Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/lpPABd1I-3AAbT-K0ysiHRUe08w.cer
File: lpPABd1I-3AAbT-K0ysiHRUe08w.cer (raw, json)
Hash identifier: I2gJc/n/fXq83xUoGvdRN9akERblsAaFZTKOR9qD2c8=
Subject key identifier: 96:93:C0:05:DD:48:FB:70:00:6D:3F:8A:D3:2B:22:1D:15:1E:D3:CC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:27:11 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 2401:92a0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52149 (0xcbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:27:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9693C005DD48FB70006D3F8AD32B221D151ED3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:77:7f:fd:09:85:7f:98:fb:a8:80:53:4b:
f2:4a:d9:a3:f7:5a:42:2e:1e:77:13:76:70:d5:6f:
5d:fa:57:13:82:2b:a8:05:dc:e8:9b:c4:13:7e:60:
47:a2:63:13:c1:c9:7c:20:20:01:96:08:32:13:57:
43:38:4f:59:97:bf:fd:82:d0:d4:a7:23:b7:32:da:
4b:64:36:f4:fa:8a:e9:2b:e6:5d:af:4e:4a:ed:b1:
61:af:76:cd:c4:e8:f8:4b:60:bc:e0:10:70:cc:86:
2a:fa:fe:e3:e1:23:8f:83:da:30:7e:74:76:76:04:
a0:90:a9:c3:9f:0c:20:2c:3a:d1:5f:bb:a4:6f:19:
b7:ec:b9:3e:a6:13:83:0c:26:48:23:76:9e:f8:b7:
97:9a:c2:e7:21:2d:cd:c0:5e:df:cb:ee:47:6a:04:
de:84:37:a6:29:2a:a9:32:64:f0:08:00:cd:69:9a:
f5:da:ad:6e:15:cf:dd:5e:67:3b:a1:bd:65:24:6c:
70:de:ae:62:74:8d:8a:30:4e:55:f0:3a:a9:9c:28:
37:71:2c:33:90:72:c4:6b:52:6f:14:67:47:2f:3b:
b0:69:99:49:0b:2d:a0:0d:c8:c0:c2:b5:87:cb:0c:
50:d5:c6:5a:f1:15:23:bb:c8:66:c1:01:cc:24:08:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:C0:05:DD:48:FB:70:00:6D:3F:8A:D3:2B:22:1D:15:1E:D3:CC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/lpPABd1I-3AAbT-K0ysiHRUe08w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:92a0::/32
Signature Algorithm: sha256WithRSAEncryption
67:19:8e:b9:36:7c:95:42:cc:cb:29:b3:07:12:cf:e1:84:31:
23:93:e0:cb:cc:81:6a:bc:95:04:f3:67:da:bb:40:3e:a1:ca:
80:f7:0d:5f:0f:12:bb:57:a1:9d:ee:f8:c0:50:aa:68:b0:40:
96:e6:7d:b2:f1:50:04:26:2a:ac:aa:77:83:77:9f:14:a1:36:
e5:f4:be:2e:8b:4b:d4:4e:38:db:5d:b8:aa:c0:e3:3c:65:ad:
c2:bc:58:fc:4a:56:21:1b:ea:47:ab:11:67:fc:49:45:ea:c5:
bc:78:78:f9:27:d4:ce:c1:71:93:87:25:5f:ab:c7:73:55:90:
a8:db:e5:83:e6:40:90:15:62:8b:09:6c:f9:38:e1:c5:4d:6b:
6a:ba:10:f1:af:63:b0:d1:ef:33:3a:3a:6d:9e:33:3d:f6:12:
f4:2a:1c:17:6d:0b:37:9e:6a:d1:eb:52:6a:c0:b1:bf:b9:e2:
39:00:fd:0a:a1:ba:5f:6a:ed:4b:89:22:cd:bb:d0:ee:fe:0a:
15:1d:ad:fb:d4:70:94:2b:b0:19:34:06:0f:1d:7f:84:e6:9e:
85:00:03:f2:67:e0:b8:2b:0c:01:38:45:af:ad:7b:59:b5:a0:
0f:4a:36:aa:1b:cd:d0:cb:de:f8:b0:d9:9c:cc:2c:81:57:93:
3c:c4:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:41 2025 by rpki-client