Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/I1fTZol6XDBG5kIww4sKcvwGH6Q.cer
File: I1fTZol6XDBG5kIww4sKcvwGH6Q.cer (raw, json)
Hash identifier: 4pAAUyOru9BNmKiW7JqjaB5a0G9J6en3YAzKD47CNNs=
Subject key identifier: 23:57:D3:66:89:7A:5C:30:46:E6:42:30:C3:8B:0A:72:FC:06:1F:A4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7C1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/I1fTZol6XDBG5kIww4sKcvwGH6Q.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 02 Nov 2021 19:43:34 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 45.253.68.0/22
IP: 103.222.192.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31770 (0x7c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Nov 2 19:43:34 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=2357D366897A5C3046E64230C38B0A72FC061FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6b:a4:b5:36:c9:77:a6:fb:73:00:55:ab:c1:
6c:1b:0a:c5:9f:ab:8f:f6:5e:33:4b:01:4f:8e:43:
e0:65:f5:12:ee:58:e7:4d:5d:2f:9e:1e:56:39:f1:
32:62:21:57:9f:08:8e:6c:fc:a5:d9:39:b7:b9:6a:
c2:2e:f2:0c:5d:0d:ec:05:fb:cc:76:fc:2b:e5:78:
6a:1c:16:fc:af:36:0a:4f:23:14:04:74:58:87:c8:
4f:04:f7:05:58:10:c2:48:4b:13:a6:75:05:51:f0:
d6:3a:2b:58:ce:21:d8:45:5d:57:40:ed:39:7c:fe:
04:58:87:64:17:84:d1:5b:df:97:22:21:49:20:17:
28:58:5c:76:67:ff:dd:9d:54:b0:70:6f:3c:44:00:
be:f9:3f:98:fe:e2:e5:63:54:36:df:e2:5e:00:29:
82:66:0b:77:d4:41:e2:3b:e9:2a:61:ab:67:e7:25:
36:c7:bf:a9:60:83:7e:70:fc:55:2d:5e:59:38:3e:
b6:57:7f:c0:18:6a:67:6e:f3:44:3c:fb:da:6e:3e:
d6:f7:b9:9b:9b:90:c2:2c:48:74:ce:5f:a1:f2:2d:
3b:e6:d6:02:1d:95:1c:78:d5:7d:ab:c8:32:43:ca:
5a:82:eb:21:0a:f8:cb:0f:7c:82:cf:5a:e6:3a:5c:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:D3:66:89:7A:5C:30:46:E6:42:30:C3:8B:0A:72:FC:06:1F:A4
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1842/I1fTZol6XDBG5kIww4sKcvwGH6Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.253.68.0/22
103.222.192.0/22
Signature Algorithm: sha256WithRSAEncryption
af:b2:d0:2f:ed:2c:b0:29:1d:63:d8:ac:37:9e:3e:e3:ad:93:
da:ca:ca:0b:82:df:5f:77:2d:0e:4d:b6:7a:83:9c:64:e7:1f:
6c:8f:e1:b5:d6:ec:8e:60:8d:d9:32:a2:20:9e:8c:3d:ea:ac:
78:08:f1:0b:ed:4c:9e:08:13:97:a4:98:9a:9f:e7:40:6b:02:
64:29:10:4f:b8:56:a0:89:af:40:ba:5f:36:01:be:9e:c5:8b:
28:89:8c:c5:17:34:44:c0:c0:c5:0a:e8:37:30:d7:06:7a:f9:
c6:68:f0:1b:cc:31:ad:dc:ef:64:b3:cd:6c:1f:72:e1:14:53:
50:97:32:93:72:c6:46:de:63:39:4f:63:47:72:0b:ba:12:3b:
ec:0b:93:49:1d:18:be:e6:5b:26:1b:d3:8f:b8:65:f8:d1:d0:
04:2e:30:c3:24:01:76:2b:36:67:36:ba:76:d6:c3:25:bb:3e:
2e:7a:4f:b4:04:4d:ed:9a:fe:4b:f0:77:33:c9:b5:1c:19:89:
0c:94:03:06:94:f9:15:8d:8c:86:09:25:6f:54:10:0e:0f:65:
15:db:dc:8e:09:5d:2e:02:d1:8d:e7:59:5f:c4:bc:4c:b0:a1:
87:83:ea:7b:20:fb:c8:38:30:b3:93:3d:7a:5a:06:a1:4d:0f:
22:88:54:d9
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICfBowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMTEwMjE5NDMzNFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoMjM1N0QzNjY4OTdBNUMzMDQ2RTY0MjMwQzM4QjBBNzJGQzA2MUZB
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPNrpLU2yXem+3MAVavB
bBsKxZ+rj/ZeM0sBT45D4GX1Eu5Y501dL54eVjnxMmIhV58Ijmz8pdk5t7lqwi7y
DF0N7AX7zHb8K+V4ahwW/K82Ck8jFAR0WIfITwT3BVgQwkhLE6Z1BVHw1jorWM4h
2EVdV0DtOXz+BFiHZBeE0VvflyIhSSAXKFhcdmf/3Z1UsHBvPEQAvvk/mP7i5WNU
Nt/iXgApgmYLd9RB4jvpKmGrZ+clNse/qWCDfnD8VS1eWTg+tld/wBhqZ27zRDz7
2m4+1ve5m5uQwixIdM5fofItO+bWAh2VHHjVfavIMkPKWoLrIQr4yw98gs9a5jpc
0KsCAwEAAaOCAlswggJXMB0GA1UdDgQWBBQjV9NmiXpcMEbmQjDDiwpy/AYfpDAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg0
Mi8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8xODQyL0kxZlRab2w2WERCRzVrSXd3NHNLY3Z3R0g2US5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAIt/UQDBAJn3sAwDQYJKoZIhvcN
AQELBQADggEBAK+y0C/tLLApHWPYrDeePuOtk9rKyguC3193LQ5NtnqDnGTnH2yP
4bXW7I5gjdkyoiCejD3qrHgI8QvtTJ4IE5ekmJqf50BrAmQpEE+4VqCJr0C6XzYB
vp7FiyiJjMUXNETAwMUK6Dcw1wZ6+cZo8BvMMa3c72SzzWwfcuEUU1CXMpNyxkbe
YzlPY0dyC7oSO+wLk0kdGL7mWyYb04+4ZfjR0AQuMMMkAXYrNmc2unbWwyW7Pi56
T7QETe2a/kvwdzPJtRwZiQyUAwaU+RWNjIYJJW9UEA4PZRXb3I4JXS4C0Y3nWV/E
vEywoYeD6nsg+8g4MLOTPXpaBqFNDyKIVNk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org