86:05:be:f2:7c:c0:7d:2d:0f:c1:17:b6:f0:
                    0b:c7:65:6e:08:a2:27:93:e7:9c:8a:cf:6e:02:7b:
                    b8:cd:68:0c:96:10:8c:40:81:f1:e7:ad:d2:bb:78:
                    14:0f:81:d4:e3:51:66:17:f0:f0:0e:84:b9:91:98:
                    d1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:42:0A:A4:D3:A9:08:B8:5E:28:0D:5C:94:D3:79:5E:D9:02:9A
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/GRRCCqTTqQi4XigNXJTTeV7ZApo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:3a:17:eb:d9:a3:73:5c:34:6e:b8:61:0b:3c:42:1b:d0:ff:
         db:ba:02:39:48:17:e6:d7:5d:ee:de:38:50:51:86:00:06:d8:
         7c:ca:cc:95:05:46:0c:1b:47:d9:cf:6c:0f:17:80:9b:b5:b9:
         2e:a9:ad:f9:4e:da:6d:dd:b8:dd:bb:7b:b9:e8:cf:a7:f0:73:
         fc:7a:70:aa:ce:68:cc:65:94:7c:0b:1b:7e:dc:f4:76:ab:c7:
         9d:aa:5c:2e:6c:ef:cc:e9:03:19:17:b8:8d:32:b6:f2:7a:4a:
         bd:d0:29:54:95:27:55:38:8a:db:0a:30:8d:df:e5:1f:a5:36:
         68:e3:46:78:65:f0:98:14:ac:e7:d1:ee:bd:89:6f:d9:ef:c8:
         ad:71:d3:11:ed:ce:1f:04:a7:93:b4:b9:7d:f1:e6:34:3e:37:
         65:eb:89:71:60:d7:41:dc:c9:c9:1c:67:e0:ca:83:2d:7a:eb:
         15:cf:b3:14:4e:1e:2e:e0:44:4a:f6:f5:cb:a0:87:61:96:38:
         1c:2a:fc:7d:e8:ca:88:78:ff:e0:00:71:9e:05:d9:a2:99:4d:
         5c:f8:a8:ca:0d:ff:d7:a5:02:b3:85:d4:60:87:58:c1:06:99:
         9e:44:1f:af:67:cf:e0:69:88:e9:ae:25:e7:40:12:cf:01:65:
         18:11:d3:95
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDAMTjMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAyMDYwMzIyMTZaFw0yNjAyMDYwMzA1MjBaMDMx
MTAvBgNVBAMTKDE5MTQ0MjBBQTREM0E5MDhCODVFMjgwRDVDOTREMzc5NUVEOTAy
OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KGN4TaJFaDeH+Ol8
ST/6BzD0Me0h5qayi2PxVN/w/8Arr780wrmMwroqFwlFkSDtD+a40mgr/CkCMWTo
mvu79aO60H8PlSrBKslDlmGz6sMcqLrCNIy9WG8lLaVxCdX3n675Iw2bbNFw/sIC
i4XslxSiZPTE/OUAJUzKVNnXtbsfGbG3YT0WAMCpmAOTov86dNmCTNy80SMZ36dT
nJQobX5DIViqM8DsHYEErZBtlkofnx2C+/4icVS0F5kcyLVv+HrehgW+8nzAfS0P
wRe28AvHZW4IoieT55yKz24Ce7jNaAyWEIxAgfHnrdK7eBQPgdTjUWYX8PAOhLmR
mNHjAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUGRRCCqTTqQi4XigNXJTTeV7ZApow
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
NTAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM1MC9HUlJDQ3FUVHFRaTRYaWdOWEpUVGVWN1pBcG8ubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoz0+MA0GCSqGSIb3DQEBCwUA
A4IBAQAHOhfr2aNzXDRuuGELPEIb0P/bugI5SBfm113u3jhQUYYABth8ysyVBUYM
G0fZz2wPF4Cbtbkuqa35Ttpt3bjdu3u56M+n8HP8enCqzmjMZZR8Cxt+3PR2q8ed
qlwubO/M6QMZF7iNMrbyekq90ClUlSdVOIrbCjCN3+UfpTZo40Z4ZfCYFKzn0e69
iW/Z78itcdMR7c4fBKeTtLl98eY0Pjdl64lxYNdB3MnJHGfgyoMteusVz7MUTh4u
4ERK9vXLoIdhljgcKvx96MqIeP/gAHGeBdmimU1c+KjKDf/XpQKzhdRgh1jBBpme
RB+vZ8/gaYjpriXnQBLPAWUYEdOV
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:33 2025 by rpki-client