Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer
File: RA0YjgN6sufC2lviztymGqt4xaM.cer (raw, json)
Hash identifier: HgWVtzioysDjNt0/FoTjsIE7Be3h3J6G01Xz2NUCGrI=
Subject key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BD8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:27:17 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 160.30.196.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15320 (0x3bd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:27:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:78:64:4f:5f:ff:1d:05:d2:28:4a:1f:22:
01:12:3e:88:89:a9:da:1e:8e:d2:e0:c0:20:83:e2:
da:5c:18:76:c4:7d:eb:a0:28:27:28:41:2d:b1:cd:
c0:c6:bf:b5:ad:d7:1b:b1:a2:c8:17:a5:3d:d1:cb:
b5:fa:ff:8b:3a:af:64:3b:89:28:48:9f:9f:32:33:
bb:cc:21:dd:29:8c:cc:f8:d3:b8:a7:51:9c:53:73:
dc:23:8d:88:aa:70:43:f6:1e:89:05:52:9d:5c:d5:
97:29:25:be:b2:83:c5:47:e9:c2:c6:b1:cd:14:f0:
0d:98:c2:ab:0e:3a:3d:47:87:80:45:66:e9:49:42:
a8:f3:f6:72:b1:52:2c:61:43:70:4d:22:5f:02:0d:
3e:bd:0d:fe:9f:1a:e8:5d:4a:28:c6:d7:ff:89:92:
c9:6c:91:76:c4:7e:ff:52:b9:e4:65:0b:1c:8e:11:
a9:b0:88:17:6c:43:52:9a:b6:c2:47:65:e0:bf:d6:
85:61:2c:29:af:b3:0f:30:63:77:f3:04:6c:49:fc:
58:3b:9a:76:37:d2:40:d7:a4:f2:fc:93:f0:27:9b:
3c:43:f7:f0:6e:59:f5:10:97:37:de:3a:e0:fe:3d:
ff:f4:bb:72:a0:1a:b2:a3:c9:1b:79:ec:10:72:7b:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.196.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:9b:02:9d:23:f6:24:ad:c1:b4:60:07:d1:51:40:af:a0:8d:
75:dc:1a:82:27:52:44:8f:dc:41:39:d1:02:7c:69:c1:87:18:
7d:a2:13:0d:b6:ca:60:f9:e6:97:f1:74:1b:d4:da:00:75:2e:
36:14:14:56:be:b6:ac:c3:fe:9e:3f:47:0d:f9:3e:1b:0b:e9:
5b:3e:11:04:48:24:75:6e:df:59:ff:3e:94:28:97:f5:b7:c9:
be:ce:4f:11:e5:8e:30:b9:9f:6b:8a:92:79:7f:95:db:46:55:
d4:77:57:50:30:33:01:ac:85:b3:3b:8b:87:12:62:72:c8:2a:
f5:ed:97:fe:a0:60:97:81:68:1a:af:85:53:a4:47:8c:84:0d:
26:c7:80:39:3c:6e:28:55:d6:39:61:5a:1b:05:3b:36:5c:0d:
ca:96:10:06:52:fc:bb:e1:dd:51:41:db:7f:1d:14:42:da:37:
9b:69:af:6f:bc:1e:a5:74:02:16:98:82:28:17:da:15:0b:a8:
4b:73:3b:6a:e1:d2:e2:12:d6:b2:8a:c4:c0:d2:35:ec:56:db:
bc:9d:43:94:1c:a5:e7:0a:10:4a:65:80:71:51:42:3d:14:16:
05:87:18:69:95:80:51:42:da:34:f8:ae:f1:fb:a1:fe:d6:14:
03:56:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:40 2025 by rpki-client