Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kyJKXF8ZT3ppLYvrg_4sgV33P6E.cer
File: kyJKXF8ZT3ppLYvrg_4sgV33P6E.cer (raw, json)
Hash identifier: SJUMvz8zBhIZsMKVUh19WAMKF7pU9UHn4Rmsd5w/e50=
Subject key identifier: 93:22:4A:5C:5F:19:4F:7A:69:2D:8B:EB:83:FE:2C:81:5D:F7:3F:A1
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BCE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kyJKXF8ZT3ppLYvrg_4sgV33P6E.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:09:34 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 139.155.0.0/16
IP: 139.186.0.0/16
IP: 139.199.0.0/16
IP: 140.143.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15310 (0x3bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:09:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=93224A5C5F194F7A692D8BEB83FE2C815DF73FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:ac:20:a7:79:50:f6:b2:29:df:d5:f5:cf:
6f:e9:f6:d7:bd:4e:3b:9d:d3:fe:3b:1a:af:27:00:
7d:56:c9:3c:4c:53:dd:08:3b:a7:da:f5:9a:5e:eb:
5e:d7:7f:58:b7:00:01:e9:57:28:f2:36:37:1f:12:
65:a7:ae:f4:c8:5a:62:58:df:0c:10:ad:27:cc:75:
01:be:78:f5:92:3e:7d:98:9b:a0:48:97:7f:30:43:
a2:da:32:b6:13:0e:6d:26:9a:1c:a1:17:bd:fe:8b:
25:bb:a8:cd:6a:58:d4:21:6a:9d:1c:be:01:4b:39:
18:34:0c:28:f2:8a:c2:6e:13:e2:97:e1:66:87:d7:
8e:67:ec:a3:50:36:1f:2f:eb:2c:1e:45:2d:89:84:
06:da:72:79:5c:ac:e7:fc:de:3a:60:0a:bd:34:8d:
ab:b3:44:d8:1f:86:dc:ba:e0:51:85:42:f7:a6:8c:
b2:ee:26:70:61:27:8c:45:e0:cf:b0:7a:2e:6b:4a:
78:68:b9:f9:db:47:12:01:61:d1:cb:14:41:df:91:
fc:2f:fd:c6:40:4f:da:52:d4:22:42:68:ac:e0:26:
23:07:45:bb:d6:29:6e:64:c8:1c:c6:c2:1b:a2:1a:
e4:54:0b:46:25:1e:7a:9c:db:31:ae:ea:35:ce:c9:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:4A:5C:5F:19:4F:7A:69:2D:8B:EB:83:FE:2C:81:5D:F7:3F:A1
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kyJKXF8ZT3ppLYvrg_4sgV33P6E.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.155.0.0/16
139.186.0.0/16
139.199.0.0/16
140.143.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:73:3d:f0:c6:af:23:8d:29:13:6c:43:40:13:9c:0a:31:2f:
2d:5e:5b:e2:4c:b2:a7:0a:0f:82:d1:d9:0a:80:1f:b6:70:be:
83:1d:11:da:9f:2f:d9:fd:bf:50:6e:ea:31:ec:9d:0d:24:0b:
f9:4c:11:b9:c6:72:e1:6f:ff:ff:77:e1:1d:72:5b:83:21:b8:
c0:8d:77:8f:81:93:52:e1:f6:32:a0:4d:af:4d:9e:bf:b2:4d:
d2:a8:18:51:c4:3e:55:e9:1d:82:34:bf:0c:eb:02:e7:23:a8:
db:8a:dc:62:05:ad:36:91:75:da:de:95:6d:ac:5b:d6:10:8c:
e9:b3:5c:c2:ab:76:c5:e0:a0:95:78:ee:2e:43:12:78:1d:53:
ee:0c:9f:b5:42:49:a8:72:1c:9e:53:ec:d0:51:17:65:36:69:
65:1e:51:b4:4d:40:bc:1e:42:b3:49:00:c8:fc:6a:36:de:3e:
97:a5:50:fd:81:ee:cc:79:33:e1:16:94:c4:a9:f9:88:b8:a5:
81:99:68:1d:4d:ce:e2:92:0c:3c:86:35:09:36:67:2e:c5:a0:
2b:fd:9a:7c:db:e4:12:f1:6a:ea:f9:f9:bc:61:85:f5:dc:50:
d6:48:0f:48:46:9a:fa:86:04:cc:97:80:c9:fe:ae:b8:15:2d:
fa:50:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:44 2025 by rpki-client