Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
File: ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer (raw, json)
Hash identifier: PGQ5B59ZwFXrak7VCPCCfURZwx4Mi85dSc6fBl0ddB8=
Subject key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CAC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:09:33 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 58835
IP: 1.12.0.0/14
IP: 1.116.0.0/15
IP: 14.196.0.0 -- 14.197.127.255
IP: 42.187.128.0/17
IP: 42.192.0.0/15
IP: 42.194.128.0/17
IP: 43.242.252.0/22
IP: 49.51.0.0/16
IP: 49.223.0.0/16
IP: 49.232.0.0/14
IP: 58.87.64.0/18
IP: 101.130.0.0/15
IP: 101.244.0.0/16
IP: 101.246.0.0/17
IP: 103.38.116.0/22
IP: 103.234.0.0/22
IP: 106.50.0.0/16
IP: 106.52.0.0/14
IP: 110.40.128.0/17
IP: 110.42.128.0/17
IP: 111.229.0.0 -- 111.231.255.255
IP: 114.117.0.0/17
IP: 114.132.0.0/16
IP: 115.159.0.0/16
IP: 117.75.0.0/16
IP: 118.89.0.0/16
IP: 118.126.64.0/18
IP: 118.205.0.0 -- 118.206.255.255
IP: 119.27.160.0/19
IP: 119.28.0.0/15
IP: 119.45.0.0/16
IP: 119.91.0.0/16
IP: 120.53.0.0/16
IP: 121.4.0.0/15
IP: 121.68.0.0/16
IP: 122.51.0.0/16
IP: 122.152.192.0/18
IP: 123.197.128.0/17
IP: 123.206.0.0/15
IP: 124.220.0.0/14
IP: 175.24.0.0/16
IP: 175.27.0.0/16
IP: 175.178.0.0/16
IP: 175.188.0.0/17
IP: 180.91.0.0/17
IP: 182.254.128.0/17
IP: 203.195.128.0/17
IP: 210.73.160.0/19
IP: 210.74.48.0/20
IP: 211.159.128.0/17
IP: 223.210.128.0 -- 223.211.255.255
IP: 2402:4e00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51907 (0xcac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:09:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:f1:ef:39:67:b3:c4:c6:a8:3a:4b:e9:8a:
38:97:24:eb:65:22:06:3c:f8:2f:dd:85:8e:80:4a:
ad:35:e9:71:37:df:96:17:e7:e1:a5:48:51:f4:b5:
f9:56:e2:8e:c4:bf:86:92:6e:1f:c7:46:c4:ed:f8:
e5:8b:89:d0:31:11:18:3a:29:03:fa:01:18:6e:26:
68:72:5f:a1:68:fa:8f:c8:e3:20:08:49:f7:55:76:
76:0a:3e:7e:e8:fa:56:ef:ba:d8:c6:2b:cd:84:73:
6d:84:77:44:34:b7:29:a7:0d:4d:f3:2c:53:05:a8:
86:c6:75:91:25:5b:a7:de:91:6a:e4:7b:e3:9e:e0:
4a:29:b0:89:ac:55:63:97:3b:07:a3:c1:12:f5:46:
31:28:13:a8:f7:b0:dc:10:f6:1a:af:58:ad:ee:b8:
5a:81:d9:29:10:33:0d:b4:5a:73:e6:22:ba:bd:66:
b1:9e:a7:93:99:52:6e:8b:37:b7:20:69:3c:27:15:
53:02:53:d6:27:41:de:98:db:12:da:a0:7a:49:ff:
f7:10:b5:f0:56:d4:39:fe:bf:df:cd:ec:4b:a9:16:
d6:63:e9:c9:d1:6f:40:ce:65:eb:1b:ff:a6:df:70:
f1:fb:03:9b:01:da:ab:be:60:02:fd:9f:af:40:37:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58835
sbgp-ipAddrBlock: critical
IPv4:
1.12.0.0/14
1.116.0.0/15
14.196.0.0-14.197.127.255
42.187.128.0/17
42.192.0.0/15
42.194.128.0/17
43.242.252.0/22
49.51.0.0/16
49.223.0.0/16
49.232.0.0/14
58.87.64.0/18
101.130.0.0/15
101.244.0.0/16
101.246.0.0/17
103.38.116.0/22
103.234.0.0/22
106.50.0.0/16
106.52.0.0/14
110.40.128.0/17
110.42.128.0/17
111.229.0.0-111.231.255.255
114.117.0.0/17
114.132.0.0/16
115.159.0.0/16
117.75.0.0/16
118.89.0.0/16
118.126.64.0/18
118.205.0.0-118.206.255.255
119.27.160.0/19
119.28.0.0/15
119.45.0.0/16
119.91.0.0/16
120.53.0.0/16
121.4.0.0/15
121.68.0.0/16
122.51.0.0/16
122.152.192.0/18
123.197.128.0/17
123.206.0.0/15
124.220.0.0/14
175.24.0.0/16
175.27.0.0/16
175.178.0.0/16
175.188.0.0/17
180.91.0.0/17
182.254.128.0/17
203.195.128.0/17
210.73.160.0/19
210.74.48.0/20
211.159.128.0/17
223.210.128.0-223.211.255.255
IPv6:
2402:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
5f:73:ed:ff:d4:23:18:b5:3a:5b:e5:69:9f:1e:bf:45:c3:84:
2c:74:88:ac:7c:3b:8a:ae:6d:6d:da:66:c8:c7:87:a2:8d:da:
71:8a:79:3b:63:c4:e8:57:5b:b4:ba:e1:59:d1:8d:de:5c:59:
94:9b:f7:85:2f:9f:9d:a4:68:43:5e:d2:ad:4c:89:aa:a1:93:
5a:df:2c:b8:06:94:b7:c1:f5:f6:3d:82:3f:3a:6a:20:5d:80:
83:2b:85:fa:ff:66:2a:e1:dc:25:3c:02:6b:36:95:4f:dd:7a:
ff:57:eb:57:a0:ee:a7:f4:7f:73:49:ce:7f:86:49:ab:46:0c:
f0:1c:61:81:16:d9:52:40:53:d1:b4:a2:98:bd:01:3d:f4:10:
af:21:74:73:a4:4b:3f:80:ae:ea:dc:fa:7c:df:49:f0:70:02:
f2:38:79:35:37:ec:e6:aa:c3:12:06:44:44:3b:a8:a2:e9:2e:
74:99:79:0e:cb:01:08:e3:9e:7c:12:a1:fa:9e:cb:84:3b:c5:
10:ff:5d:a5:68:0e:9f:6a:2e:9e:72:56:83:1b:06:2f:51:bc:
0e:29:34:28:20:79:62:f9:99:3f:74:fe:c9:e9:84:22:6a:d6:
95:de:87:4c:0c:45:02:2d:c5:ac:d2:a1:d5:e7:17:d2:e3:29:
a4:7b:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:44 2025 by rpki-client