Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer
File: UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer (raw, json)
Hash identifier: v7duStvj/nsv9EqlUAjclI7QHc54mE9/0XxH4Ozja4Y=
Subject key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C91E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 02:58:14 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 4751
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51486 (0xc91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 02:58:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=51EAB28F238FD7407C2F663960489DD6D951DA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:ef:3a:95:b8:85:c3:97:e6:16:8b:3d:8d:
7e:fa:e6:03:34:d8:98:3d:f7:7a:1f:23:59:cb:d0:
d2:7e:97:61:d8:36:1b:a3:8e:42:79:7f:9d:07:20:
29:d9:ea:a1:23:16:72:91:4e:04:00:5e:40:25:88:
e9:2d:b9:38:76:61:ed:b0:87:f8:5a:80:e2:5b:f3:
28:f1:f5:af:2b:ff:d5:74:97:ad:2a:2c:40:ab:d6:
d5:5a:b1:d7:2c:bd:84:f3:d4:a1:ed:a7:18:28:8b:
9e:84:69:42:4f:e0:3f:72:6f:97:0c:ed:07:8c:2b:
bf:19:3e:2d:5a:01:55:30:a1:44:a2:72:25:00:a0:
74:42:68:35:66:ee:f1:00:e6:4e:0c:a6:9d:b9:b9:
40:71:37:4d:fa:3c:21:6e:37:62:56:62:86:b2:69:
b4:eb:20:f9:aa:0f:91:8d:0e:58:aa:be:e1:d0:86:
a6:17:3b:e0:c6:aa:29:87:41:1d:f0:04:07:ed:83:
82:01:d4:ae:7a:a6:ee:57:c7:93:fd:7f:6e:1d:1f:
4b:95:59:4c:33:d3:da:bf:ae:06:83:ac:fc:e3:46:
0e:7c:b6:f5:77:e4:8d:cf:4e:b6:71:58:31:a2:11:
45:ed:12:f5:04:58:b6:f9:6a:b6:de:f7:8b:2a:ea:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4751
Signature Algorithm: sha256WithRSAEncryption
7a:3c:91:45:7f:4f:bd:24:e2:59:2b:5c:44:27:3c:07:8f:41:
93:a7:a4:ec:3d:f6:96:8a:2e:77:3a:c6:0c:62:e7:51:13:d5:
e4:75:40:51:75:aa:d8:5c:f1:ff:9e:b4:94:8e:59:3d:45:df:
d9:23:a6:42:5d:01:7a:9d:9e:50:f6:5b:1f:38:af:14:96:31:
67:d3:56:c9:d9:54:79:39:f3:4f:d2:91:cc:47:47:95:8d:1b:
f6:86:7d:dc:0d:06:72:63:31:9c:bd:dd:6d:ce:32:bf:6a:65:
97:bd:83:06:50:60:e5:b7:ba:f7:2e:fb:e9:1f:c5:3d:2c:f3:
ea:e8:50:c6:c5:08:b2:3b:fb:0b:a2:a5:8f:34:b1:0d:1c:34:
85:68:9b:d9:43:09:14:04:aa:8e:0c:bc:59:66:43:3d:1b:18:
df:87:4c:68:16:23:bc:d4:d0:ec:b4:69:54:30:d7:4b:98:9b:
f2:6b:ef:d5:66:c2:b1:94:14:3c:98:d8:8b:d7:0a:14:63:aa:
b7:d8:f3:f0:4c:0a:fd:d2:a7:67:e5:78:3f:25:8b:07:7d:85:
bd:2a:1d:ba:41:20:30:5e:15:e5:74:8d:d2:06:ae:e7:b6:81:
76:e0:c1:76:3a:12:e9:25:56:db:6a:04:0c:ff:be:3a:e5:f9:
31:de:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:55 2025 by rpki-client