Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer
File: Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer (raw, json)
Hash identifier: FjIVBWz/BMKA+VoIhSczbpK201vIc8DlEww+9QhjqwU=
Subject key identifier: 1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BE4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:27:58 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 157.15.102.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15332 (0x3be4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:27:58 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:d2:59:6c:13:ac:ef:a6:7d:1c:4e:37:d6:
d1:a8:6e:dc:35:4a:30:7e:a4:6d:cb:d8:5d:f8:51:
fc:cd:61:42:a7:a1:6f:3b:72:14:30:83:65:d4:ad:
9f:96:c3:2a:fe:81:c2:55:9e:99:a4:a3:28:f9:53:
38:cb:c8:03:af:82:14:c7:97:0c:20:60:b5:df:67:
95:69:f1:09:3d:f1:37:46:25:6b:bb:a6:f1:a0:c8:
13:4c:a1:20:c3:22:dd:b7:9e:fd:14:2a:cc:4c:40:
ff:49:4c:7d:23:06:20:d9:52:a6:3d:73:4b:c7:f3:
d7:11:27:37:1d:cc:99:5f:ef:ac:61:05:02:be:88:
06:77:bc:55:1c:27:a7:a7:be:2c:bc:82:cb:cc:44:
77:f1:39:6c:e9:df:20:c7:20:fa:65:28:31:70:c4:
23:08:91:f5:95:a7:64:87:67:40:38:d1:8a:d9:b1:
81:88:86:f9:5e:c2:e3:2f:b0:fe:7e:d0:66:89:7b:
bc:53:ef:29:66:95:ca:0e:7d:93:86:ad:d0:32:60:
2e:a1:77:cf:b3:66:87:6a:c5:21:1a:85:cf:c6:9c:
dc:76:89:b7:eb:8f:a0:69:64:a3:d7:60:8a:af:b8:
5b:a7:54:7d:4d:a4:16:09:42:bf:fb:85:4b:88:34:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.102.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:0a:6a:27:3f:0e:b3:58:b4:46:f8:6b:66:28:14:5d:cc:c9:
17:62:d2:2f:20:26:3b:a9:96:c5:96:70:1d:25:d7:c5:42:62:
22:2d:53:a4:d5:1e:08:22:73:cc:37:3a:70:93:73:e1:21:68:
d5:aa:13:83:83:d6:83:85:98:70:3c:98:e0:39:e8:58:c3:11:
37:31:6e:7e:2d:1f:9b:97:59:e5:e4:49:e3:de:93:4e:f7:f4:
cd:67:cc:23:c4:5d:9e:24:cc:2e:22:f1:cc:a8:ba:d4:26:c1:
a0:4c:ae:3e:d2:49:99:f3:c7:60:7e:1a:a8:cd:2d:b2:4e:1e:
3e:e5:8d:f1:81:39:c5:d0:17:41:ef:55:cc:b9:46:ca:51:97:
04:36:be:18:67:2b:f8:39:d9:da:b4:fa:5c:19:0a:00:02:06:
f5:c6:c6:db:4f:94:3a:08:05:6f:0a:d7:90:0f:ae:1a:dc:73:
f7:e6:41:2d:0f:6a:30:a5:7d:3a:b8:37:1e:95:a1:66:0d:0d:
1e:06:d7:40:0f:89:01:95:22:52:ea:0a:a7:d2:30:a1:4f:20:
5a:7c:60:a0:05:8f:e9:45:54:33:7a:25:b5:ce:99:9f:9b:ef:
c6:2a:84:91:34:18:5f:04:00:5d:02:16:6e:59:c1:fe:2e:ba:
f9:86:fa:21
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICO+QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw
QTU0QTk1MTk1QTExMB4XDTI1MDMyMTAzMjc1OFoXDTI1MDkyNzAyNDAxNFowMzEx
MC8GA1UEAxMoMUIxOEEzRENFRUI4M0E1RTM3ODAyQUIxMTJGRDA4MjdFOUE5NjJD
RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwM0llsE6zvpn0cTjfW
0ahu3DVKMH6kbcvYXfhR/M1hQqehbztyFDCDZdStn5bDKv6BwlWemaSjKPlTOMvI
A6+CFMeXDCBgtd9nlWnxCT3xN0Yla7um8aDIE0yhIMMi3bee/RQqzExA/0lMfSMG
INlSpj1zS8fz1xEnNx3MmV/vrGEFAr6IBne8VRwnp6e+LLyCy8xEd/E5bOnfIMcg
+mUoMXDEIwiR9ZWnZIdnQDjRitmxgYiG+V7C4y+w/n7QZol7vFPvKWaVyg59k4at
0DJgLqF3z7Nmh2rFIRqFz8ac3HaJt+uPoGlko9dgiq+4W6dUfU2kFglCv/uFS4g0
Q/ECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQbGKPc7rg6XjeAKrES/Qgn6alizzAf
BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx
RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
NS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zMjY1L0d4aWozTzY0T2w0M2dDcXhFdjBJSi1tcFlzOC5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdD2YwDQYJKoZIhvcNAQELBQAD
ggEBAGoKaic/DrNYtEb4a2YoFF3MyRdi0i8gJjuplsWWcB0l18VCYiItU6TVHggi
c8w3OnCTc+EhaNWqE4OD1oOFmHA8mOA56FjDETcxbn4tH5uXWeXkSePek0739M1n
zCPEXZ4kzC4i8cyoutQmwaBMrj7SSZnzx2B+GqjNLbJOHj7ljfGBOcXQF0HvVcy5
RspRlwQ2vhhnK/g52dq0+lwZCgACBvXGxttPlDoIBW8K15APrhrcc/fmQS0PajCl
fTq4Nx6VoWYNDR4G10APiQGVIlLqCqfSMKFPIFp8YKAFj+lFVDN6JbXOmZ+b78Yq
hJE0GF8EAF0CFm5Zwf4uuvmG+iE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:41 2025 by rpki-client