Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/NdjMXh0vNf-6p6kJ9VILPcTBWIw.cer
File: NdjMXh0vNf-6p6kJ9VILPcTBWIw.cer (raw, json)
Hash identifier: 9/nr03Il5vjTXyO83PRB0Bzfyuuvbt6L1i91nL0T7xk=
Subject key identifier: 35:D8:CC:5E:1D:2F:35:FF:BA:A7:A9:09:F5:52:0B:3D:C4:C1:58:8C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/NdjMXh0vNf-6p6kJ9VILPcTBWIw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:32:18 +0000
Certificate not after: Fri 06 Feb 2026 03:05:20 +0000
Subordinate resources: IP: 163.61.62.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52221 (0xcbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:32:18 2025 GMT
Not After : Feb 6 03:05:20 2026 GMT
Subject: CN=35D8CC5E1D2F35FFBAA7A909F5520B3DC4C1588C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:fd:de:ef:3c:1a:97:f0:67:a8:26:cf:63:
d1:e8:21:17:45:e7:f3:a1:cf:78:36:44:f8:96:c9:
2c:99:51:93:10:4e:5e:4d:fd:08:9d:a7:26:6f:6c:
26:1c:cc:9e:aa:10:c1:04:cf:ed:42:32:27:94:29:
de:bd:8d:90:bb:a9:7d:ac:6f:f0:30:fd:a2:4d:a7:
e9:5c:72:36:ee:57:bb:79:b0:46:40:1e:19:c3:14:
74:1d:66:27:6d:c5:bf:79:19:f2:14:91:28:fd:97:
17:40:e8:22:41:12:89:f4:50:a8:40:7c:d4:b0:a1:
06:af:5c:2a:6e:70:c1:62:e2:78:85:40:4e:5f:b7:
d7:b1:3d:dd:2b:56:8e:dd:c3:93:9f:24:cf:2f:0d:
0e:42:b2:c3:c6:d8:7b:06:88:53:f2:1b:8e:41:b7:
a4:d3:0d:3d:9a:8e:e2:59:47:6b:23:75:5a:14:63:
c7:26:9c:cf:5b:dd:aa:f1:91:5e:43:32:97:7d:b0:
14:7c:72:aa:69:0a:95:d6:11:65:6b:e3:7b:a8:bc:
8f:bb:a5:a2:2a:17:f8:96:74:85:6c:cc:5a:79:07:
fd:9a:25:81:b0:49:da:8c:56:9c:db:cf:3c:55:11:
31:2c:4d:fa:ca:7b:ef:f6:9c:28:1a:2d:9e:4e:49:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:CC:5E:1D:2F:35:FF:BA:A7:A9:09:F5:52:0B:3D:C4:C1:58:8C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/NdjMXh0vNf-6p6kJ9VILPcTBWIw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.62.0/23
Signature Algorithm: sha256WithRSAEncryption
83:dd:e6:b0:78:2a:69:09:0f:43:8e:e8:90:4a:be:a8:7e:c1:
36:81:06:11:c3:3d:55:53:95:22:be:aa:82:32:fa:12:15:9d:
fc:e0:96:ae:b1:cc:64:a7:6f:d3:fd:1f:26:6d:c9:2a:36:d0:
47:1b:2e:d3:92:d2:6b:20:96:b7:a8:f4:14:27:de:02:e9:05:
d3:b4:16:10:bd:1d:9b:a7:cc:66:d2:87:47:05:57:d5:ca:c6:
e7:43:85:47:70:cb:e2:1e:ab:6e:52:e8:6f:6d:e1:d7:ea:5d:
4f:a6:ce:77:d7:dc:28:46:51:04:f0:6c:2a:55:df:83:24:57:
94:3d:0c:ab:4d:19:f2:15:39:75:54:a2:72:a4:39:f8:3c:97:
de:eb:65:33:bc:00:d3:bf:0a:13:87:9e:ea:e0:c4:4b:19:5c:
1d:d9:d7:d4:c8:bd:70:98:76:12:48:0d:32:ba:98:ad:2c:44:
19:22:a1:74:a2:b1:ee:9c:35:46:f3:a2:e6:b1:db:14:78:9e:
bd:ca:89:5e:be:02:a3:ae:b2:d9:da:37:f0:6a:51:32:9a:0c:
12:15:ff:e9:59:ca:46:86:8c:ce:e0:eb:ef:83:4e:04:60:3e:
f6:90:e4:de:e1:43:ad:d5:44:ab:b6:30:8d:27:4f:e2:e5:fc:
e8:3b:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:45 2025 by rpki-client