Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
File: ZdphvcoswPjKldJNOUK8CH2MkqY.cer (raw, json)
Hash identifier: cuEpjdzn/miWvH8Bm30CFAT+HOp9y/qu2SExdbf1xDE=
Subject key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CACB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:09:42 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 137797
IP: 103.116.120.0/22
IP: 2402:f9c0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51915 (0xcacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:09:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:9f:19:03:b1:fb:4b:4f:94:04:16:82:e9:
d0:53:b8:ea:a1:0f:a2:b5:25:76:24:e4:74:91:9d:
f2:a5:cd:3a:92:4b:0a:a3:4e:7b:cd:49:ff:90:27:
4a:16:82:66:16:38:9f:35:ed:65:49:08:b5:1a:a6:
06:55:11:4b:d9:05:62:0b:a8:1f:3c:00:03:47:d0:
81:63:ef:f3:83:af:f7:6f:5e:d8:71:17:3f:ad:c8:
aa:21:eb:da:0f:4c:a2:d3:13:8f:8a:9e:b6:37:df:
fc:42:ba:73:b0:d6:bf:a3:ce:fd:1d:8b:e5:ca:3c:
93:b5:44:10:e0:31:30:4a:cb:00:c6:f1:fb:84:e4:
6f:59:56:75:0f:b6:dd:72:3b:32:4c:db:45:39:30:
62:cf:e7:f9:26:4f:57:d0:5a:fa:06:4e:fa:d6:b7:
99:48:bc:3c:02:3d:0c:0b:77:09:a5:01:63:2b:9a:
8f:c3:d7:5b:2b:ad:6b:ae:66:9b:b5:b8:50:eb:2b:
f0:1c:a5:b1:10:10:c7:34:76:f4:99:ad:2f:18:d7:
2f:25:76:89:68:df:08:6e:ca:a8:05:46:f8:82:71:
44:10:00:5b:9b:a2:81:e4:99:68:10:98:6c:ce:9c:
a5:54:3f:d5:45:94:aa:d0:86:79:93:ba:76:dd:71:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137797
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/22
IPv6:
2402:f9c0::/32
Signature Algorithm: sha256WithRSAEncryption
92:e0:87:17:9a:c0:a0:ad:4e:5f:63:cb:1d:17:ec:f3:13:8c:
d5:a0:26:86:0c:31:7c:b7:90:c6:e5:3c:f3:70:9d:a6:e9:af:
a5:cc:b7:94:0e:78:db:7b:5c:79:47:8d:ba:cc:dc:c2:e1:74:
c1:d6:6d:74:ca:ea:58:99:33:56:5b:33:e8:57:ad:55:d0:fd:
f7:15:51:25:35:eb:ab:c9:91:b1:43:39:10:d1:20:59:f5:67:
6c:85:91:23:bd:94:ec:be:c5:3d:67:39:34:76:59:62:88:28:
26:d5:28:ff:9b:9c:23:11:d6:d5:28:11:4f:8d:ee:86:ac:9d:
5e:fd:89:1a:5b:1a:0f:6a:3c:3f:73:28:44:8e:2d:f6:1e:c1:
b7:30:9c:6f:11:52:c2:59:9e:23:0a:59:4a:6e:26:19:03:dd:
ca:c1:ab:1d:ba:e6:65:0a:30:99:a5:79:7c:9e:62:fe:4d:f5:
71:25:ec:50:fc:88:6a:69:ea:aa:11:9b:1c:7a:e2:b2:e0:08:
a4:0d:9a:58:b6:df:05:4a:36:2f:e4:9f:d7:ca:42:1b:3b:5f:
cc:ca:b9:bb:06:a0:ca:99:6b:64:90:89:3d:39:85:8e:a6:e7:
41:6d:e4:a6:f9:8b:60:07:e2:74:4c:2c:65:6a:d2:a7:95:45:
78:85:5a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:45 2025 by rpki-client