Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/KIbeg5SgnMzWLU6w5QHhsxUy7VE.cer
File: KIbeg5SgnMzWLU6w5QHhsxUy7VE.cer (raw, json)
Hash identifier: CPa4X7k6ajq5Dof+AoALS7NwKKZ+YtoYHpCMjs1+nhk=
Subject key identifier: 28:86:DE:83:94:A0:9C:CC:D6:2D:4E:B0:E5:01:E1:B3:15:32:ED:51
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/KIbeg5SgnMzWLU6w5QHhsxUy7VE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:14:00 +0000
Certificate not after: Fri 02 Jan 2026 03:35:16 +0000
Subordinate resources: IP: 119.233.128.0/17
IP: 2404:b900::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52117 (0xcb95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:14:00 2025 GMT
Not After : Jan 2 03:35:16 2026 GMT
Subject: CN=2886DE8394A09CCCD62D4EB0E501E1B31532ED51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:09:c7:93:c1:fc:89:07:4c:4b:db:dd:c5:
41:04:7b:27:fa:c1:31:99:41:97:31:fa:07:a4:50:
81:8f:f7:bb:30:94:4f:bc:99:46:79:ee:bf:e7:40:
ea:30:61:0d:9b:1c:93:22:9f:16:30:c1:ce:66:9a:
69:fb:88:44:e7:db:3d:8b:82:4b:50:eb:8d:f0:f4:
cb:77:a3:92:78:02:75:72:a5:01:d5:ca:27:9f:81:
6e:16:73:79:c2:43:32:34:6a:ed:8f:e1:d9:30:f8:
bf:95:2d:d5:8e:22:84:0d:a4:ec:9d:20:2f:d3:b1:
0b:0a:79:39:7c:53:0f:26:14:39:c8:38:a4:72:04:
f2:53:34:67:72:2c:bc:fa:51:93:65:50:fc:df:2d:
41:7d:3b:9d:8c:e5:1d:f3:67:f4:87:1a:ad:90:99:
4c:74:2e:bf:16:94:3c:2b:28:2f:c9:e7:d9:b5:cd:
7e:d0:99:dd:75:12:50:35:af:d8:65:a1:8a:27:99:
f1:d6:ed:9e:36:75:cb:da:5d:66:ed:87:4a:fd:73:
59:7b:b5:cd:70:71:c6:a3:5b:34:69:f9:5c:df:c8:
31:8f:b8:52:89:e6:8f:3d:e2:c7:b2:84:76:95:46:
f5:90:ac:da:67:86:20:91:32:dc:2d:6d:31:13:26:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:DE:83:94:A0:9C:CC:D6:2D:4E:B0:E5:01:E1:B3:15:32:ED:51
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/KIbeg5SgnMzWLU6w5QHhsxUy7VE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.233.128.0/17
IPv6:
2404:b900::/32
Signature Algorithm: sha256WithRSAEncryption
6f:f9:1a:d9:0a:be:30:c8:32:30:a4:22:43:f0:02:9a:1e:0a:
ec:90:c5:d3:4d:e7:2e:92:ac:0b:c5:6e:b6:8e:e3:a2:f9:0f:
e0:94:d8:cd:1e:1a:1a:fb:00:86:0d:28:d8:93:dd:37:c9:ee:
08:df:65:7e:a1:48:9f:f6:6b:6b:f8:75:a7:22:d5:00:9c:97:
b7:72:92:a8:7c:bd:c9:78:77:ca:4a:3a:1d:ed:a2:75:ab:cb:
75:20:1c:59:b6:ca:4e:61:03:dd:a1:d8:30:66:f5:a7:6c:d0:
3d:b5:82:14:b2:65:fe:08:60:bc:a6:89:98:eb:86:5d:df:72:
74:3e:18:70:4c:32:c9:61:87:10:0f:c7:11:a8:c8:c7:e5:68:
47:67:de:f9:7e:f0:f4:0a:bd:45:f2:6c:05:48:93:66:78:92:
58:25:ef:e5:d4:d9:c3:e0:9c:89:e1:24:9a:db:32:6c:ce:79:
36:30:b2:80:58:19:e1:c8:8c:e7:d0:84:a5:4e:5c:d8:1a:4b:
17:a5:fd:b3:6a:f0:e7:75:cb:06:55:b4:e2:43:cb:a0:a7:25:
88:99:5a:aa:f5:5e:c4:2b:59:6f:cd:57:43:6d:75:fc:27:be:
ce:82:c2:cc:ac:2c:7d:3e:78:46:2a:f8:2f:09:5d:5b:77:fa:
12:41:98:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:42 2025 by rpki-client