Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZpmXJxYiITikWjnrC_qoFJaDQK4.cer
File: ZpmXJxYiITikWjnrC_qoFJaDQK4.cer (raw, json)
Hash identifier: EsMuu3XTkD42KuTtn5KCayBb8Mv269Uo9wZXCsloMUg=
Subject key identifier: 66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: EBBC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 03 Mar 2026 19:58:38 +0000
Certificate not after: Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources: AS: 151277
IP: 2401:bda0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60348 (0xebbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Mar 3 19:58:38 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=6699972716222138A45A39EB0BFAA814968340AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:38:18:fd:9e:da:bf:c7:c3:24:3b:40:09:
1e:9a:f3:6e:cf:6f:73:f7:8a:8e:52:bd:59:84:05:
56:fe:ea:92:48:f9:36:c6:ef:3d:ce:bf:f7:90:9c:
46:62:79:f3:59:1b:48:49:d0:33:3b:5e:00:91:23:
51:8e:84:48:3f:3f:37:01:76:a4:71:e2:55:e7:66:
b7:4c:53:0e:bd:4e:c7:0f:df:86:c9:86:83:a4:53:
87:62:86:3e:fd:b9:c5:44:36:89:1b:03:e8:04:a1:
1d:90:1a:c3:58:79:cf:27:2c:c6:ae:72:78:b1:c8:
a2:44:94:50:3b:48:9c:d5:e5:01:4c:b4:8f:e8:d0:
6b:4d:33:b4:50:86:11:f1:36:bc:4a:d5:0d:5f:ff:
42:5c:fa:28:06:95:2e:69:c9:6b:0d:f6:5d:63:73:
39:86:5c:8d:a2:7f:a5:4f:cb:a2:00:13:c0:ab:3e:
c9:af:6d:6e:1b:37:3b:d3:ec:71:5c:ec:a0:c6:68:
f4:6d:0b:f7:fa:92:51:09:ba:fb:6f:60:88:90:78:
41:29:e1:f5:1f:42:67:76:c8:28:55:d3:49:c3:d5:
99:a0:cf:f9:50:ac:d1:d2:e3:89:dc:8a:d9:8a:a8:
17:06:c8:26:3c:be:f4:cd:49:96:74:9b:b5:ac:ab:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:99:97:27:16:22:21:38:A4:5A:39:EB:0B:FA:A8:14:96:83:40:AE
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3309/ZpmXJxYiITikWjnrC_qoFJaDQK4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151277
sbgp-ipAddrBlock: critical
IPv6:
2401:bda0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:16:21:f3:37:1b:b5:c9:dc:d7:63:33:7b:c7:eb:82:5c:90:
88:71:b9:2f:ef:58:5d:9c:19:d2:eb:14:b5:dc:91:87:d1:93:
24:04:0f:cd:3e:86:3d:a4:88:5c:00:2e:6d:c6:c7:e7:13:c4:
8c:73:26:c1:d1:c7:da:d0:9e:57:71:2c:75:0e:1a:17:70:a8:
3e:1f:95:94:5b:ff:04:a7:6b:ec:9a:03:f2:35:48:26:82:17:
7b:9c:61:7f:e0:a3:d8:f4:9e:be:fa:66:a6:16:ba:ea:f6:e0:
46:3c:66:b0:20:22:c0:11:57:cf:43:c8:ab:41:10:0c:67:5e:
2f:26:5c:09:69:2b:c5:e2:f7:57:db:fa:97:bd:28:f1:28:1a:
9a:7d:54:7f:e6:56:ad:6e:25:df:89:08:b4:6b:a2:b4:9b:51:
8f:46:df:19:01:fe:92:bc:c6:cc:01:52:09:bc:2b:f0:32:62:
a7:94:fd:99:62:45:73:d3:6d:46:6b:ba:d9:02:0c:69:1c:b1:
8f:9f:cb:3f:93:d9:f7:43:ea:99:17:2c:0d:96:0f:81:11:6d:
0e:31:47:92:f6:ca:f1:aa:33:44:17:fc:b8:8a:c9:fa:ee:66:
ff:73:c3:c1:6c:a2:62:20:9e:96:a3:b7:2a:a4:c9:ce:4a:58:
c9:3f:bc:fc
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIDAOu8MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAzMDMxOTU4MzhaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDY2OTk5NzI3MTYyMjIxMzhBNDVBMzlFQjBCRkFBODE0OTY4MzQw
QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXzgY/Z7av8fDJDtA
CR6a827Pb3P3io5SvVmEBVb+6pJI+TbG7z3Ov/eQnEZiefNZG0hJ0DM7XgCRI1GO
hEg/PzcBdqRx4lXnZrdMUw69TscP34bJhoOkU4dihj79ucVENokbA+gEoR2QGsNY
ec8nLMaucnixyKJElFA7SJzV5QFMtI/o0GtNM7RQhhHxNrxK1Q1f/0Jc+igGlS5p
yWsN9l1jczmGXI2if6VPy6IAE8CrPsmvbW4bNzvT7HFc7KDGaPRtC/f6klEJuvtv
YIiQeEEp4fUfQmd2yChV00nD1Zmgz/lQrNHS44ncitmKqBcGyCY8vvTNSZZ0m7Ws
q5bnAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUZpmXJxYiITikWjnrC/qoFJaDQK4w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
MDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzMwOS9acG1YSnhZaUlUaWtXam5yQ19xb0ZKYURRSzQubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO7TAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQBvaAwDQYJKoZIhvcNAQELBQADggEBAA8WIfM3G7XJ3NdjM3vH
64JckIhxuS/vWF2cGdLrFLXckYfRkyQED80+hj2kiFwALm3Gx+cTxIxzJsHRx9rQ
nldxLHUOGhdwqD4flZRb/wSna+yaA/I1SCaCF3ucYX/go9j0nr76ZqYWuur24EY8
ZrAgIsARV89DyKtBEAxnXi8mXAlpK8Xi91fb+pe9KPEoGpp9VH/mVq1uJd+JCLRr
orSbUY9G3xkB/pK8xswBUgm8K/AyYqeU/ZliRXPTbUZrutkCDGkcsY+fyz+T2fdD
6pkXLA2WD4ERbQ4xR5L2yvGqM0QX/LiKyfruZv9zw8FsomIgnpajtyqkyc5KWMk/
vPw=
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:34:47 2026 by rpki-client