Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dD5ajRpPHemuS45QLAJbYxPEnXM.cer
File: dD5ajRpPHemuS45QLAJbYxPEnXM.cer (raw, json)
Hash identifier: P3HmqlHyR922nEFbZsEW897urCVQdFAw3ByiRt9RLoM=
Subject key identifier: 74:3E:5A:8D:1A:4F:1D:E9:AE:4B:8E:50:2C:02:5B:63:13:C4:9D:73
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7851
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/dD5ajRpPHemuS45QLAJbYxPEnXM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Jun 2021 20:28:09 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 45093
IP: 45.124.44.0/22
IP: 101.251.128.0/20
IP: 103.192.164.0/22
IP: 111.67.192.0/20
IP: 182.18.32.0 -- 182.18.127.255
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30801 (0x7851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 3 20:28:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=743E5A8D1A4F1DE9AE4B8E502C025B6313C49D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:20:7a:a6:be:65:8a:e2:1b:c2:4f:6f:55:
3a:4a:4e:d5:d3:ae:03:bd:2c:b3:b5:50:59:a3:f7:
35:a7:b1:b9:76:3e:79:b3:03:a7:b7:b5:0e:b4:82:
97:23:8f:15:70:f9:6a:9b:eb:70:75:70:ae:85:d4:
cb:eb:47:bd:10:1f:fe:0e:3c:c7:af:50:d7:9c:90:
bc:c9:ab:46:58:39:e4:78:2f:e1:7e:f5:52:11:72:
b4:50:f4:d0:cc:0f:23:fb:16:60:1f:cd:b0:51:bf:
a1:7b:3d:5e:9b:49:fd:29:9a:4f:08:69:f0:a1:6d:
e5:fc:03:1f:16:f8:a6:3e:7e:e7:28:c2:ec:46:15:
a9:16:a9:5a:f2:d1:a0:18:7b:ad:91:a4:03:f2:c0:
87:e5:06:a4:cc:9b:ae:7a:4e:fa:b0:2a:f5:1f:a0:
85:2c:40:b2:47:da:cf:1d:0e:7e:33:c3:2b:a0:7b:
af:bd:9e:a2:b8:12:a7:9d:92:f7:b5:83:02:a9:d2:
f6:f1:a4:4a:3f:a7:44:05:21:ab:ef:a9:16:8c:1d:
95:6f:27:cb:78:12:32:75:8b:81:90:11:5b:d6:d3:
75:28:58:72:4a:36:e2:47:75:80:c4:b7:1b:95:01:
b2:3b:3d:e6:d2:42:d3:dd:2e:ce:ee:f0:92:93:c4:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:5A:8D:1A:4F:1D:E9:AE:4B:8E:50:2C:02:5B:63:13:C4:9D:73
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/dD5ajRpPHemuS45QLAJbYxPEnXM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45093
sbgp-ipAddrBlock: critical
IPv4:
45.124.44.0/22
101.251.128.0/20
103.192.164.0/22
111.67.192.0/20
182.18.32.0-182.18.127.255
Signature Algorithm: sha256WithRSAEncryption
3f:48:cb:3f:77:bf:9d:92:7a:9a:02:8d:57:b8:a0:01:24:cb:
18:2f:c5:06:66:e5:fa:67:93:b7:43:ed:43:cb:59:0c:ac:2e:
ce:f7:d1:3e:c9:95:fe:2d:19:82:ee:3d:2c:99:08:6f:64:f8:
3c:87:37:5b:a6:02:6f:f1:4e:a3:ec:4f:48:f0:4a:b9:ee:a5:
e1:e6:36:24:2b:9b:db:18:05:01:fd:eb:e2:22:85:fb:9f:2d:
0d:d4:d6:db:34:05:60:87:cf:0c:b3:8a:32:d8:46:32:53:23:
b0:db:06:f8:93:87:36:7b:09:61:e3:d8:d5:81:5b:60:de:bd:
1a:0f:da:11:38:13:47:ed:aa:86:d9:54:3a:86:ac:d8:62:ae:
19:ae:52:37:ac:a3:60:58:af:6e:f4:46:b5:04:d6:7a:1b:26:
75:5b:cc:a9:2d:52:7d:8f:7f:07:96:6b:71:b7:f0:ec:c0:f3:
3e:3d:5c:d9:e3:ce:48:81:64:9d:db:03:6e:47:03:5b:93:4f:
29:d5:61:7c:22:2c:8c:94:e6:e3:dc:b8:d3:c5:7a:c4:e6:3c:
a3:cf:1f:62:83:c4:1b:9f:fd:1d:39:88:db:17:08:6d:c3:c3:
d3:47:66:74:08:6d:a0:65:81:5f:0d:29:b8:59:8e:97:d2:69:
2f:7c:9e:8b
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgICeFEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDYwMzIwMjgwOVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoNzQzRTVBOEQxQTRGMURFOUFFNEI4RTUwMkMwMjVCNjMxM0M0OUQ3
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMmvIHqmvmWK4hvCT29V
OkpO1dOuA70ss7VQWaP3NaexuXY+ebMDp7e1DrSClyOPFXD5apvrcHVwroXUy+tH
vRAf/g48x69Q15yQvMmrRlg55Hgv4X71UhFytFD00MwPI/sWYB/NsFG/oXs9XptJ
/SmaTwhp8KFt5fwDHxb4pj5+5yjC7EYVqRapWvLRoBh7rZGkA/LAh+UGpMybrnpO
+rAq9R+ghSxAskfazx0OfjPDK6B7r72eorgSp52S97WDAqnS9vGkSj+nRAUhq++p
FowdlW8ny3gSMnWLgZARW9bTdShYcko24kd1gMS3G5UBsjs95tJC090uzu7wkpPE
vtcCAwEAAaOCAo8wggKLMB0GA1UdDgQWBBR0PlqNGk8d6a5LjlAsAltjE8SdczAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzMwOC9kRDVhalJwUEhlbXVTNDVRTEFKYll4UEVuWE0ubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCwJTA/BggrBgEFBQcBBwEB/wQwMC4wLAQC
AAEwJgMEAi18LAMEBGX7gAMEAmfApAMEBG9DwDAMAwQFthIgAwQHthIAMA0GCSqG
SIb3DQEBCwUAA4IBAQA/SMs/d7+dknqaAo1XuKABJMsYL8UGZuX6Z5O3Q+1Dy1kM
rC7O99E+yZX+LRmC7j0smQhvZPg8hzdbpgJv8U6j7E9I8Eq57qXh5jYkK5vbGAUB
/eviIoX7ny0N1NbbNAVgh88Ms4oy2EYyUyOw2wb4k4c2ewlh49jVgVtg3r0aD9oR
OBNH7aqG2VQ6hqzYYq4ZrlI3rKNgWK9u9Ea1BNZ6GyZ1W8ypLVJ9j38Hlmtxt/Ds
wPM+PVzZ485IgWSd2wNuRwNbk08p1WF8IiyMlObj3LjTxXrE5jyjzx9ig8Qbn/0d
OYjbFwhtw8PTR2Z0CG2gZYFfDSm4WY6X0mkvfJ6L
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org