Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer (raw, json)
Hash identifier: TfvHRVBSzjXx+fOicvs8kbAt+kLDoiAk8fUl8EiVR8M=
Subject key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CA79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:07:56 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 45110
IP: 43.254.228.0 -- 43.254.243.255
IP: 43.254.248.0/22
IP: 43.255.0.0/22
IP: 45.125.76.0/22
IP: 45.125.84.0 -- 45.125.103.255
IP: 103.23.160.0/22
IP: 103.103.188.0/22
IP: 103.193.212.0 -- 103.193.239.255
IP: 103.200.220.0 -- 103.201.3.255
IP: 103.201.192.0 -- 103.201.219.255
IP: 103.229.216.0/21
IP: 103.229.228.0/22
IP: 103.229.236.0 -- 103.229.243.255
IP: 111.118.200.0/21
IP: 113.21.232.0/21
IP: 114.31.64.0/21
IP: 114.141.80.0/21
IP: 119.161.120.0/21
IP: 120.136.16.0/21
IP: 202.47.104.0/21
IP: 202.57.192.0/20
IP: 202.65.96.0/22
IP: 203.114.244.0/22
IP: 2401:f7c0::/32
IP: 2403:9b00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51833 (0xca79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:07:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:2c:cf:1d:e3:6b:44:6f:78:c6:23:43:04:
ad:eb:e0:99:00:0b:61:37:4e:83:2e:04:8a:e2:ea:
b5:47:fb:a8:1c:9d:a3:aa:a5:a7:3d:93:5a:a5:01:
ca:62:f2:94:2b:f9:ae:ee:4b:23:62:06:d3:54:b6:
6e:3b:46:3c:4f:98:88:d8:31:d6:a8:35:d2:5e:2e:
8f:42:43:9f:8f:fb:67:11:df:32:38:26:ac:28:ca:
55:e8:05:01:55:e7:a8:8d:b2:12:08:47:72:91:34:
a7:cf:91:1c:9f:60:1c:c6:d9:0a:28:6a:74:7d:9b:
81:b4:29:b0:4a:cc:b9:45:02:49:42:4b:11:68:4e:
db:39:2c:57:a4:c1:bb:86:ff:b5:93:d0:56:7e:23:
ba:b9:c8:14:e5:6e:1e:c7:a1:04:26:93:e7:eb:5f:
54:2c:bc:ae:c7:54:81:9a:0d:20:21:55:d1:2f:79:
39:7e:27:96:a8:73:c6:6a:d6:68:42:4c:36:d2:81:
41:21:48:a8:5f:dd:bc:fe:be:14:95:a8:33:a5:a4:
2f:1c:6a:43:b1:9f:54:75:d4:b0:d9:f8:d8:86:bb:
4c:56:5c:92:19:76:69:e6:48:96:1a:c9:8f:84:9d:
16:8b:6a:a1:72:d1:0b:f6:c1:f9:79:1c:2a:a7:f3:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45110
sbgp-ipAddrBlock: critical
IPv4:
43.254.228.0-43.254.243.255
43.254.248.0/22
43.255.0.0/22
45.125.76.0/22
45.125.84.0-45.125.103.255
103.23.160.0/22
103.103.188.0/22
103.193.212.0-103.193.239.255
103.200.220.0-103.201.3.255
103.201.192.0-103.201.219.255
103.229.216.0/21
103.229.228.0/22
103.229.236.0-103.229.243.255
111.118.200.0/21
113.21.232.0/21
114.31.64.0/21
114.141.80.0/21
119.161.120.0/21
120.136.16.0/21
202.47.104.0/21
202.57.192.0/20
202.65.96.0/22
203.114.244.0/22
IPv6:
2401:f7c0::/32
2403:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
53:b0:3e:22:7f:90:5c:a6:19:24:aa:15:57:12:6b:1c:55:8e:
c0:40:3d:52:42:b2:af:35:ed:59:01:0c:ef:ac:c0:99:d3:d8:
9e:d8:4e:21:9a:bf:68:15:56:4b:d5:68:83:36:fd:f7:12:06:
36:5b:b0:92:5b:fc:f4:c1:01:48:eb:14:d1:86:30:cf:95:5e:
55:5e:3a:e6:43:fb:18:d9:32:4b:25:9f:93:f2:c7:93:6f:52:
9d:75:bd:64:e0:34:bd:c9:51:87:e9:ec:b4:a7:23:5a:5f:7f:
a0:c0:ab:90:5a:08:78:eb:1e:09:c1:f6:23:3c:53:58:3b:a9:
9f:ab:a2:12:97:59:c4:9a:c5:e2:7f:f6:86:19:34:21:d9:68:
59:55:7e:28:b7:69:20:aa:a4:4b:c5:32:fa:03:78:cd:9b:70:
c4:cf:b9:6a:b4:3e:85:85:40:f8:bd:64:db:64:ce:83:97:be:
a8:ed:2b:85:eb:49:41:de:e4:97:c9:71:cc:15:ae:67:a6:c5:
19:fc:f4:9a:a5:6b:1f:ed:74:6a:87:94:e3:53:39:3e:16:ef:
1f:14:8f:6e:10:09:7e:12:c3:2a:8e:be:f1:9f:82:ae:0d:0c:
e0:8e:2b:96:a1:d9:76:48:4f:f9:9b:8c:0b:2b:ea:4c:e8:ec:
87:0f:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:44 2025 by rpki-client