Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ezVr3CpINR6PFgi1tMbsZ4uUGHE.cer
File: ezVr3CpINR6PFgi1tMbsZ4uUGHE.cer (raw, json)
Hash identifier: ePcCkINqV904zSeSomCKCMu1DQupvYgtHjAZRw7mTRc=
Subject key identifier: 7B:35:6B:DC:2A:48:35:1E:8F:16:08:B5:B4:C6:EC:67:8B:94:18:71
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CA47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/ezVr3CpINR6PFgi1tMbsZ4uUGHE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:07:03 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 151220
IP: 2401:aba0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51783 (0xca47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:07:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7B356BDC2A48351E8F1608B5B4C6EC678B941871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:15:3c:81:8b:7e:a0:0d:7d:10:19:ae:be:c5:
60:e7:bd:6c:30:49:c9:24:d0:48:05:01:63:30:40:
8a:d4:9b:8a:fb:15:ad:db:95:a6:ab:58:ff:57:88:
5a:18:b3:f3:0d:29:fd:50:7f:f4:2b:4a:43:95:82:
4f:a4:10:26:79:f9:4f:65:d5:1f:86:54:6c:73:26:
3f:fe:1d:a4:69:df:6c:da:43:1a:7b:53:39:0d:c4:
c5:ea:77:35:6b:fe:7e:36:f8:e4:0f:0f:b2:f0:bb:
4a:95:22:b9:cd:b8:4c:ca:7a:61:47:07:72:7f:03:
94:92:57:fd:d0:a8:c4:c4:9b:a9:c5:15:12:73:7e:
d0:11:3f:24:fc:43:2f:2f:a6:28:97:62:79:d5:54:
e9:a0:7e:ec:73:72:7c:d7:c5:aa:5f:4d:04:0e:2c:
9b:fb:d2:3e:76:69:03:47:ac:d1:f4:0c:3d:a7:1e:
5c:d9:d0:6e:5d:a1:3c:87:e1:da:28:d1:31:a9:60:
c6:e3:e2:d3:ec:fd:f1:27:4f:bd:5c:36:7d:99:8b:
6f:ee:17:29:b7:33:9c:98:55:73:90:16:62:19:47:
76:4a:7e:08:08:be:79:4a:4a:f3:59:1e:f2:5c:2c:
10:32:f3:91:59:30:6b:a2:34:ec:81:94:72:8e:d0:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:35:6B:DC:2A:48:35:1E:8F:16:08:B5:B4:C6:EC:67:8B:94:18:71
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/ezVr3CpINR6PFgi1tMbsZ4uUGHE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151220
sbgp-ipAddrBlock: critical
IPv6:
2401:aba0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:79:4b:a2:c8:fa:93:2b:fa:b0:f4:8b:ae:80:67:7e:d4:22:
1b:cd:4b:55:45:1e:fe:86:47:28:2c:e0:7b:3a:f3:7f:60:a7:
e6:1e:f9:2c:6c:68:e6:aa:2b:e6:30:a4:ec:83:1e:28:9a:2c:
3c:af:2b:f7:a5:e7:4a:6e:3e:80:4e:41:f1:20:03:07:da:c1:
61:4c:4a:c2:04:3d:3c:3d:1f:8e:db:25:ff:b8:30:03:a2:72:
91:26:34:ce:a0:b6:ae:f7:04:8f:a2:80:84:b0:47:54:14:73:
6c:c5:c8:23:11:b7:f3:fd:7f:e9:9c:cb:3d:b3:ca:36:e2:c9:
3c:c8:40:93:ad:55:b6:a6:cc:4f:40:c9:5e:aa:d9:bf:87:6b:
c3:64:a4:9e:29:e9:49:2b:49:ad:e4:44:0f:4c:c8:c1:b0:96:
9f:ce:5d:c0:63:fe:7e:eb:49:0e:7d:7b:50:60:91:22:d3:d6:
d3:37:f6:bd:41:5f:93:f4:2f:8e:77:d6:56:ac:a1:73:3c:3b:
a4:c2:4c:99:df:26:0d:77:99:49:50:36:d9:cd:ca:f6:69:3f:
a9:f0:b1:68:f0:b5:75:5d:41:e5:49:8e:6b:2f:85:b3:99:96:
d8:94:8e:41:a0:68:ec:df:6b:b7:98:93:3c:f4:87:a1:31:ef:
fa:14:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:33 2025 by rpki-client