Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer
File:                     _RcrCSdVjbeuit47T13UnttFtYI.cer (raw, json)
Hash identifier:          V9UDdv9MXaYh7eX7pd78r5IHcxwxir9csWPZQkmr3dM=
Subject key identifier:   FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       CA45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 21 Mar 2025 03:07:02 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    AS: 151308
                          IP: 103.216.156.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51781 (0xca45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000
        Validity
            Not Before: Mar 21 03:07:02 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=FD172B0927558DB7AE8ADE3B4F5DD49EDB45B582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cf:d6:cf:e3:ac:36:76:f5:ef:b7:8b:6e:47:
                    29:72:33:e8:da:88:80:cd:51:7a:4b:97:ae:29:0e:
                    97:30:2e:da:bb:ec:73:2c:14:e4:8e:52:28:80:5d:
                    38:66:20:eb:ba:f5:01:05:38:63:df:66:94:ca:12:
                    c2:19:39:59:96:60:df:ff:e2:c5:88:96:3e:ea:c8:
                    e4:b5:bf:16:20:3f:cf:9e:8f:cc:df:3c:e6:3e:65:
                    c9:bf:94:f7:11:9f:4e:db:cf:8a:31:56:3c:c7:02:
                    8d:ce:d6:e7:28:ef:7c:1e:5a:90:9d:90:3d:ed:d9:
                    2e:2c:8b:de:76:21:59:e5:e9:ad:e7:69:80:30:09:
                    1d:86:47:1f:d7:da:e1:5e:dd:a2:07:92:07:4d:2f:
                    16:e1:54:98:a2:69:e1:b0:48:46:4b:7a:09:b0:5c:
                    80:7e:47:bd:ba:38:20:b8:47:c5:bd:59:b3:e2:d0:
                    da:25:9e:54:79:55:1f:56:84:06:ba:14:0b:02:9c:
                    dc:39:c8:89:f6:e6:21:2c:ce:08:43:7c:87:a3:7f:
                    1d:3b:01:ac:a5:de:6d:f7:74:13:3b:65:c9:10:8d:
                    c3:0d:5f:42:ae:2d:81:c1:a4:2f:1a:90:e7:aa:82:
                    52:0e:10:0a:98:b4:9e:e1:66:4e:63:8a:f9:2e:8a:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151308

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:60:ea:1d:46:61:11:6b:f8:e7:39:06:c6:eb:48:77:78:c2:
         ba:0f:b6:be:b5:92:6b:ef:12:20:ab:40:b1:08:a5:74:1e:0a:
         de:2a:1c:6f:a6:31:47:3b:4b:60:f8:b0:cc:16:8a:41:7f:0b:
         78:be:d3:f5:47:df:d4:d9:db:39:b8:b8:8f:bd:58:6a:ae:73:
         14:65:56:3e:7f:8d:17:9d:29:f0:d7:45:46:db:43:9e:90:2c:
         4f:b4:cf:e1:19:79:cb:10:02:a6:e4:bf:58:11:f8:97:0f:2a:
         8b:b0:ac:f1:0d:21:7f:9f:c1:ae:1e:a9:52:8c:ce:e0:91:bb:
         18:98:1f:0c:19:6f:0f:2a:cf:6b:0e:b3:6a:6c:74:c5:1e:aa:
         d4:93:85:b7:b0:cd:d5:85:ee:e9:8a:da:35:4f:b5:aa:69:f9:
         49:08:91:73:59:a9:b6:d4:ae:91:45:31:db:9d:ee:0e:bd:78:
         45:f6:18:93:1a:a3:10:d5:ab:b1:aa:bf:dc:6a:57:ae:da:fc:
         39:a4:f7:62:9d:09:c1:79:96:4d:c2:a5:13:42:ed:2a:05:bc:
         13:d1:80:48:00:e5:d1:a0:a9:5a:7b:2c:b8:76:2f:ad:e3:07:
         8e:bf:09:02:10:b1:97:f6:cc:3d:c1:3d:d5:19:ea:27:1e:e4:
         af:45:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:45 2025 by rpki-client