Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TS5d7go2tf_p5yUbBV1NHkKmGIc.cer
File: TS5d7go2tf_p5yUbBV1NHkKmGIc.cer (raw, json)
Hash identifier: seTPWVaAi8wFdmMt+Is9/ZZ9EFLwGTPudUf+yYHlgro=
Subject key identifier: 4D:2E:5D:EE:0A:36:B5:FF:E9:E7:25:1B:05:5D:4D:1E:42:A6:18:87
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BF0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/TS5d7go2tf_p5yUbBV1NHkKmGIc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:28:45 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 170.179.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15344 (0x3bf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:28:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4D2E5DEE0A36B5FFE9E7251B055D4D1E42A61887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:53:5e:53:5a:79:76:c6:a6:02:21:c3:38:
f7:7a:41:94:ba:e5:74:6e:49:64:ff:bd:e6:91:8f:
a0:28:cd:49:c7:8b:56:29:0d:22:24:d2:b9:ab:ac:
bf:12:f1:8e:93:89:4c:24:9b:97:64:bc:88:05:fc:
67:a8:ed:4c:58:f6:9f:a6:af:96:87:71:84:e5:29:
a6:86:09:ae:2e:81:0a:18:b2:a7:10:1e:7e:f7:c0:
fa:8a:98:bd:4b:1a:5a:82:9c:01:d1:ac:08:42:3d:
b0:49:d9:cd:7b:ef:66:ab:c9:d5:51:f8:8d:e7:2c:
fe:98:8d:c9:9f:60:ff:79:b1:5d:67:85:69:02:d5:
d1:c1:84:98:55:cb:76:27:80:06:ce:0b:ae:b8:e1:
12:ba:bc:14:e5:40:5a:7c:21:4c:32:15:ad:60:ef:
d4:00:62:47:f7:e0:23:9b:18:90:cb:d8:c9:8d:56:
95:7b:11:12:da:5d:80:3f:2c:9a:c7:3a:12:20:81:
a9:c5:a1:69:21:ab:ed:f9:71:6a:46:d7:4c:e8:7d:
a3:34:e5:43:31:27:09:65:67:de:e5:4f:4b:04:a7:
d6:11:53:01:71:bf:4d:fd:ef:87:6c:99:45:35:5b:
59:cc:62:e5:97:be:07:4c:c4:12:ea:58:bf:92:59:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:5D:EE:0A:36:B5:FF:E9:E7:25:1B:05:5D:4D:1E:42:A6:18:87
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/TS5d7go2tf_p5yUbBV1NHkKmGIc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
170.179.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:38:9c:fe:90:06:c1:2e:92:59:a6:0c:e8:e2:4e:53:b9:47:
bd:c4:c6:3c:f1:2f:c1:ba:4c:47:51:9d:99:96:63:0b:0e:96:
4a:77:bc:d9:cb:0f:a2:bb:44:79:4a:a2:01:e2:e1:20:11:0c:
4c:04:2a:df:75:d2:75:0a:6d:51:7b:9e:c2:9c:84:a8:86:ba:
60:e9:ee:c7:29:67:f6:de:2d:85:6d:ff:92:63:a1:18:f7:40:
ff:0f:31:b5:c8:31:60:ec:3a:a0:9f:6b:ad:45:88:a1:fd:b8:
4a:3c:90:43:73:f3:2a:f8:0c:ac:94:5e:fb:0c:d4:f6:7d:95:
75:2f:3c:cf:4a:6c:b6:8a:8f:4d:f9:e5:f3:78:7c:6d:a9:68:
c3:7d:8e:af:99:f4:16:d7:51:e7:2f:c6:78:c1:da:a0:52:1a:
6a:bb:3e:c2:74:2c:b4:c2:0d:4a:15:86:6c:00:2e:02:5e:49:
9e:15:25:42:3b:7f:c5:df:dc:24:56:a8:55:95:5a:f9:97:74:
86:ab:64:c5:6c:1a:d4:53:b1:b5:67:8c:e9:15:e7:f0:e7:c3:
6f:fc:ca:98:e6:5f:35:73:df:5a:30:a2:db:a2:5a:36:46:a2:
68:ba:52:53:e1:e6:71:9d:57:29:bd:7f:d6:89:60:9b:45:37:
98:99:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:33 2025 by rpki-client