Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer
File: fkA7lSC0JGRD0-uH_xrMaZ4E37Y.cer (raw, json)
Hash identifier: 2benaOffYKLn3F3fJV0SURGY+BGK0NTjYLk+yFvMBQ0=
Subject key identifier: 7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BF6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:29:21 +0000
Certificate not after: Thu 27 Nov 2025 00:59:02 +0000
Subordinate resources: IP: 160.250.90.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15350 (0x3bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:29:21 2025 GMT
Not After : Nov 27 00:59:02 2025 GMT
Subject: CN=7E403B9520B4246443D3EB87FF1ACC699E04DFB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:72:7c:ec:90:0e:db:fa:17:b7:76:b6:08:
ab:1d:26:cb:65:8f:f7:a1:33:ea:54:9e:55:41:f4:
75:87:4d:5a:ad:61:41:4b:a7:20:98:8e:12:6d:c1:
0e:b1:89:2d:3b:56:59:e0:91:74:d3:23:98:bd:72:
41:73:17:66:9c:09:fd:b0:25:64:49:b2:05:72:e9:
fe:e2:42:43:b4:36:c9:cb:3e:a6:8f:ae:b4:95:3e:
ca:c2:55:b7:a2:74:14:24:1f:5f:1e:72:40:72:64:
f5:13:b6:91:ec:8f:8b:cd:70:ee:3b:b3:40:be:38:
fa:2b:4d:bf:31:95:ed:e3:ad:05:88:57:06:68:36:
89:86:3d:90:5f:8c:04:22:90:54:3d:49:30:6a:33:
2a:f7:e9:ba:82:f0:2a:51:6b:0e:0a:72:18:52:cc:
f9:69:32:aa:10:cf:6e:98:7e:10:de:e5:e2:35:45:
e5:b9:fe:68:1e:2a:bf:2d:ee:70:dc:7e:56:fb:02:
6a:09:f1:46:ac:6b:f7:d5:36:c2:7e:0f:69:a0:33:
f5:c3:c6:17:e6:05:91:a4:64:c3:e2:c5:c2:2a:4b:
10:0d:46:cf:a3:18:e5:93:1e:d2:b9:a1:7c:08:78:
0b:bd:6b:13:4f:4d:8c:dc:2c:32:37:0a:fc:63:cf:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:40:3B:95:20:B4:24:64:43:D3:EB:87:FF:1A:CC:69:9E:04:DF:B6
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3332/fkA7lSC0JGRD0-uH_xrMaZ4E37Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.90.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:74:76:4c:b4:8d:6a:8d:13:45:cb:70:36:a9:0d:b4:7f:b0:
ab:a6:10:4c:9a:c2:15:6c:d5:6d:f2:eb:f1:c4:90:44:f4:e9:
0c:6d:a8:a5:18:ee:af:95:82:42:bc:10:ae:50:0e:4f:82:dd:
3c:83:df:e5:a8:14:4b:89:c1:a8:c5:bc:30:8c:e4:8e:26:18:
05:da:3d:a8:69:6b:fe:a0:ed:b8:5e:9d:25:ec:fe:a2:cb:80:
4c:96:7d:e2:73:ee:92:61:57:51:9e:d2:b3:1c:64:a6:b1:1d:
f2:91:cc:ef:c7:9c:db:bc:5f:cd:08:14:9b:8b:d7:e2:72:68:
30:c7:c2:51:a8:e0:fb:9c:eb:9b:33:e0:78:cd:cf:24:33:15:
60:be:35:3f:8a:e4:59:ed:c3:89:f3:28:63:bf:3a:b7:80:e7:
32:a7:3f:5a:c6:22:30:2a:76:e3:03:9e:8f:6e:d9:91:a8:92:
51:1f:5c:92:79:77:18:99:1f:75:75:d4:1e:bc:59:aa:cc:c9:
c6:db:90:84:0f:ca:ca:5f:1e:87:67:05:8d:4e:4a:86:8c:81:
73:13:b8:5a:48:01:33:14:66:09:c2:ba:28:6e:1e:4d:7e:55:
28:6c:67:07:7a:bf:1e:f6:fa:8e:ed:1f:9f:26:72:7d:af:69:
56:e2:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:59 2025 by rpki-client