Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/YaDh5D-cWYdqpCsfjBrhLCHMbqA.cer
File: YaDh5D-cWYdqpCsfjBrhLCHMbqA.cer (raw, json)
Hash identifier: SOMNu1oEyJYRaRA6QVg/5UZ7fk9H+KaeE70dFI8vE4w=
Subject key identifier: 61:A0:E1:E4:3F:9C:59:87:6A:A4:2B:1F:8C:1A:E1:2C:21:CC:6E:A0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/YaDh5D-cWYdqpCsfjBrhLCHMbqA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:12:05 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 146769
IP: 103.186.4.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52017 (0xcb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:12:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=61A0E1E43F9C59876AA42B1F8C1AE12C21CC6EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:9a:62:e0:94:96:2c:13:4e:09:79:86:54:
8a:e8:61:41:19:00:db:93:25:a1:b4:45:ad:12:c9:
52:18:77:df:9d:d8:3b:b7:06:27:a3:12:0b:52:5b:
8f:ee:38:0d:24:13:72:f2:0e:18:91:04:e0:f2:17:
aa:3a:40:ae:2f:49:24:55:0e:e0:f0:34:d7:f4:29:
fe:14:a6:da:33:31:9e:f3:a7:52:d5:14:37:d8:d9:
4d:43:61:65:6d:5b:c6:e0:9a:d8:7b:4a:38:b0:cb:
60:a7:17:19:b1:b7:d7:d3:06:48:5d:51:2b:b6:a3:
6f:e5:82:ad:ee:4d:ff:d0:e8:70:44:79:72:de:ad:
92:d3:bd:31:d0:96:bd:67:3e:d5:dd:0e:2b:73:7f:
a4:20:9f:bb:f0:65:6c:45:51:5b:76:32:f7:55:ef:
78:9c:3d:d9:0e:72:77:e0:5c:57:24:04:e3:c3:02:
b8:a9:82:f5:73:ae:d3:f0:18:a8:5e:33:d3:e2:ac:
b7:71:66:47:a3:ed:48:fd:ba:1c:0e:e9:f9:9d:f9:
51:6e:84:11:e1:8c:fd:6c:d3:a8:4d:29:44:a5:1b:
12:5d:eb:d6:db:6b:b7:45:a2:cc:ea:9f:7c:78:3d:
98:ad:33:88:9b:fc:6a:13:f4:59:99:c0:f8:e7:22:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:E1:E4:3F:9C:59:87:6A:A4:2B:1F:8C:1A:E1:2C:21:CC:6E:A0
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3142/YaDh5D-cWYdqpCsfjBrhLCHMbqA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146769
sbgp-ipAddrBlock: critical
IPv4:
103.186.4.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:c3:a8:50:7b:2e:87:de:42:10:97:c0:a9:d4:33:ea:1f:c1:
65:e6:5d:7e:9d:86:8d:76:92:9c:12:ae:a8:99:35:36:49:e4:
85:8a:43:7a:99:8a:90:30:b0:a9:ae:84:9d:83:17:28:f9:30:
7d:b0:37:d2:87:57:49:c2:9a:81:01:07:90:86:2d:82:d2:12:
f3:bc:b1:f2:fe:ed:56:fa:7b:af:5f:ed:20:d6:58:2b:33:c7:
1a:75:39:f7:d2:b0:21:29:aa:0a:83:e8:39:dc:ea:bf:32:bf:
ac:c2:35:61:50:74:6f:30:47:31:d7:61:38:7c:e8:0f:91:39:
c5:c1:88:69:81:7f:bd:8c:58:2a:d2:a5:e6:1b:6d:93:ec:b3:
2f:3d:d2:7a:ed:9f:7d:a8:8f:25:c5:13:b5:dc:0f:72:66:15:
65:09:33:34:d8:72:20:48:64:c1:c1:14:ec:d4:8d:5a:92:ec:
c3:71:f7:68:eb:73:b6:f3:60:e9:6b:a2:4a:96:9b:71:bb:c2:
ff:60:62:0d:28:2a:e1:19:28:fd:36:17:c7:64:bd:f8:5d:1f:
30:4a:8b:75:59:98:d9:74:5d:b6:89:99:b7:14:fa:ce:58:75:
29:57:ec:d4:cc:58:5a:f2:55:4c:0b:08:9a:e6:bf:f7:af:c4:
1e:4f:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:09 2025 by rpki-client