Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OLYZ9BoGgZD-7QQul78QRCJYnkE.cer
File: OLYZ9BoGgZD-7QQul78QRCJYnkE.cer (raw, json)
Hash identifier: Pf/K87Pa90igvj/TkObLapxCl+yURql2xpb90XHSDB8=
Subject key identifier: 38:B6:19:F4:1A:06:81:90:FE:ED:04:2E:97:BF:10:44:22:58:9E:41
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/OLYZ9BoGgZD-7QQul78QRCJYnkE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:27:57 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 2401:9b60::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52161 (0xcbc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:27:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=38B619F41A068190FEED042E97BF104422589E41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:83:48:b9:88:33:db:b8:53:d3:a9:4d:aa:
96:e8:d6:42:6a:e6:6d:65:09:a0:10:5e:ca:bf:1e:
04:f7:59:53:1f:62:38:5b:c0:30:e9:24:64:ee:96:
6c:b9:aa:4c:ac:aa:1b:e2:f5:68:08:27:c1:c0:c8:
22:8e:33:b4:3c:de:2b:63:37:47:21:05:82:81:f0:
49:c7:ed:a9:f9:d9:91:82:5f:bb:e2:ec:e0:4c:11:
d0:55:c8:71:cc:22:41:17:b9:10:c3:e0:97:4e:68:
e3:aa:27:3a:cb:b4:6b:89:96:43:02:9f:a3:74:d2:
5c:e6:c4:1f:0f:38:60:0a:b0:ae:b8:1e:07:73:13:
93:30:7e:cb:88:bf:9d:5a:fa:87:d7:70:7d:f7:9e:
29:5e:e5:61:d3:61:a0:5f:dd:0c:f8:84:60:f2:92:
bd:00:8b:3a:9d:1d:79:d5:a7:75:78:3c:b3:70:f9:
b1:37:ec:50:1a:ec:2b:79:ad:0e:cf:23:6c:ce:be:
fb:85:d8:c9:94:b9:37:17:83:fc:f9:b7:05:79:39:
76:b1:9d:d9:bd:15:2c:e4:ad:85:2e:cf:e9:f7:f4:
81:b7:dc:08:6e:d2:0c:4d:93:8e:c2:25:35:56:c3:
5c:a5:28:48:16:2f:af:3d:1b:88:2e:db:a4:55:fa:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B6:19:F4:1A:06:81:90:FE:ED:04:2E:97:BF:10:44:22:58:9E:41
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/OLYZ9BoGgZD-7QQul78QRCJYnkE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:9b60::/32
Signature Algorithm: sha256WithRSAEncryption
91:c2:3b:7f:20:52:13:fd:1a:1a:d5:1d:63:2a:d6:59:c4:c2:
53:62:c1:f6:cc:84:a8:3e:4a:00:65:ed:52:1c:13:fc:c8:e8:
fd:5a:ed:2d:65:38:0f:02:df:d9:72:64:47:74:ad:e1:14:cb:
ff:dc:0a:ad:c6:66:e3:88:7e:01:4d:91:7a:3d:32:23:ee:ee:
7e:c2:95:98:20:61:28:27:4e:17:33:fc:28:42:2f:b6:9a:6d:
93:a5:11:b8:f4:ec:e5:c5:c4:1c:ae:e0:37:ca:3e:3d:23:d2:
07:fe:3d:37:fb:24:40:20:e1:65:8a:ef:cb:35:a7:3e:ad:0a:
53:27:82:2b:60:52:d7:a9:d7:22:b3:73:6f:63:3a:42:53:20:
dd:09:c6:4e:3c:fd:f6:94:ff:9d:b4:02:5e:4f:5a:96:79:7b:
08:4b:44:82:f5:6a:35:01:bf:92:d7:97:db:60:3b:dc:31:83:
28:33:9c:47:f4:43:79:30:f8:55:c9:9e:fa:05:d8:f2:7b:3b:
5e:87:ce:e0:36:4c:26:d4:f7:3c:17:36:e9:4d:53:de:26:ae:
28:d0:cf:44:bd:7f:67:6f:5c:ac:6b:a7:74:19:31:07:80:d9:
40:89:81:07:db:8e:5b:56:cc:98:14:dd:b1:bb:10:a7:8f:77:
dc:76:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:01 2025 by rpki-client