Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Q3ctVcOqnctFoA-iZr-nzoiNg_w.cer
File: Q3ctVcOqnctFoA-iZr-nzoiNg_w.cer (raw, json)
Hash identifier: BsQlQHyTzBMiq3rdbGmAngWlB4nsSj5fuYx/rSMLXgI=
Subject key identifier: 43:77:2D:55:C3:AA:9D:CB:45:A0:0F:A2:66:BF:A7:CE:88:8D:83:FC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7790
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Q3ctVcOqnctFoA-iZr-nzoiNg_w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:04:51 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 110.173.96.0/19
IP: 202.173.224.0/19
IP: 211.148.128.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30608 (0x7790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:04:51 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=43772D55C3AA9DCB45A00FA266BFA7CE888D83FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:f6:41:e4:46:47:1b:6d:5e:94:25:84:a4:
22:81:ad:38:b8:9f:ee:c4:e7:62:50:44:bd:d7:66:
f9:2c:83:43:f6:ac:6d:77:7c:82:48:59:c1:21:cc:
c1:8f:76:91:41:f0:0b:d1:9d:65:59:86:ef:82:84:
d8:8c:57:0c:26:e4:64:83:26:33:77:2d:a9:a4:e3:
6e:6d:dd:f7:26:f2:57:52:dc:13:90:3a:6a:13:ed:
d5:bb:74:12:ba:cf:c5:c3:1c:9b:1f:84:e3:10:27:
02:a6:6d:62:68:9d:08:5d:89:6d:56:ff:4a:e5:cb:
37:79:22:ac:62:85:99:7e:c1:d8:54:9d:5c:94:3e:
87:2d:7e:7c:b6:bf:70:62:1d:65:1d:39:c6:6e:a1:
66:9d:b0:0e:94:33:e6:c3:91:9f:8f:66:1d:55:13:
db:8e:17:fd:22:04:a3:0b:0f:27:be:5b:fe:0c:83:
05:5e:d7:53:23:92:33:0a:fe:e6:45:f3:7c:df:4c:
f9:df:c2:6e:45:e7:c0:0a:db:34:c6:a7:36:47:1e:
d8:6d:6c:b6:b5:1e:34:ff:70:4a:e7:e5:90:78:52:
c6:12:8f:f8:a8:5b:20:dc:3f:ff:21:41:a0:5c:01:
48:26:f3:e6:1f:38:8f:15:c5:8a:e1:a7:85:7c:3f:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:2D:55:C3:AA:9D:CB:45:A0:0F:A2:66:BF:A7:CE:88:8D:83:FC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Q3ctVcOqnctFoA-iZr-nzoiNg_w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.173.96.0/19
202.173.224.0/19
211.148.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:ec:43:5f:70:34:5f:69:00:f7:42:b3:8e:de:26:ed:5b:dc:
6f:5d:4e:fa:45:6d:fb:a8:82:dc:8c:1c:f1:f4:4c:35:37:b2:
13:fc:27:76:12:c2:99:7b:db:b7:07:0c:b4:f4:11:27:b7:d9:
9d:70:7d:c1:01:50:eb:e3:cb:db:e0:ac:50:2c:74:b2:4a:91:
d5:a7:62:69:a4:c4:f9:59:a5:c2:f2:7f:9d:4b:b6:9d:fb:62:
94:d0:be:94:9b:eb:43:f7:2e:c8:5d:52:38:e2:3a:8e:28:14:
d5:7e:ce:c3:9f:12:78:31:36:bb:18:85:98:a4:9b:d9:04:0f:
27:b0:f7:f8:ef:13:2c:c9:40:7b:f3:91:7e:d9:06:30:4e:05:
20:8f:cd:7b:a9:ca:05:e7:04:75:a8:9e:d0:2c:50:44:0a:6c:
6b:fe:b9:ef:39:ed:b4:43:e4:f7:7a:ce:09:94:73:95:56:e5:
ee:b9:ab:bb:65:f9:d2:25:0a:8c:8c:db:84:bb:fa:d4:2a:bd:
21:a9:64:f2:6c:c6:df:a2:37:b8:73:a4:87:1d:73:ba:cd:f5:
70:d1:67:f3:51:9d:61:eb:90:10:b6:61:9b:96:90:f7:bc:28:
a7:a0:13:24:87:7d:c5:0a:86:92:6c:74:ad:f8:f3:71:35:bf:
2d:c5:9b:ed
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgICd5AwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDQ1MVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoNDM3NzJENTVDM0FBOURDQjQ1QTAwRkEyNjZCRkE3Q0U4ODhEODNG
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMC89kHkRkcbbV6UJYSk
IoGtOLif7sTnYlBEvddm+SyDQ/asbXd8gkhZwSHMwY92kUHwC9GdZVmG74KE2IxX
DCbkZIMmM3ctqaTjbm3d9ybyV1LcE5A6ahPt1bt0ErrPxcMcmx+E4xAnAqZtYmid
CF2JbVb/SuXLN3kirGKFmX7B2FSdXJQ+hy1+fLa/cGIdZR05xm6hZp2wDpQz5sOR
n49mHVUT244X/SIEowsPJ75b/gyDBV7XUyOSMwr+5kXzfN9M+d/CbkXnwArbNMan
Nkce2G1strUeNP9wSuflkHhSxhKP+KhbINw//yFBoFwBSCbz5h84jxXFiuGnhXw/
xS0CAwEAAaOCAl0wggJZMB0GA1UdDgQWBBRDdy1Vw6qdy0WgD6Jmv6fOiI2D/DAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUF
BzAFhityc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzEv
MFYGCCsGAQUFBzAKhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzEvUTNjdFZjT3FuY3RGb0EtaVpyLW56b2lOZ193Lm1mdDAxBggrBgEF
BQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggr
BgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEBW6tYAMEBcqt4AMEBdOUgDANBgkqhkiG
9w0BAQsFAAOCAQEAXOxDX3A0X2kA90Kzjt4m7Vvcb11O+kVt+6iC3Iwc8fRMNTey
E/wndhLCmXvbtwcMtPQRJ7fZnXB9wQFQ6+PL2+CsUCx0skqR1adiaaTE+VmlwvJ/
nUu2nftilNC+lJvrQ/cuyF1SOOI6jigU1X7Ow58SeDE2uxiFmKSb2QQPJ7D3+O8T
LMlAe/ORftkGME4FII/Ne6nKBecEdaie0CxQRApsa/657znttEPk93rOCZRzlVbl
7rmru2X50iUKjIzbhLv61Cq9Ialk8mzG36I3uHOkhx1zus31cNFn81GdYeuQELZh
m5aQ97wop6ATJId9xQqGkmx0rfjzcTW/LcWb7Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org