Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
File:                     Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer (raw, json)
Hash identifier:          u3e8vyHbwwVJ45UhijWpuizAJpTIJOFftvF4g/0Pyag=
Subject key identifier:   46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       C806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 21 Mar 2025 02:57:41 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    AS: 56002
                          IP: 103.12.232.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51206 (0xc806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000
        Validity
            Not Before: Mar 21 02:57:41 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=46F8343DCDAD3AAC408560492C21B59D762BC456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:1b:de:c2:b1:fb:c1:96:a4:a9:42:37:0c:
                    a8:38:c1:eb:b4:e8:2e:c0:eb:6f:25:95:f5:60:23:
                    02:33:fc:c0:e6:e0:33:b4:5b:5b:45:29:cf:3c:8b:
                    11:25:c4:c6:d1:dc:06:ce:07:b3:e6:c2:88:81:48:
                    5d:b3:fb:60:54:67:d1:79:25:2c:a7:23:97:1a:62:
                    da:91:3c:21:7d:a2:75:aa:5d:d0:bc:30:80:8f:ca:
                    3d:37:08:85:15:9e:8f:50:c9:a3:52:e4:6e:6f:37:
                    c7:a4:10:c3:7d:6d:f7:62:c2:96:88:1c:2d:fa:e0:
                    55:88:fe:7c:31:d9:97:5a:39:7d:8e:8a:f3:ba:de:
                    35:46:55:a4:54:b4:2e:b0:0a:e1:e8:ea:46:92:47:
                    f5:78:68:bf:6d:bb:29:7e:e1:52:90:76:0e:77:27:
                    31:b7:d6:a4:3d:c2:c2:bc:e4:42:a3:fb:40:e0:7b:
                    dd:c6:09:cb:b0:74:61:16:04:17:89:31:f0:da:32:
                    b6:ed:e4:55:e0:c8:29:f8:a5:63:90:d5:b0:15:61:
                    45:da:84:04:22:ec:6e:7d:91:06:6f:c4:e2:3c:b1:
                    b7:b7:8d:33:7b:78:01:20:bc:cb:61:f1:86:4d:b8:
                    6e:8e:e2:b4:33:b6:c4:c4:56:1d:0a:84:19:ea:a9:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56002

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:e4:ad:04:57:8c:18:a0:a0:14:d6:1e:66:d7:8e:5f:5e:
         be:33:b4:e0:97:fb:5f:3d:70:1e:e0:59:e9:87:28:6f:ed:7c:
         6c:d3:f6:9a:88:11:1a:35:c0:3a:3e:65:b7:6d:49:83:01:d3:
         98:f9:2e:c2:02:9b:80:e6:0e:bb:a8:2e:dd:41:28:40:c5:fa:
         49:b8:c5:df:35:6b:67:59:2c:fa:61:c0:22:e1:99:80:79:49:
         b1:00:5b:b9:aa:2d:e3:96:62:98:2c:ac:65:5c:5a:1d:4a:48:
         57:ee:32:ba:b3:3f:e2:40:1a:f9:e7:15:6f:08:9c:32:96:5b:
         e5:c1:d9:a3:7c:9b:f5:7f:96:47:25:11:fc:f0:1a:77:67:93:
         ee:d7:f1:33:3d:f6:33:d5:22:bb:54:b9:e8:3b:3a:47:6b:88:
         33:88:de:15:04:be:3b:01:d1:59:06:14:8e:2c:21:a2:92:2b:
         8d:b8:9e:f6:42:47:d2:72:09:7c:6f:ca:ad:d3:c9:6e:cf:b0:
         62:11:92:2f:a3:30:d7:96:e6:b9:ad:53:ee:6d:4d:d9:ec:0e:
         81:29:06:ae:04:d4:1b:e9:14:0c:9b:f7:bd:6a:33:fb:e2:ac:
         15:a8:46:71:38:17:24:6b:4c:01:f0:59:a0:2d:4a:43:e9:24:
         e3:8f:65:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:58 2025 by rpki-client