Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer
File: gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer (raw, json)
Hash identifier: lVuxJkdZdGMIOZc9cQ22ExpqJKk+K+yHAqMYgv8Qp1A=
Subject key identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:11:56 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 151309
IP: 103.244.26.0/23
IP: 2401:1de0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52009 (0xcb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:11:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=800536278BDFA4599FE06667270C57D4856805F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:53:c2:62:b5:91:94:dc:9f:9f:32:23:eb:
79:bb:fc:b5:11:58:63:86:b4:47:97:04:b1:2a:ee:
c8:96:4a:b8:82:f2:eb:c9:26:97:59:54:96:57:f1:
c9:68:63:49:02:c0:13:c5:2d:b4:ca:4a:ab:d9:6d:
2a:b8:fc:f6:09:7a:94:a8:a7:7f:7b:93:31:15:35:
b2:a9:57:8b:f6:cd:c0:9a:e0:b2:a2:ff:25:ee:ed:
53:4c:ad:fa:d9:1f:af:28:d0:38:86:2d:87:2c:9d:
6b:41:a0:af:34:74:3d:dc:22:00:f5:81:a5:62:42:
db:56:7e:32:7e:2e:86:4a:fa:94:34:91:f4:90:95:
dc:27:a3:fc:ae:83:32:3c:4d:6a:1b:59:9e:84:0d:
35:30:e1:e3:ee:68:8f:dd:9f:44:cb:0e:16:90:2d:
23:d9:16:70:7b:da:38:4a:64:5c:20:b1:35:ad:2a:
fe:0b:fc:78:86:e8:c7:1b:cc:28:dc:e4:56:33:ea:
e4:5c:98:47:2c:3d:ce:40:42:06:ed:bb:13:ec:a4:
6e:e3:ee:c5:bc:91:c8:e5:d7:a2:d9:53:55:f6:c6:
8d:77:35:c7:7e:56:48:93:a0:ea:9f:a3:91:aa:71:
70:ec:b7:92:a1:9a:dc:65:5f:06:08:3e:eb:b1:51:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151309
sbgp-ipAddrBlock: critical
IPv4:
103.244.26.0/23
IPv6:
2401:1de0::/32
Signature Algorithm: sha256WithRSAEncryption
66:aa:10:b0:6d:64:47:fb:2b:7b:09:8a:60:6c:4c:35:80:77:
a2:d5:ed:df:06:d8:f5:8b:ee:67:b5:b8:81:cf:67:75:16:23:
5e:0e:20:24:25:64:f7:7a:34:2c:f5:54:11:7a:13:9f:42:b7:
21:cd:19:68:77:82:8d:1b:2b:2e:46:e7:3d:ae:7c:1d:bf:21:
89:60:0a:29:06:7f:d4:71:5c:ee:4c:15:c6:fc:df:cc:61:b1:
87:b0:2c:12:0a:35:2c:b8:7f:26:c5:1a:81:0c:be:42:6c:64:
9c:0f:6c:7e:0b:2a:fb:e9:8b:5c:27:67:30:41:08:3c:b9:8e:
52:f0:57:87:90:e3:ad:29:96:a3:6f:65:e8:89:99:78:38:98:
b5:07:fd:93:81:44:a4:46:c1:96:0d:95:ea:46:3f:e1:2f:f0:
86:bb:f0:67:91:a0:51:3d:4a:0b:4d:c1:3b:da:77:2e:0d:29:
6a:ec:17:69:43:e6:5c:88:4b:b3:1a:ad:c2:1e:24:0c:18:19:
a1:8d:3d:59:f6:d3:60:1c:bb:18:f4:43:48:46:a6:58:8c:95:
e5:25:df:43:97:e4:52:cb:e0:ad:78:72:fc:7b:91:55:82:41:
30:55:44:f9:88:1c:95:dc:be:d0:41:3f:53:8d:65:41:de:b9:
aa:e3:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:52 2025 by rpki-client