Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bvKvdW1CN346rCRuOiHy_UtAf8U.cer
File:                     bvKvdW1CN346rCRuOiHy_UtAf8U.cer (raw, json)
Hash identifier:          f96GRms+NmmGDBzpahOlcTACJORBS5gYxF/LBSTWunc=
Subject key identifier:   6E:F2:AF:75:6D:42:37:7E:3A:AC:24:6E:3A:21:F2:FD:4B:40:7F:C5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       C7D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 21 Mar 2025 02:57:35 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    AS: 137802
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51154 (0xc7d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000
        Validity
            Not Before: Mar 21 02:57:35 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=6EF2AF756D42377E3AAC246E3A21F2FD4B407FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:62:31:6a:ec:e7:cb:21:11:85:db:83:7f:
                    3e:cf:b1:77:2e:40:35:78:13:fe:af:19:7c:6a:f7:
                    23:5e:c5:55:68:48:57:26:83:66:8a:35:1b:76:bd:
                    52:e1:0c:a5:2c:cb:fe:9e:71:1b:45:9a:c2:76:3d:
                    95:2a:8f:e7:b4:4d:0f:7a:a7:11:0f:5d:84:7c:69:
                    8e:59:30:86:2a:cc:7f:c1:ee:1a:e6:1a:a1:0e:9e:
                    86:e0:f8:50:11:76:46:bd:49:69:5a:2d:16:4d:85:
                    6e:c9:46:2c:7e:1c:d2:9d:f9:0f:60:89:2e:1d:fb:
                    4b:ce:2f:99:44:74:62:cc:e7:10:72:24:7c:1f:e9:
                    3f:44:e5:10:82:60:1e:d6:7e:bb:01:ba:ac:d0:22:
                    6e:53:fd:12:6c:6f:a2:82:a8:22:6f:83:47:05:40:
                    78:f4:af:38:f4:ce:e3:e1:4e:de:af:25:38:c1:ff:
                    f5:f2:17:bd:2b:d6:f4:1c:7f:77:76:e7:6b:a0:f7:
                    25:ae:2f:b2:a4:14:db:a4:a7:f9:c3:77:77:42:97:
                    0c:da:29:29:f5:7d:46:15:ba:f4:85:f2:ba:36:18:
                    f0:a3:a7:03:64:f2:a5:bc:88:9a:6f:28:49:20:8b:
                    f8:72:50:66:5f:b8:41:c7:ff:22:03:7d:6b:39:75:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F2:AF:75:6D:42:37:7E:3A:AC:24:6E:3A:21:F2:FD:4B:40:7F:C5
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137802

    Signature Algorithm: sha256WithRSAEncryption
         12:7c:fa:3d:e0:2c:f4:d2:39:32:99:d0:d4:48:ed:c8:34:c9:
         4a:15:c0:f4:e4:80:43:0b:3d:5f:6a:85:d1:dc:19:a0:84:c0:
         d0:c6:03:3e:a3:4d:8b:a6:de:70:24:4f:87:c8:10:23:4f:5e:
         d3:26:f2:2b:b2:6e:c2:27:12:cb:a2:48:d4:3e:42:3a:0b:24:
         81:48:66:ff:03:6a:ae:5a:0c:9c:ec:33:cd:b8:b7:98:c6:13:
         82:4b:f7:e0:d1:d8:ec:95:ab:31:aa:1a:34:95:de:8a:d4:f7:
         3f:cf:4c:bf:4d:c8:2a:c0:05:e6:8e:53:bf:f9:f6:d0:42:22:
         90:c9:79:55:67:ef:2a:32:ed:64:f9:19:a7:b2:12:63:d9:cf:
         c2:ee:2f:c4:ed:07:e4:27:b2:67:9d:1a:2e:87:ae:d6:c7:e1:
         f5:e8:8c:96:2d:88:86:c3:ec:d1:4b:a9:18:4c:f5:ae:01:d4:
         0c:ce:45:69:9e:aa:83:54:5e:5b:76:ef:a4:3c:a8:45:2f:6e:
         09:fb:2c:c6:64:4a:c7:c3:c6:ac:93:d9:b3:a0:03:3b:bd:46:
         75:a9:c3:55:c0:ac:3c:ee:e4:45:06:a9:1c:6e:a8:73:05:c8:
         6b:c3:64:d0:ab:82:06:eb:4c:33:81:39:55:5c:43:12:5f:4c:
         df:8f:3e:94
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAMfSMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMjU3MzVaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDZFRjJBRjc1NkQ0MjM3N0UzQUFDMjQ2RTNBMjFGMkZENEI0MDdG
QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFmIxauznyyERhduD
fz7PsXcuQDV4E/6vGXxq9yNexVVoSFcmg2aKNRt2vVLhDKUsy/6ecRtFmsJ2PZUq
j+e0TQ96pxEPXYR8aY5ZMIYqzH/B7hrmGqEOnobg+FARdka9SWlaLRZNhW7JRix+
HNKd+Q9giS4d+0vOL5lEdGLM5xByJHwf6T9E5RCCYB7WfrsBuqzQIm5T/RJsb6KC
qCJvg0cFQHj0rzj0zuPhTt6vJTjB//XyF70r1vQcf3d252ug9yWuL7KkFNukp/nD
d3dClwzaKSn1fUYVuvSF8ro2GPCjpwNk8qW8iJpvKEkgi/hyUGZfuEHH/yIDfWs5
dThZAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUbvKvdW1CN346rCRuOiHy/UtAf8Uw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3
MTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjcxMy9idkt2ZFcxQ04zNDZyQ1J1T2lIeV9VdEFmOFUubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaSjANBgkqhkiG9w0BAQsFAAOCAQEA
Enz6PeAs9NI5MpnQ1EjtyDTJShXA9OSAQws9X2qF0dwZoITA0MYDPqNNi6becCRP
h8gQI09e0ybyK7JuwicSy6JI1D5COgskgUhm/wNqrloMnOwzzbi3mMYTgkv34NHY
7JWrMaoaNJXeitT3P89Mv03IKsAF5o5Tv/n20EIikMl5VWfvKjLtZPkZp7ISY9nP
wu4vxO0H5CeyZ50aLoeu1sfh9eiMli2IhsPs0UupGEz1rgHUDM5FaZ6qg1ReW3bv
pDyoRS9uCfssxmRKx8PGrJPZs6ADO71GdanDVcCsPO7kRQapHG6ocwXIa8Nk0KuC
ButMM4E5VVxDEl9M348+lA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:03 2025 by rpki-client