Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer
File: g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer (raw, json)
Hash identifier: MieMtyxBpQBPsdKzJUYFV1QSyQFsaVIiIAoM8yJGDug=
Subject key identifier: 83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:30:27 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 202.38.176.0/23
IP: 202.127.192.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52189 (0xcbdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:30:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=835518B3540E89A2C3983213E02FEAAB77BDA544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:89:0f:19:1f:b9:30:f8:9e:96:ca:aa:ed:
cd:66:73:50:67:d9:72:58:8d:96:cd:20:0f:4a:46:
70:db:65:fa:00:04:0b:5e:9b:37:ac:c4:f1:b9:fc:
fc:36:b4:7d:d9:a1:1f:e4:df:a7:8f:01:c0:7a:a5:
1c:76:ba:2d:c6:84:6d:5b:63:5c:9d:3c:eb:df:59:
7f:41:a6:aa:3f:ef:36:de:0e:33:13:39:30:f8:f1:
19:45:37:8f:f8:63:77:69:fa:0a:1c:e6:0d:39:fb:
bc:73:0d:63:9f:8b:2d:70:c5:72:33:8b:0c:27:63:
af:46:91:97:5d:cc:ef:8c:ba:d2:53:70:c7:40:9d:
a4:ca:16:72:18:00:89:b9:c1:7c:79:04:39:c5:09:
7d:9c:e9:99:84:70:72:d6:17:b8:c1:b7:8b:7c:bf:
3c:e7:c4:b3:98:cd:ed:07:2a:65:d1:32:f2:9f:7f:
8b:9d:66:cf:f1:1a:34:88:92:89:59:b5:db:dd:ed:
e6:21:0c:4b:4f:0a:85:e0:f3:fb:58:46:33:2a:fa:
08:1d:5a:96:98:12:64:b8:69:5d:98:1e:e7:14:cb:
fc:69:fa:f3:4c:75:e3:6a:cd:0e:19:e6:ea:c5:f5:
17:d8:52:94:1f:f9:9e:71:f0:7c:97:ff:cc:7e:4d:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.38.176.0/23
202.127.192.0/23
Signature Algorithm: sha256WithRSAEncryption
07:09:16:e1:7b:8c:86:62:44:6e:c2:b3:87:83:45:5e:59:36:
53:bf:7c:73:bb:1b:f4:82:7c:b0:51:82:a7:d6:a7:e4:37:b3:
e4:a4:98:09:95:ca:a4:61:9d:33:0c:c9:5c:e9:b3:4a:c5:fb:
f9:1f:53:29:3b:8b:0f:12:9b:93:c7:8a:7c:6c:6f:f6:f2:89:
d7:4e:f0:bd:b8:90:a8:51:85:9e:60:67:0e:fc:49:e6:e0:e2:
2d:98:ee:66:f3:1c:a4:3d:11:c2:06:ed:f7:e8:0f:e3:4e:28:
fb:f2:9c:f8:f3:b5:7e:1b:64:de:1e:f7:fd:ab:dc:49:dd:bc:
23:2d:34:4a:66:c5:1c:62:3a:7b:02:78:72:e7:9d:60:a8:8d:
4c:47:6d:15:64:82:ea:c9:18:f6:ab:dd:65:30:37:aa:0f:ae:
e8:8b:a0:15:ff:e4:56:9c:3b:26:17:7f:87:d3:c1:76:6b:f4:
de:f8:92:b6:3d:a3:e0:40:e0:38:21:79:67:60:23:85:f0:ba:
5d:10:d9:f8:80:a4:1d:5b:24:e8:e8:f3:b1:14:c6:92:5b:fb:
5d:75:17:33:a7:9f:47:92:80:a1:0e:a4:b6:af:b6:1d:2d:45:
6f:66:a7:48:f6:fd:10:1a:b2:77:d4:ef:70:83:7a:2c:79:1a:
f8:90:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:44 2025 by rpki-client