Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer
File: o41fPqZUrYxtZU2lvpCKZY8mbmQ.cer (raw, json)
Hash identifier: YxTPEUtLWW9E6VYLchb06ZwrXmmuh+DezpIkE0yds8g=
Subject key identifier: A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BFC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:31:09 +0000
Certificate not after: Thu 09 Oct 2025 05:57:36 +0000
Subordinate resources: IP: 160.187.223.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15356 (0x3bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:31:09 2025 GMT
Not After : Oct 9 05:57:36 2025 GMT
Subject: CN=A38D5F3EA654AD8C6D654DA5BE908A658F266E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:ee:63:a1:78:e3:a3:c7:43:c5:17:6b:b0:
f7:c7:9f:b2:aa:9e:5f:ea:63:0b:c3:9d:82:04:05:
c2:0c:e7:d2:fa:6d:72:3d:e5:13:e7:65:ce:8a:10:
8b:59:63:53:ea:7f:9e:56:61:2a:90:04:1d:91:ce:
8e:58:c8:6b:5b:77:f5:f4:32:54:78:07:68:8c:56:
14:43:ed:c3:e7:b4:4d:3d:c3:ac:72:03:17:27:7f:
8a:da:36:87:22:2d:ce:59:63:d8:d5:33:5f:11:66:
ad:dc:86:d6:f3:a4:11:ca:10:cc:59:3c:2c:bb:fd:
85:3b:2d:f6:a4:9e:be:16:28:cb:b8:71:c8:59:aa:
06:3f:40:f2:20:fc:0a:12:26:1c:7f:0b:14:07:9f:
22:f8:2d:00:21:bd:ea:c9:59:85:98:28:b7:16:fb:
18:81:64:7e:e3:5d:da:cb:1a:63:92:9b:ad:0d:a5:
0b:b1:09:ea:f8:ad:d7:c6:71:69:6f:ed:67:31:d3:
4b:86:91:4d:56:91:27:5c:e3:31:98:58:f2:9a:cd:
73:eb:bb:55:66:fe:bb:ce:91:5f:3b:f2:24:88:01:
95:a8:d0:c0:9e:e4:cc:c1:18:cd:be:39:71:03:29:
2c:94:78:67:cb:f9:99:06:ec:84:0e:0c:77:8b:a3:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8D:5F:3E:A6:54:AD:8C:6D:65:4D:A5:BE:90:8A:65:8F:26:6E:64
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3319/o41fPqZUrYxtZU2lvpCKZY8mbmQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:61:ac:82:51:d5:f5:5d:86:a0:83:6f:72:dc:63:33:84:8c:
be:96:c6:a8:6e:6a:80:59:5b:48:48:8a:0b:00:a5:f7:ec:e6:
10:09:0d:de:b1:00:08:e7:94:27:ea:c1:f3:ab:6f:a9:d7:bd:
b5:c2:0a:fd:92:ec:cf:52:87:65:2b:b5:09:f0:f8:87:54:13:
05:c3:d6:b8:94:f1:0c:69:1e:2a:7b:2e:24:9e:12:78:3d:10:
71:0c:3c:d1:aa:71:42:d8:63:3a:f8:6d:a8:5d:02:2e:de:3c:
d3:28:31:e8:7f:f3:5a:55:f2:9b:43:f0:b3:8e:eb:a2:52:ce:
c1:02:59:54:0b:e4:6b:4e:00:92:4d:08:48:09:e5:25:82:17:
b6:67:a8:c3:ec:af:0e:46:76:91:07:a4:a6:0c:53:a8:89:3e:
ff:c9:31:3c:6d:e0:1d:94:01:aa:53:b5:66:59:2a:62:02:7d:
66:5c:03:67:7a:4c:4a:9a:64:a5:d7:41:5a:e6:50:69:f0:7e:
a6:20:56:25:6c:89:b9:74:68:fd:e2:c4:df:7f:b6:7b:69:a3:
c5:32:e2:bc:58:e2:e3:1f:6b:8e:01:29:85:43:d1:f8:6c:56:
3b:ce:84:ca:45:97:58:3e:6b:1f:cb:d6:36:22:e2:c4:65:87:
da:4c:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:42 2025 by rpki-client