Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SDpcowAnNHpa4z2hON29f-JOR5s.cer
File: SDpcowAnNHpa4z2hON29f-JOR5s.cer (raw, json)
Hash identifier: w+citVt0ssHOYv24nrJ62SsWg7qQzbkJl9hmFMlM0t0=
Subject key identifier: 48:3A:5C:A3:00:27:34:7A:5A:E3:3D:A1:38:DD:BD:7F:E2:4E:47:9B
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BE8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/SDpcowAnNHpa4z2hON29f-JOR5s.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:28:05 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 160.30.230.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15336 (0x3be8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:28:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=483A5CA30027347A5AE33DA138DDBD7FE24E479B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:f4:dd:36:ea:15:21:3b:4b:5c:93:a8:e3:
ed:59:f3:db:07:2c:72:88:e6:37:07:48:a3:65:99:
9d:18:95:fe:8b:34:5d:3f:14:4b:d4:f5:d8:a3:37:
cb:e0:86:5a:fd:ee:a8:21:d2:27:8d:be:9f:bb:bf:
d8:01:26:69:65:4f:d1:f2:84:21:42:44:68:87:de:
37:b4:f6:b7:df:fa:99:1c:92:5c:32:44:20:ea:9f:
7f:6e:6b:01:09:1b:70:71:b6:69:b6:f5:7c:7d:fe:
67:e4:61:54:68:b9:b4:c1:df:14:b4:53:e8:23:ba:
ff:3e:95:58:a4:10:cc:4d:bb:28:54:c5:a3:54:b8:
4e:ef:3c:86:c3:0c:5d:e4:03:dd:96:5c:75:6c:be:
9e:40:40:60:f9:6c:56:69:48:11:32:4a:d7:f2:19:
88:a7:55:9d:c1:9c:f4:30:77:45:eb:66:9c:55:2c:
21:bd:83:20:4b:74:3c:df:47:74:5e:68:4d:9b:cb:
d9:dc:a0:43:d7:4f:a6:19:43:34:5e:6a:e3:dd:50:
a0:8e:6f:8b:17:ee:13:05:5d:a2:0c:c5:0a:f5:55:
3b:dd:a9:1d:f3:99:e1:0e:49:40:0d:85:aa:90:47:
bd:b6:d6:ac:70:b0:e9:e3:d0:55:02:57:18:3c:69:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3A:5C:A3:00:27:34:7A:5A:E3:3D:A1:38:DD:BD:7F:E2:4E:47:9B
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/SDpcowAnNHpa4z2hON29f-JOR5s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.230.0/23
Signature Algorithm: sha256WithRSAEncryption
85:4e:a4:3a:c7:55:07:d3:3b:6d:ec:0e:5a:57:21:31:08:a4:
3f:fc:52:9d:6f:f2:07:31:fb:74:83:7f:14:e6:5b:61:d1:7a:
49:84:fe:95:34:e1:d6:83:25:ba:f9:4c:19:cb:bc:88:5a:bf:
16:88:8a:be:a9:6f:cf:34:af:7d:48:81:19:63:ee:06:cf:27:
ae:fc:c8:27:be:1f:0b:0e:44:5e:a8:50:b4:a4:b3:8f:33:43:
d3:c2:68:04:b0:91:b1:18:93:41:d7:6f:73:af:3b:e6:08:39:
71:90:a5:4c:56:ed:08:c5:7c:06:0f:da:42:e3:16:0e:ff:8f:
49:ec:5e:cd:5b:1f:90:f4:70:2a:be:f5:bc:0e:c3:d5:26:50:
1e:a3:0e:25:c4:09:08:ff:ac:ea:1c:68:a4:7c:26:4c:b5:4d:
2e:6e:04:fa:89:c0:a9:f3:d8:5b:fe:f9:cc:ee:af:66:60:8e:
f7:d0:da:0c:3a:72:08:55:b9:d5:4a:01:d3:1f:ee:f3:f1:e2:
25:bf:ed:02:81:ae:74:80:f3:bb:ad:81:02:98:16:8f:72:bf:
f8:e0:02:ef:a6:fb:00:30:0a:b5:d8:87:17:bd:a9:08:c4:c2:
0a:39:77:02:7d:c9:02:76:24:57:03:0b:7f:91:19:fb:b7:e1:
a9:a3:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:30 2025 by rpki-client