Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer
File: T04zJwO54ZxdoBGkjEsnbpsp11w.cer (raw, json)
Hash identifier: IiR53HONJJZe7OCXJnQCjoO41S3sgAT5PuxLBGhoicc=
Subject key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C857
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 02:57:50 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 45093
IP: 45.124.44.0/22
IP: 101.251.128.0/20
IP: 103.192.164.0/22
IP: 111.67.192.0/20
IP: 182.18.32.0 -- 182.18.127.255
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51287 (0xc857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 02:57:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:1c:7f:53:41:d3:5d:fb:89:ea:3a:8d:70:
e7:8c:32:46:b5:83:37:1f:ce:1e:b7:af:d2:63:96:
83:3b:1d:dc:cd:5d:98:bd:19:40:40:34:02:dd:a0:
5e:bc:04:9e:b0:8b:4e:1a:6e:1d:5f:e8:c8:99:6b:
d8:de:2a:51:f6:38:62:06:fa:2e:54:f2:92:5d:ad:
8d:6e:61:a3:05:e6:a4:56:33:f4:57:e6:90:c3:b0:
4a:5a:0c:29:8b:30:a9:4e:a8:ab:3b:c5:08:46:3c:
28:01:61:a6:76:56:63:fa:23:68:c3:a9:74:19:fc:
4f:f2:fb:2d:2b:35:54:0f:a2:52:b6:6b:fb:6b:c7:
aa:48:5a:5b:f8:de:0a:e1:3c:0b:b1:66:ed:19:e5:
84:53:d5:cd:96:a3:4a:e5:54:97:70:87:bf:9a:b2:
b7:ac:bc:59:28:1d:37:04:e4:fd:19:f1:ab:2e:3b:
ca:33:c6:94:ac:28:24:f9:3a:ce:1a:b5:b3:a0:c9:
b8:ab:bb:8b:8c:9c:d3:75:d2:6b:b1:e1:19:4a:18:
09:93:53:8a:d0:0b:88:4a:5e:81:49:31:ec:f4:20:
3e:d9:8d:e6:ae:c0:53:db:e9:d7:5c:a9:4b:c7:37:
39:de:2d:d2:31:a0:df:2e:87:51:e2:28:fe:e5:4c:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45093
sbgp-ipAddrBlock: critical
IPv4:
45.124.44.0/22
101.251.128.0/20
103.192.164.0/22
111.67.192.0/20
182.18.32.0-182.18.127.255
Signature Algorithm: sha256WithRSAEncryption
69:a1:9a:64:71:90:02:f0:b7:29:e7:3e:94:33:f8:60:f6:de:
0a:3f:89:ed:2d:dd:11:3c:2a:b4:01:6e:05:84:0d:4e:b1:11:
c1:f7:a2:49:a8:1f:78:50:b3:c4:a4:e0:7f:c8:92:cd:21:7b:
0c:16:33:e4:cd:f8:13:66:dc:64:41:82:bd:3e:01:3f:4c:63:
28:a0:4d:bd:68:1d:cf:8c:a8:e5:c3:00:2e:f1:50:27:b2:55:
e1:57:d1:b9:5b:4a:98:51:d5:d3:61:3c:2f:79:05:29:dc:8b:
f1:c0:8b:20:3e:22:76:1c:43:88:ca:1a:a6:bc:a0:d6:8a:63:
de:ce:65:cb:f1:cb:08:ee:1f:06:27:5b:96:b7:10:ef:53:2d:
ba:17:54:25:bc:99:e5:b3:2f:dc:50:a9:27:6f:28:69:08:29:
1e:3a:2f:5c:b9:d1:cc:8b:64:95:ad:2b:96:e0:c2:b1:1a:ed:
3b:91:40:9c:a1:a3:d3:47:65:d5:fe:07:72:62:47:49:79:91:
68:e5:e3:79:ad:ab:84:bf:36:da:4c:11:a4:21:ce:de:1f:a8:
d8:c8:70:20:16:6b:a9:95:d6:7e:e0:1b:7a:93:e6:9e:3e:56:
b1:17:62:09:1a:21:c7:21:cc:32:02:a2:75:b2:88:b2:3e:0e:
46:0a:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:58 2025 by rpki-client