Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/XTqAkIy6pPTbBrykx87XLMcmN7o.cer
File: XTqAkIy6pPTbBrykx87XLMcmN7o.cer (raw, json)
Hash identifier: Z2vw3k89l9J/qtJeWGqcjtBIgMsRZO/Y/G7Ma8uSpCw=
Subject key identifier: 5D:3A:80:90:8C:BA:A4:F4:DB:06:BC:A4:C7:CE:D7:2C:C7:26:37:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CA38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 02:58:50 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 37969
IP: 103.83.64.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51768 (0xca38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 02:58:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5D3A80908CBAA4F4DB06BCA4C7CED72CC72637BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:71:e7:ba:19:6d:8c:0e:24:8b:57:27:d1:
33:cd:ae:80:83:a6:15:4c:b2:57:5b:3c:06:1b:ec:
9b:0e:cf:95:7c:d2:b2:50:d1:4e:7f:66:b7:5b:3b:
d9:a1:b5:3c:88:47:e2:a4:ba:ad:8d:50:d9:89:13:
13:04:85:a3:c5:d0:9f:02:af:07:be:8d:0c:26:59:
90:a9:79:be:74:d8:84:67:4d:f0:09:b1:3b:72:ab:
b7:f1:78:71:89:6c:00:4a:03:c3:1a:4a:3c:f1:1f:
02:ef:f0:ab:93:22:eb:d8:c9:b7:40:9a:b2:a4:14:
48:95:25:30:b2:c6:18:21:47:f1:c6:08:5e:e4:27:
04:92:b3:3b:a2:80:7a:e8:d4:b9:a9:98:39:fa:9d:
1d:3e:6c:f1:94:29:3b:75:fc:73:f9:c8:4f:7f:fe:
e0:fd:64:37:99:25:68:23:06:d6:3f:fd:b0:d8:b9:
b2:50:3c:d4:a4:d2:fc:d0:b1:23:3b:70:a8:95:69:
7e:61:14:3b:33:4d:88:16:42:a5:80:82:e6:17:03:
b8:e6:76:a3:9f:49:e5:5a:78:a7:0a:c1:be:58:a5:
22:1a:f6:8c:6c:72:1e:88:8c:2f:16:63:ce:a2:5d:
dc:eb:25:7b:5d:e9:3d:c7:2c:61:db:db:46:b4:b3:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:80:90:8C:BA:A4:F4:DB:06:BC:A4:C7:CE:D7:2C:C7:26:37:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3262/XTqAkIy6pPTbBrykx87XLMcmN7o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37969
sbgp-ipAddrBlock: critical
IPv4:
103.83.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:41:a3:f2:62:95:ad:a3:f7:8d:58:7a:9e:de:75:61:0b:1a:
54:2a:de:17:1f:9d:3c:54:2b:b0:61:86:d5:ac:a6:c3:e6:83:
f4:a9:d6:86:18:64:f7:df:0c:ec:86:8f:5a:7c:36:14:3f:69:
c7:64:f8:9a:ee:f4:f0:35:b2:94:a1:40:67:ff:06:c1:f4:e4:
da:e3:2f:71:f2:eb:e4:d9:a8:76:97:64:0d:85:23:87:74:b6:
4f:7e:26:52:b9:9d:55:37:56:84:9c:20:51:f1:8b:c7:4b:c8:
e2:b2:45:82:29:1c:ea:a1:5b:4b:9f:ea:70:6d:09:47:b2:a0:
c6:bf:de:f2:ea:8f:84:a3:f3:a7:db:cf:d8:7f:16:f1:be:30:
8a:9d:de:c8:9b:d1:30:93:0c:d5:be:b9:74:6b:56:f0:9f:da:
9b:2c:0b:df:b2:55:c2:96:62:3b:a0:61:a3:ed:a8:05:8c:c4:
e4:91:aa:88:87:15:8e:59:de:e2:61:69:ce:bf:fe:45:26:ee:
73:cb:e1:d1:21:d9:e5:e6:65:ac:c5:44:bd:39:6c:40:53:55:
3c:a8:67:b6:9e:c9:3b:c5:56:b1:0c:da:14:58:8f:a7:04:56:
f3:57:8f:52:9e:72:4f:b4:60:ce:97:4c:5d:b1:da:51:0b:9f:
3b:2e:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:11 2025 by rpki-client