Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fetUO9g1VViFIfIivviJGRdeExQ.cer
File: fetUO9g1VViFIfIivviJGRdeExQ.cer (raw, json)
Hash identifier: r5+spGox0kRLhhpgQlVe2IFxes3SUj1y83xGTA+8h5k=
Subject key identifier: 7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:31:20 +0000
Certificate not after: Thu 16 Oct 2025 11:48:52 +0000
Subordinate resources: IP: 103.123.200.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52211 (0xcbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:31:20 2025 GMT
Not After : Oct 16 11:48:52 2025 GMT
Subject: CN=7DEB543BD83555588521F222BEF88919175E1314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:2b:ef:d5:2d:1d:a0:7d:5b:e9:d5:2d:04:
23:76:cc:36:7b:d0:68:2e:ef:9b:fd:c2:59:d5:ab:
9b:d0:5d:ba:19:2a:47:45:93:f5:9c:c8:42:d4:cc:
55:4f:c3:f6:ee:c7:4a:46:24:52:8b:a5:31:a8:0d:
fd:8b:0f:d2:c4:58:db:7d:5e:54:40:f8:9f:89:22:
6c:d5:2c:96:aa:06:36:7d:5e:3a:de:de:31:16:2c:
9b:ec:b3:15:7c:f6:c0:85:9d:2c:b9:75:b0:f6:21:
69:b1:e6:52:15:06:83:bc:68:07:24:20:fe:40:5e:
3a:ca:3c:4c:16:77:19:80:20:1e:07:77:6d:f2:cc:
68:3a:5f:7f:e5:54:1f:41:8b:35:45:f6:d7:8e:06:
61:13:89:55:5e:bb:22:f1:e7:69:83:07:d4:90:3a:
d9:0b:57:ab:70:cf:1d:d0:34:26:fd:0d:c7:0d:ee:
05:50:4c:36:e8:12:80:c3:25:65:de:2d:eb:86:dc:
46:3b:78:10:6e:42:eb:51:8a:ea:f1:15:d1:dc:ae:
01:2f:8f:4a:7d:17:fb:2f:2e:25:3d:42:db:df:e5:
64:c4:3a:e2:3e:68:42:5b:11:7a:a9:07:59:d5:fb:
32:68:91:5d:39:2c:56:8c:06:94:1d:83:1f:91:10:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EB:54:3B:D8:35:55:58:85:21:F2:22:BE:F8:89:19:17:5E:13:14
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3323/fetUO9g1VViFIfIivviJGRdeExQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.200.0/22
Signature Algorithm: sha256WithRSAEncryption
59:7f:fe:61:1c:f0:7c:2f:81:60:fe:7b:5d:66:dc:ab:34:81:
d0:8d:fa:0c:dd:15:2c:76:ab:7f:1f:c5:45:d8:0d:75:0f:fa:
0c:5a:51:2b:da:0c:bc:79:5d:d3:ba:35:09:2d:37:15:7e:e7:
88:80:4e:fb:5e:9b:57:01:6c:f5:82:bc:ea:dd:23:e6:6d:c4:
2d:93:83:0e:62:20:05:1d:f4:b4:75:96:a6:89:20:1a:9f:11:
6a:ff:20:de:aa:7d:18:25:10:2a:63:fd:9f:eb:39:9a:24:d1:
8e:f4:74:f5:1c:bf:89:ef:e3:da:c7:42:e1:96:f7:b4:14:dd:
de:39:4b:0b:e9:20:69:45:d7:a4:ef:4e:f6:fe:61:2a:b5:49:
4e:75:76:a1:1a:8c:0b:d1:86:b9:b0:45:a9:6d:55:4e:34:4b:
83:d2:e0:2e:68:fb:dd:a5:26:be:d7:76:23:0d:b0:3b:da:55:
e5:20:c8:7d:9f:8e:c6:82:d6:8e:50:ce:6f:20:89:99:13:f1:
d6:34:da:02:6a:d7:9e:26:c4:2d:2f:24:9e:07:0c:98:d3:d8:
7f:56:bb:2a:c9:e4:0d:89:cf:ae:f4:61:ea:fc:12:be:cf:81:
d6:fc:91:bb:ec:c8:2a:d7:f2:8d:74:4f:41:43:52:d1:67:b4:
87:95:65:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:51 2025 by rpki-client