Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fPozTTk7yRUPwnNxPBU1zTAadB4.cer
File: fPozTTk7yRUPwnNxPBU1zTAadB4.cer (raw, json)
Hash identifier: EihzeVaTDvHvadJ84CAzUF8SRf1mBsjXII1D7ubmU6A=
Subject key identifier: 7C:FA:33:4D:39:3B:C9:15:0F:C2:73:71:3C:15:35:CD:30:1A:74:1E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 773E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/fPozTTk7yRUPwnNxPBU1zTAadB4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:57 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 42.201.32.0/19
IP: 103.81.200.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30526 (0x773e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:57 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=7CFA334D393BC9150FC273713C1535CD301A741E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d1:0f:a4:d1:34:c8:7c:bf:7d:ec:de:d2:96:
1f:fb:83:53:cf:4a:56:49:29:f1:60:35:97:59:ce:
13:61:c0:12:cb:5d:36:c1:b3:9d:3f:58:5c:13:40:
7b:39:5a:88:2f:95:fe:3e:22:09:a6:1d:ab:17:cc:
e9:6f:46:ed:40:c5:dd:0f:7a:bc:9d:11:d4:18:61:
26:f1:2e:b7:f6:63:4f:cc:7e:12:d6:ac:33:99:77:
62:05:6e:ed:9b:de:d3:6c:57:eb:ef:fc:b1:df:32:
b0:59:f1:b6:c3:24:38:39:68:9f:59:2b:21:ef:30:
76:c5:b0:65:99:67:b2:80:2e:ba:d3:15:29:5f:09:
23:5e:84:db:6a:2c:fa:3e:c6:3d:1d:fc:37:3d:94:
f1:b7:06:36:d2:14:4f:03:2a:82:ff:3a:1c:e6:0c:
b4:2e:d9:5a:02:b6:09:d9:ae:52:f3:83:64:15:aa:
bd:4d:a0:90:d6:90:60:b2:da:4b:60:8a:ce:ce:6e:
8f:55:a2:d7:e5:36:0f:05:a3:df:45:ba:a8:56:31:
cd:68:55:21:4a:7e:40:f3:e8:61:8e:9f:18:22:89:
d6:69:37:3e:a1:8c:49:84:e6:03:72:68:d5:95:2a:
e5:0e:74:3d:c1:a4:18:d2:b6:30:c8:f6:f9:18:f2:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FA:33:4D:39:3B:C9:15:0F:C2:73:71:3C:15:35:CD:30:1A:74:1E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/fPozTTk7yRUPwnNxPBU1zTAadB4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.201.32.0/19
103.81.200.0/22
Signature Algorithm: sha256WithRSAEncryption
40:2b:a5:a4:8f:9d:e2:da:f1:50:b6:b3:fd:95:ff:52:d6:9a:
5b:b1:4c:8f:ee:0c:28:c5:0a:fb:b2:da:1e:c8:e8:f6:d2:a5:
d6:c8:10:65:10:34:cd:f0:3a:ce:28:90:33:2d:b0:16:6e:26:
07:52:f3:0e:c9:43:f6:b3:93:a8:53:19:5c:43:47:a8:2b:d4:
df:f5:e5:00:78:97:5f:6d:d9:21:0a:c4:62:05:87:2f:2c:63:
67:21:65:3e:0c:a2:52:ab:90:04:02:24:5b:1d:1b:04:aa:76:
db:54:f9:33:df:72:7c:b6:28:c3:90:22:6f:fe:4f:fa:14:9e:
cb:2f:f7:f0:37:3d:2a:14:bc:1c:b8:32:9a:87:9f:63:88:b9:
1a:5d:5a:12:6a:26:0b:6c:c9:d1:0d:3b:1b:e7:41:2a:8a:8f:
97:c4:e7:39:84:d1:78:57:ee:45:f8:72:d4:4a:e5:2a:94:59:
67:68:96:4c:f0:1d:b9:52:ab:d2:24:ec:02:47:e7:ca:3c:dc:
7d:d6:ac:89:68:ec:bf:c1:0a:e5:9a:a3:2e:38:98:44:9a:f3:
6a:2c:6b:3b:d9:23:cf:c6:73:23:94:1a:44:d1:c0:08:f0:7f:
e2:43:eb:18:28:81:a7:d4:95:28:26:61:2c:b6:03:e4:cb:24:
52:5f:00:ce
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICdz4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDI1N1oXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoN0NGQTMzNEQzOTNCQzkxNTBGQzI3MzcxM0MxNTM1Q0QzMDFBNzQx
RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOPRD6TRNMh8v33s3tKW
H/uDU89KVkkp8WA1l1nOE2HAEstdNsGznT9YXBNAezlaiC+V/j4iCaYdqxfM6W9G
7UDF3Q96vJ0R1BhhJvEut/ZjT8x+EtasM5l3YgVu7Zve02xX6+/8sd8ysFnxtsMk
ODlon1krIe8wdsWwZZlnsoAuutMVKV8JI16E22os+j7GPR38Nz2U8bcGNtIUTwMq
gv86HOYMtC7ZWgK2CdmuUvODZBWqvU2gkNaQYLLaS2CKzs5uj1Wi1+U2DwWj30W6
qFYxzWhVIUp+QPPoYY6fGCKJ1mk3PqGMSYTmA3Jo1ZUq5Q50PcGkGNK2MMj2+Rjy
DikCAwEAAaOCAlswggJXMB0GA1UdDgQWBBR8+jNNOTvJFQ/Cc3E8FTXNMBp0HjAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjI5
MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yMjkxL2ZQb3pUVGs3eVJVUHduTnhQQlUxelRBYWRCNC5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAUqySADBAJnUcgwDQYJKoZIhvcN
AQELBQADggEBAEArpaSPneLa8VC2s/2V/1LWmluxTI/uDCjFCvuy2h7I6PbSpdbI
EGUQNM3wOs4okDMtsBZuJgdS8w7JQ/azk6hTGVxDR6gr1N/15QB4l19t2SEKxGIF
hy8sY2chZT4MolKrkAQCJFsdGwSqdttU+TPfcny2KMOQIm/+T/oUnssv9/A3PSoU
vBy4MpqHn2OIuRpdWhJqJgtsydENOxvnQSqKj5fE5zmE0XhX7kX4ctRK5SqUWWdo
lkzwHblSq9Ik7AJH58o83H3WrIlo7L/BCuWaoy44mESa82osazvZI8/GcyOUGkTR
wAjwf+JD6xgogafUlSgmYSy2A+TLJFJfAM4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org