Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HsPdz0dl7wGHxupiZgyDpkGedEQ.cer
File: HsPdz0dl7wGHxupiZgyDpkGedEQ.cer (raw, json)
Hash identifier: o0WCaym5gCbm8TDrPOMuHflTxEOPPOX6uqAn6iURgXs=
Subject key identifier: 1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CAE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:10:42 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 9395
IP: 43.247.208.0/22
IP: 49.221.0.0/16
IP: 103.23.56.0/22
IP: 103.24.184.0/22
IP: 115.172.0.0/19
IP: 115.172.96.0 -- 115.172.191.255
IP: 124.14.64.0 -- 124.14.191.255
IP: 124.14.224.0/19
IP: 124.15.128.0/18
IP: 124.254.0.0/18
IP: 175.188.128.0/17
IP: 175.190.0.0/17
IP: 180.88.0.0 -- 180.89.127.255
IP: 180.91.128.0/17
IP: 211.161.0.0 -- 211.161.59.255
IP: 211.161.64.0/19
IP: 211.161.112.0 -- 211.161.191.255
IP: 211.162.0.0/18
IP: 211.162.80.0 -- 211.162.111.255
IP: 211.162.128.0/18
IP: 211.162.196.0 -- 211.162.255.255
IP: 220.112.128.0/18
IP: 220.112.208.0/20
IP: 220.113.0.0 -- 220.113.149.255
IP: 220.113.168.0 -- 220.113.223.255
IP: 220.115.0.0/19
IP: 220.115.64.0 -- 220.115.247.255
IP: 223.210.0.0/17
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51939 (0xcae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:10:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1EC3DDCF4765EF0187C6EA62660C83A6419E7444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:8b:b4:3c:44:1f:6c:c8:6f:11:f7:3f:5a:
e8:98:b2:2f:95:61:3d:3a:38:0b:56:8b:2e:93:a2:
bf:75:ab:08:35:ec:c0:51:e3:7d:6a:43:d3:b6:49:
d1:df:5b:cd:e1:61:6f:8c:46:6c:5e:4e:74:81:ce:
15:35:d8:c9:77:5d:e1:48:10:f4:71:59:4d:3d:5d:
6d:59:10:a4:97:11:79:8a:59:3f:c0:cc:f7:0a:f3:
dc:6d:3c:6c:6f:bc:18:ba:c3:69:c1:a0:0a:55:eb:
ce:bb:bf:fe:ca:7c:2d:80:0f:60:ce:a0:be:1f:85:
85:6e:21:fb:fd:ce:18:46:1b:f6:13:cb:b2:5f:00:
7e:d4:c7:71:25:16:8d:c6:12:c9:b0:af:d9:6a:5e:
63:d1:80:31:94:ab:a7:0b:5a:b8:17:81:a1:97:9d:
87:fb:5b:ac:45:19:d2:9c:93:82:94:f0:a3:7a:33:
ac:9f:88:b9:da:bb:f8:74:92:4e:50:dc:29:aa:aa:
3b:37:dc:2f:14:7e:a2:25:1b:fd:5b:4d:63:39:62:
b2:12:a9:21:12:b3:60:ba:0a:b5:0b:3c:6b:82:3d:
89:6a:3f:48:e6:b8:e6:01:47:a9:15:b1:16:e6:38:
36:c0:fd:8e:db:db:95:fe:6e:93:5a:4d:ce:02:2d:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9395
sbgp-ipAddrBlock: critical
IPv4:
43.247.208.0/22
49.221.0.0/16
103.23.56.0/22
103.24.184.0/22
115.172.0.0/19
115.172.96.0-115.172.191.255
124.14.64.0-124.14.191.255
124.14.224.0/19
124.15.128.0/18
124.254.0.0/18
175.188.128.0/17
175.190.0.0/17
180.88.0.0-180.89.127.255
180.91.128.0/17
211.161.0.0-211.161.59.255
211.161.64.0/19
211.161.112.0-211.161.191.255
211.162.0.0/18
211.162.80.0-211.162.111.255
211.162.128.0/18
211.162.196.0-211.162.255.255
220.112.128.0/18
220.112.208.0/20
220.113.0.0-220.113.149.255
220.113.168.0-220.113.223.255
220.115.0.0/19
220.115.64.0-220.115.247.255
223.210.0.0/17
Signature Algorithm: sha256WithRSAEncryption
95:db:72:59:68:25:2d:6f:74:95:48:78:8f:f5:30:0f:1b:ea:
bb:68:e4:2b:48:06:5d:bf:b0:a2:20:3f:56:4d:f9:95:f9:a6:
d8:a8:5d:f5:e9:0f:4d:bc:f0:5a:a4:19:3a:61:8b:19:43:23:
a8:8b:6c:f7:5d:0d:19:83:36:4a:6b:5e:f3:cb:24:38:e2:54:
01:3b:37:80:9f:d7:c5:2f:c8:66:58:3d:80:9b:26:74:61:f9:
a1:d9:0b:f9:9f:c4:87:78:28:8a:df:59:b7:dd:aa:17:38:b9:
b1:a0:94:de:44:ed:23:ef:23:70:14:9f:45:63:75:3d:40:4f:
dd:61:62:97:6e:90:49:b2:0a:ba:88:79:58:62:9f:26:a9:9f:
a3:e6:12:67:c2:cc:f8:9d:c1:88:ca:50:ec:50:8e:98:01:6b:
44:b9:fa:81:78:b7:4f:58:82:2e:0c:49:98:bc:9b:01:a2:64:
ea:eb:05:aa:9c:e4:d7:43:12:ce:00:f3:1c:bc:e6:f1:a3:fe:
63:fc:5a:d4:6e:b9:2a:d5:cf:57:97:c0:ee:35:8a:03:43:0c:
0f:dc:7b:66:9d:2e:ac:01:38:79:04:81:b7:79:de:66:ec:03:
3d:ca:92:87:ab:f4:a6:66:c7:21:53:c8:71:b0:f2:4b:d1:0a:
99:66:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:00 2025 by rpki-client