Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
File: ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer (raw, json)
Hash identifier: 0RJpGJTo4G8pOsOj/6pj3bMrGIW88gz9chbve5XwZ3M=
Subject key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:09:47 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 58835
IP: 1.12.0.0/14
IP: 1.116.0.0/15
IP: 14.196.0.0 -- 14.197.127.255
IP: 42.187.128.0/17
IP: 42.192.0.0/15
IP: 42.194.128.0/17
IP: 43.242.252.0/22
IP: 49.51.0.0/16
IP: 49.223.0.0/16
IP: 49.232.0.0/14
IP: 58.87.64.0/18
IP: 101.130.0.0/15
IP: 101.244.0.0/16
IP: 101.246.0.0/17
IP: 103.38.116.0/22
IP: 103.234.0.0/22
IP: 106.50.0.0/16
IP: 106.52.0.0/14
IP: 110.40.128.0/17
IP: 110.42.128.0/17
IP: 111.229.0.0 -- 111.231.255.255
IP: 114.117.0.0/17
IP: 114.132.0.0/16
IP: 115.159.0.0/16
IP: 117.75.0.0/16
IP: 118.89.0.0/16
IP: 118.126.64.0/18
IP: 118.205.0.0 -- 118.206.255.255
IP: 119.27.160.0/19
IP: 119.28.0.0/15
IP: 119.45.0.0/16
IP: 119.91.0.0/16
IP: 120.53.0.0/16
IP: 121.4.0.0/15
IP: 121.68.0.0/16
IP: 122.51.0.0/16
IP: 122.152.192.0/18
IP: 123.197.128.0/17
IP: 123.206.0.0/15
IP: 124.220.0.0/14
IP: 175.24.0.0/16
IP: 175.27.0.0/16
IP: 175.178.0.0/16
IP: 175.188.0.0/17
IP: 180.91.0.0/17
IP: 182.254.128.0/17
IP: 203.195.128.0/17
IP: 210.73.160.0/19
IP: 210.74.48.0/20
IP: 211.159.128.0/17
IP: 223.210.128.0 -- 223.211.255.255
IP: 2402:4e00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57889 (0xe221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:09:47 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:f1:ef:39:67:b3:c4:c6:a8:3a:4b:e9:8a:
38:97:24:eb:65:22:06:3c:f8:2f:dd:85:8e:80:4a:
ad:35:e9:71:37:df:96:17:e7:e1:a5:48:51:f4:b5:
f9:56:e2:8e:c4:bf:86:92:6e:1f:c7:46:c4:ed:f8:
e5:8b:89:d0:31:11:18:3a:29:03:fa:01:18:6e:26:
68:72:5f:a1:68:fa:8f:c8:e3:20:08:49:f7:55:76:
76:0a:3e:7e:e8:fa:56:ef:ba:d8:c6:2b:cd:84:73:
6d:84:77:44:34:b7:29:a7:0d:4d:f3:2c:53:05:a8:
86:c6:75:91:25:5b:a7:de:91:6a:e4:7b:e3:9e:e0:
4a:29:b0:89:ac:55:63:97:3b:07:a3:c1:12:f5:46:
31:28:13:a8:f7:b0:dc:10:f6:1a:af:58:ad:ee:b8:
5a:81:d9:29:10:33:0d:b4:5a:73:e6:22:ba:bd:66:
b1:9e:a7:93:99:52:6e:8b:37:b7:20:69:3c:27:15:
53:02:53:d6:27:41:de:98:db:12:da:a0:7a:49:ff:
f7:10:b5:f0:56:d4:39:fe:bf:df:cd:ec:4b:a9:16:
d6:63:e9:c9:d1:6f:40:ce:65:eb:1b:ff:a6:df:70:
f1:fb:03:9b:01:da:ab:be:60:02:fd:9f:af:40:37:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58835
sbgp-ipAddrBlock: critical
IPv4:
1.12.0.0/14
1.116.0.0/15
14.196.0.0-14.197.127.255
42.187.128.0/17
42.192.0.0/15
42.194.128.0/17
43.242.252.0/22
49.51.0.0/16
49.223.0.0/16
49.232.0.0/14
58.87.64.0/18
101.130.0.0/15
101.244.0.0/16
101.246.0.0/17
103.38.116.0/22
103.234.0.0/22
106.50.0.0/16
106.52.0.0/14
110.40.128.0/17
110.42.128.0/17
111.229.0.0-111.231.255.255
114.117.0.0/17
114.132.0.0/16
115.159.0.0/16
117.75.0.0/16
118.89.0.0/16
118.126.64.0/18
118.205.0.0-118.206.255.255
119.27.160.0/19
119.28.0.0/15
119.45.0.0/16
119.91.0.0/16
120.53.0.0/16
121.4.0.0/15
121.68.0.0/16
122.51.0.0/16
122.152.192.0/18
123.197.128.0/17
123.206.0.0/15
124.220.0.0/14
175.24.0.0/16
175.27.0.0/16
175.178.0.0/16
175.188.0.0/17
180.91.0.0/17
182.254.128.0/17
203.195.128.0/17
210.73.160.0/19
210.74.48.0/20
211.159.128.0/17
223.210.128.0-223.211.255.255
IPv6:
2402:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
97:e8:57:17:72:eb:d6:9b:64:ef:7b:b5:1d:12:25:87:17:20:
b0:1a:af:92:7f:5e:08:73:eb:8c:2f:ff:64:da:94:b0:39:5e:
46:f4:fa:e3:04:ba:a9:61:d3:33:31:fe:fd:5f:70:16:28:0a:
90:74:c0:fc:0e:ce:5a:1b:7d:6e:12:80:b3:66:da:9e:8f:85:
1b:1c:4a:1b:29:b8:8f:0c:96:4b:45:ee:38:37:7e:8f:a2:78:
de:da:11:65:ce:71:32:2f:31:99:37:c5:39:fa:15:e3:33:cd:
fa:3d:7b:aa:1d:c8:98:94:91:e7:59:f7:c7:f9:3a:73:f9:34:
84:90:a4:9b:39:8e:52:60:5d:13:bc:66:6b:8d:35:a8:1c:60:
1c:f1:a8:4d:9f:52:a1:38:7f:46:dc:24:a9:23:2a:df:84:2d:
9a:5b:4a:fc:21:cc:d2:e9:ef:2a:94:12:2d:85:d0:2a:b9:7e:
50:c2:19:16:e2:c9:83:15:c7:48:5b:6c:af:67:52:c3:d6:7b:
31:13:f8:85:78:8a:0b:8c:06:bd:2b:ad:7b:45:c4:66:06:f0:
d7:52:9b:34:87:3c:6f:1f:7b:d2:2a:bf:f9:7a:03:33:35:cb:
bf:2d:f9:13:e0:d3:63:91:be:0f:ac:9d:37:1b:67:67:62:8a:
0a:c3:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:36:26 2025 by rpki-client