Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/cWgV4hPhAadE_JLy-1sSReSx0m8.cer
File: cWgV4hPhAadE_JLy-1sSReSx0m8.cer (raw, json)
Hash identifier: n+bbLW28cPqBhdzji1JPhTnZ+x3zqUbCt1V8z50+2Ok=
Subject key identifier: 71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:30:08 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 103.100.68.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52185 (0xcbd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:30:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=716815E213E101A744FC92F2FB5B1245E4B1D26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:e1:bd:38:72:03:03:28:d6:e2:9d:92:01:
66:d0:a7:54:74:53:ec:0a:b1:73:5a:d2:5f:2c:e1:
54:ab:f5:e4:19:16:2e:91:b1:95:5b:e9:99:f1:9b:
67:48:4e:48:18:14:a0:a1:18:a0:a7:7a:cd:ec:d6:
4c:43:7d:ab:e3:5b:59:d8:36:dc:1b:a1:26:d1:dc:
a1:cb:d1:65:cb:04:40:f5:87:37:da:81:c4:c9:c5:
4f:9f:03:be:e9:d4:b4:1c:72:c4:7d:dd:f1:00:aa:
9f:43:83:5e:23:5a:71:3e:b0:ab:52:78:a5:e5:52:
23:d0:e0:3b:9c:62:5a:d9:bf:17:67:d4:47:24:dd:
4d:5f:3b:b8:77:33:8a:d9:ad:90:db:0b:e5:07:96:
ad:9c:aa:64:15:b7:70:6b:c2:78:da:f0:33:29:47:
60:77:ca:8d:19:2e:e1:f6:56:5e:73:63:83:8d:9d:
ea:a1:8c:ab:37:88:9a:d2:bf:fa:75:73:04:ee:20:
9a:03:32:26:cf:55:a6:37:5c:a7:17:0b:6b:e0:ca:
3e:e1:12:3e:2f:68:a6:3b:05:0c:85:cc:7e:50:33:
af:4d:c1:c9:9d:d8:59:07:d9:57:e1:6a:ef:6b:18:
97:b6:84:ab:e5:00:0c:62:61:12:b4:b5:d7:ab:f1:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:15:E2:13:E1:01:A7:44:FC:92:F2:FB:5B:12:45:E4:B1:D2:6F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2590/cWgV4hPhAadE_JLy-1sSReSx0m8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:65:11:5c:58:09:21:01:db:80:b7:64:9d:3e:58:6d:1c:46:
da:21:da:a3:45:89:ad:7f:b7:7c:8b:1d:41:0a:84:07:6c:98:
cb:44:fb:f9:3b:77:8a:15:07:9e:07:3b:ba:77:4f:bc:9c:cf:
ba:76:04:49:fa:7f:d5:c8:e7:fc:52:38:37:a9:0f:c2:b4:6c:
6d:bb:a3:c8:d7:14:40:fd:95:ae:53:08:79:a0:3b:d9:5b:65:
71:5b:c5:67:44:00:fa:f7:e9:00:01:b3:36:24:1b:76:c9:38:
15:6d:2a:02:45:fd:be:67:db:34:df:b7:ff:5f:0b:61:a4:ce:
e2:3a:7b:ff:b2:25:8d:b9:5e:8f:5a:39:26:8b:80:81:50:86:
7e:2c:97:c4:24:08:7e:b4:40:c2:b7:db:9b:55:b5:a7:8b:14:
1f:70:49:6d:53:1d:5b:a4:5a:50:93:2c:17:ec:1b:6a:90:e0:
79:cb:56:25:78:f2:84:1a:7d:03:22:62:3f:36:1a:73:a4:48:
d5:18:28:f9:19:c9:52:60:08:d4:4e:f1:a3:96:50:b3:d7:fb:
5b:0e:b9:0f:0d:77:b8:c4:fc:46:7c:61:89:c7:93:84:3b:54:
da:50:0d:6e:dd:31:55:a6:d4:27:c6:2c:00:82:40:e6:f2:a0:
e4:c5:04:92
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDAMvZMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMzMwMDhaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDcxNjgxNUUyMTNFMTAxQTc0NEZDOTJGMkZCNUIxMjQ1RTRCMUQy
NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeOG9OHIDAyjW4p2S
AWbQp1R0U+wKsXNa0l8s4VSr9eQZFi6RsZVb6Znxm2dITkgYFKChGKCnes3s1kxD
favjW1nYNtwboSbR3KHL0WXLBED1hzfagcTJxU+fA77p1LQccsR93fEAqp9Dg14j
WnE+sKtSeKXlUiPQ4DucYlrZvxdn1Eck3U1fO7h3M4rZrZDbC+UHlq2cqmQVt3Br
wnja8DMpR2B3yo0ZLuH2Vl5zY4ONneqhjKs3iJrSv/p1cwTuIJoDMibPVaY3XKcX
C2vgyj7hEj4vaKY7BQyFzH5QM69Nwcmd2FkH2Vfhau9rGJe2hKvlAAxiYRK0tder
8StdAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUcWgV4hPhAadE/JLy+1sSReSx0m8w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1
OTAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjU5MC9jV2dWNGhQaEFhZEVfSkx5LTFzU1JlU3gwbTgubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2REMA0GCSqGSIb3DQEBCwUA
A4IBAQAsZRFcWAkhAduAt2SdPlhtHEbaIdqjRYmtf7d8ix1BCoQHbJjLRPv5O3eK
FQeeBzu6d0+8nM+6dgRJ+n/VyOf8Ujg3qQ/CtGxtu6PI1xRA/ZWuUwh5oDvZW2Vx
W8VnRAD69+kAAbM2JBt2yTgVbSoCRf2+Z9s037f/XwthpM7iOnv/siWNuV6PWjkm
i4CBUIZ+LJfEJAh+tEDCt9ubVbWnixQfcEltUx1bpFpQkywX7BtqkOB5y1YlePKE
Gn0DImI/NhpzpEjVGCj5GclSYAjUTvGjllCz1/tbDrkPDXe4xPxGfGGJx5OEO1Ta
UA1u3TFVptQnxiwAgkDm8qDkxQSS
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:44 2025 by rpki-client