Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nK_iVscKcA-tbifoO3QusmjjtdE.cer
File: nK_iVscKcA-tbifoO3QusmjjtdE.cer (raw, json)
Hash identifier: fvAgkkybJRRsrfQ6DwvU1OTh3rWlbYYKU0CLHFFLZXg=
Subject key identifier: 9C:AF:E2:56:C7:0A:70:0F:AD:6E:27:E8:3B:74:2E:B2:68:E3:B5:D1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:13:28 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 151310
IP: 103.241.172.0/23
IP: 2401:1ce0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52089 (0xcb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:13:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9CAFE256C70A700FAD6E27E83B742EB268E3B5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:80:d8:4f:51:67:b4:fe:17:86:da:02:a1:
c9:c6:c3:86:25:77:aa:72:80:71:a7:9e:fe:d8:d7:
92:9a:c6:04:f2:da:4a:48:ba:09:54:7e:7a:a7:c9:
47:57:13:f0:22:44:07:95:c8:96:ce:b3:6c:db:99:
70:f0:71:db:53:7e:c8:4b:86:62:f7:e0:bb:00:c3:
c2:db:9e:d5:e8:33:1d:0b:4b:24:08:c6:8f:37:55:
c8:3d:c6:60:e7:56:71:67:a2:8f:ab:66:ff:53:bd:
33:5e:c4:27:90:ac:00:e9:f0:c3:21:21:1e:ee:81:
b3:fb:ed:b6:0f:2a:80:20:3e:48:82:02:8e:ff:4d:
01:d7:32:43:c1:c2:56:63:f8:b5:82:8b:90:ef:e3:
17:d0:e2:73:02:d1:62:9c:dd:98:7c:6c:38:7d:3c:
73:f0:de:a8:6a:53:53:62:ac:f5:9f:a4:15:b0:b0:
dd:96:e0:44:35:1a:e9:52:90:8e:e1:d0:04:26:7b:
b1:f6:e5:9f:e4:b2:ea:e5:88:b6:f6:73:8f:fb:f7:
47:ed:ee:4d:87:0c:ee:bd:47:af:e8:d3:37:70:78:
7a:95:f7:0f:44:e0:24:91:fa:0f:6b:db:5e:dd:59:
bd:1f:b0:66:e4:89:97:9a:0b:d4:f4:1e:d6:a9:68:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AF:E2:56:C7:0A:70:0F:AD:6E:27:E8:3B:74:2E:B2:68:E3:B5:D1
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3233/nK_iVscKcA-tbifoO3QusmjjtdE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151310
sbgp-ipAddrBlock: critical
IPv4:
103.241.172.0/23
IPv6:
2401:1ce0::/32
Signature Algorithm: sha256WithRSAEncryption
51:3f:98:98:f1:89:d1:6c:d8:7f:1d:42:b1:24:57:c9:75:36:
0e:74:52:d9:d5:0a:3a:52:ce:62:b0:25:86:98:4f:2b:67:68:
f3:fe:82:14:c7:70:df:c9:54:29:05:0f:63:03:f1:d2:82:72:
03:d7:e8:d9:c3:c0:12:98:95:17:be:2d:f1:50:22:0e:76:97:
be:29:18:6d:b6:ca:74:a8:51:68:ba:f0:a0:19:8e:08:d8:44:
f1:51:cf:c4:b7:44:d2:6d:e2:8c:fc:cf:6f:ab:86:af:19:bb:
f2:cd:b2:38:d5:f2:0f:e2:90:46:d4:cf:c3:68:cf:c8:fe:92:
99:ac:21:93:f8:1f:f4:48:22:80:2f:40:f9:a7:b4:3f:c7:a4:
fb:db:44:10:1b:33:a7:c5:b1:96:8f:12:46:e8:44:ea:8e:a8:
c4:15:d3:9f:c6:6b:51:80:2c:59:76:a7:c7:bd:fb:b0:05:11:
d2:74:44:52:28:6c:57:92:fa:ac:df:92:67:78:b5:2a:bc:47:
95:ba:7c:ac:89:fe:3c:47:9f:1d:8c:34:af:e5:a7:ae:2d:95:
13:be:ae:f6:f1:79:d9:66:50:76:50:d6:5b:dc:9f:0d:b5:ef:
df:06:c6:ba:bb:41:77:31:1d:03:00:38:52:36:39:34:a8:9e:
c3:7b:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:47 2025 by rpki-client