Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/O9PjKvOv0JXELXIXKlnGWfMty-c.cer
File: O9PjKvOv0JXELXIXKlnGWfMty-c.cer (raw, json)
Hash identifier: msyC2J/o59+vzL+QwC6Lzlkp6fX/gIHFBV2McwReFE8=
Subject key identifier: 3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3789
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:48:32 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 157.20.194.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14217 (0x3789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:48:32 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3BD3E32AF3AFD095C42D72172A59C659F32DCBE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:f6:01:d7:e6:4d:8e:8d:c8:e8:9c:62:c3:
34:de:45:2e:41:eb:ab:c1:5c:35:79:2f:9e:36:ea:
d4:7f:0b:bb:52:ab:4f:68:31:cf:ef:2b:ea:f6:a6:
32:62:4f:d9:b7:e1:82:13:6a:be:a2:a2:0d:df:44:
a3:cb:74:35:ef:1b:bd:ea:00:11:4c:63:99:b8:85:
93:b4:30:61:12:a4:06:3d:ff:10:5f:7a:cc:49:ab:
c6:fb:6d:51:e4:ab:9b:52:e7:e4:83:e1:ff:3c:00:
db:43:3f:a6:43:a6:d2:48:9c:da:8b:1d:f7:9e:07:
76:b3:a0:06:01:b8:b8:b5:7e:5d:84:f5:ca:29:34:
3e:eb:85:04:83:81:32:9f:d5:27:a1:0c:70:9b:57:
4b:84:6b:ea:06:4f:36:04:52:d8:59:4c:be:66:9f:
45:3d:e0:a8:fc:06:96:dc:2b:4e:40:d7:80:db:00:
16:6d:e8:aa:e1:f6:89:34:d6:29:6f:07:0c:90:10:
d6:26:4a:f3:2e:5c:62:b3:44:63:12:30:b4:c5:9b:
b8:cf:9b:15:e0:7d:a2:f5:02:44:62:cb:c7:0f:16:
21:92:d9:01:b3:1c:cc:a8:c1:24:d1:56:d4:03:c0:
ed:66:d9:f0:95:8c:97:d3:b7:b8:44:40:b6:67:9d:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.194.0/23
Signature Algorithm: sha256WithRSAEncryption
59:94:5c:d6:c5:02:4b:4b:1d:e1:86:25:37:09:07:0d:e2:8f:
af:ff:17:90:0a:39:35:2d:42:7c:3c:f9:2a:2b:9b:1a:10:a8:
76:b8:e3:62:cb:9d:a0:7c:c5:e1:01:05:85:04:42:48:6e:c1:
65:a7:33:b9:55:96:37:57:d5:17:ac:52:98:64:95:f5:3c:32:
aa:08:92:43:f3:a5:97:ab:7d:bc:55:4b:ff:9e:dc:dc:e0:f8:
59:27:e4:9c:a6:3b:f8:6f:20:fc:21:53:69:0a:20:a7:52:37:
cd:38:12:24:ba:82:aa:9f:0c:90:94:04:98:d0:9a:25:40:8e:
a8:77:91:fd:5a:d2:0c:1b:4f:a8:35:df:fe:8d:6c:02:8c:1f:
c9:52:b7:f2:70:22:0d:ca:69:37:49:bf:2c:c2:90:9c:de:19:
47:c6:bc:ac:5b:5d:75:9f:f4:92:26:d0:31:72:30:b9:a7:8f:
99:9b:69:e5:7d:08:f6:b5:f1:eb:29:0f:73:14:f2:d5:58:b6:
6c:12:82:2a:b2:2f:7f:85:f4:70:0f:4c:f7:c9:40:83:d0:53:
0b:78:76:28:8e:52:64:a0:07:43:ba:de:20:5c:97:e7:55:e9:
80:2d:a1:e9:7d:b3:bb:5b:d2:fb:73:33:fe:6b:79:b8:07:94:
94:15:89:d0
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICN4kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw
QTU0QTk1MTk1QTExMB4XDTI0MDkyNzAyNDgzMloXDTI1MDkyNzAyNDAxNFowMzEx
MC8GA1UEAxMoM0JEM0UzMkFGM0FGRDA5NUM0MkQ3MjE3MkE1OUM2NTlGMzJEQ0JF
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8D9gHX5k2OjcjonGLD
NN5FLkHrq8FcNXkvnjbq1H8Lu1KrT2gxz+8r6vamMmJP2bfhghNqvqKiDd9Eo8t0
Ne8bveoAEUxjmbiFk7QwYRKkBj3/EF96zEmrxvttUeSrm1Ln5IPh/zwA20M/pkOm
0kic2osd954HdrOgBgG4uLV+XYT1yik0PuuFBIOBMp/VJ6EMcJtXS4Rr6gZPNgRS
2FlMvmafRT3gqPwGltwrTkDXgNsAFm3oquH2iTTWKW8HDJAQ1iZK8y5cYrNEYxIw
tMWbuM+bFeB9ovUCRGLLxw8WIZLZAbMczKjBJNFW1APA7WbZ8JWMl9O3uERAtmed
bpECAwEAAaOCAlUwggJRMB0GA1UdDgQWBBQ70+Mq86/QlcQtchcqWcZZ8y3L5zAf
BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx
RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3
MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zMjcwL085UGpLdk92MEpYRUxYSVhLbG5HV2ZNdHktYy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdFMIwDQYJKoZIhvcNAQELBQAD
ggEBAFmUXNbFAktLHeGGJTcJBw3ij6//F5AKOTUtQnw8+SormxoQqHa442LLnaB8
xeEBBYUEQkhuwWWnM7lVljdX1ResUphklfU8MqoIkkPzpZerfbxVS/+e3Nzg+Fkn
5JymO/hvIPwhU2kKIKdSN804EiS6gqqfDJCUBJjQmiVAjqh3kf1a0gwbT6g13/6N
bAKMH8lSt/JwIg3KaTdJvyzCkJzeGUfGvKxbXXWf9JIm0DFyMLmnj5mbaeV9CPa1
8espD3MU8tVYtmwSgiqyL3+F9HAPTPfJQIPQUwt4diiOUmSgB0O63iBcl+dV6YAt
oel9s7tb0vtzM/5rebgHlJQVidA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:41 2025 by rpki-client