Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer
File:                     oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer (raw, json)
Hash identifier:          vzRQGrIAlWfC7rrJaZLfecgobc4eJUXZ/5VkgtB/9cc=
Subject key identifier:   A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       EC10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sun 15 Mar 2026 20:00:33 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151230
                          IP: 45.115.18.0/23
                          IP: 2402:20e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60432 (0xec10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Mar 15 20:00:33 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:07:4f:26:33:cf:53:31:8b:b4:28:79:c8:
                    a1:7a:2b:c5:2f:0b:45:7e:99:97:07:eb:18:b8:b2:
                    44:bb:6a:f1:bf:7d:13:7b:bd:0b:30:29:bc:49:19:
                    3d:08:e8:27:b6:03:fe:5d:f0:7c:2e:97:c2:bc:d0:
                    f5:29:28:ca:61:ff:df:ee:92:e2:bc:7b:e6:8f:f5:
                    1e:7d:de:ae:82:6f:fb:df:f8:90:ef:64:8c:4c:91:
                    b6:c4:5f:61:50:c9:54:84:92:90:9c:48:3e:f5:f8:
                    c5:5a:26:0a:e3:97:bb:cc:7c:ab:7a:d7:64:fd:2f:
                    0e:65:71:ab:b5:e3:22:09:97:7c:31:98:6d:28:bd:
                    8c:24:6f:db:26:8b:06:5a:62:e4:d2:b4:bc:e9:62:
                    45:e0:de:2d:36:79:28:21:75:0c:a3:95:1a:d0:93:
                    ea:79:30:8e:ea:70:bb:b5:61:55:d9:43:0f:83:c9:
                    76:87:40:82:a1:da:99:42:ca:47:29:cf:d4:fc:99:
                    3b:f8:0e:e5:9a:1c:51:10:0b:96:60:9e:f5:b4:3a:
                    6f:0b:c4:19:16:41:15:d0:f3:a1:30:f6:86:43:55:
                    97:a0:d3:3e:1f:06:2a:3d:7d:75:52:be:e8:7e:e4:
                    30:6a:92:75:ce:59:9c:4d:ae:66:d8:46:ac:ec:ab:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151230

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.18.0/23
                IPv6:
                  2402:20e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:60:ee:02:29:7d:58:6d:04:3f:f2:f8:d3:41:a7:c3:a5:
         ca:71:65:38:4d:d4:ab:39:65:d2:86:04:d9:e3:fb:6f:6b:66:
         4d:3f:8d:11:e3:e3:24:58:f8:46:4c:ba:24:34:c3:df:72:1a:
         0f:35:ec:b8:d5:1e:90:63:53:5b:be:f0:54:9a:71:a9:32:f7:
         b0:3e:fb:8a:97:9d:e1:83:08:c3:c5:ec:9e:13:df:bd:e6:e1:
         b8:d4:28:b2:4c:b6:39:98:b3:90:b3:a2:21:54:ef:7f:94:ee:
         34:27:1a:e3:2f:5f:53:59:b5:83:a3:81:c6:a5:c9:03:f3:65:
         50:89:e3:46:14:cc:68:45:60:0b:83:09:e3:d9:f2:07:c0:60:
         1e:39:1b:d4:bc:25:d0:46:77:55:34:49:30:9a:51:26:2c:14:
         74:a7:ea:ab:f8:b8:c9:58:78:d8:d0:dd:8f:58:ad:25:e5:c6:
         d7:cb:54:1e:6d:75:2a:49:80:96:17:7d:11:d0:e7:17:ff:d0:
         88:17:c8:49:c4:3c:f0:a0:e3:2d:bd:79:ca:bc:c7:d7:e4:02:
         8b:e9:9b:db:08:38:16:9c:b3:3a:04:7b:2c:55:8c:02:b5:b2:
         d7:24:ea:e9:09:23:b5:85:84:e4:8b:cb:3b:27:3f:26:53:78:
         9f:f1:04:05
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIDAOwQMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAzMTUyMDAwMzNaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKEExQTBBQkM1Q0E2RjUwOEYxOUY3OTA3RTk0QzMxNjIxNTIyOTY5
MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGgdPJjPPUzGLtCh5
yKF6K8UvC0V+mZcH6xi4skS7avG/fRN7vQswKbxJGT0I6Ce2A/5d8Hwul8K80PUp
KMph/9/ukuK8e+aP9R593q6Cb/vf+JDvZIxMkbbEX2FQyVSEkpCcSD71+MVaJgrj
l7vMfKt612T9Lw5lcau14yIJl3wxmG0ovYwkb9smiwZaYuTStLzpYkXg3i02eSgh
dQyjlRrQk+p5MI7qcLu1YVXZQw+DyXaHQIKh2plCykcpz9T8mTv4DuWaHFEQC5Zg
nvW0Om8LxBkWQRXQ86Ew9oZDVZeg0z4fBio9fXVSvuh+5DBqknXOWZxNrmbYRqzs
q+HHAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUoaCrxcpvUI8Z95B+lMMWIVIpaTQw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
ODcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM4Ny9vYUNyeGNwdlVJOFo5NUItbE1NV0lWSXBhVFEubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOvjAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAS1zEjANBAIAAjAHAwUAJAIg4DANBgkqhkiG9w0BAQsFAAOCAQEA
K9xg7gIpfVhtBD/y+NNBp8OlynFlOE3Uqzll0oYE2eP7b2tmTT+NEePjJFj4Rky6
JDTD33IaDzXsuNUekGNTW77wVJpxqTL3sD77iped4YMIw8XsnhPfvebhuNQosky2
OZizkLOiIVTvf5TuNCca4y9fU1m1g6OBxqXJA/NlUInjRhTMaEVgC4MJ49nyB8Bg
Hjkb1Lwl0EZ3VTRJMJpRJiwUdKfqq/i4yVh42NDdj1itJeXG18tUHm11KkmAlhd9
EdDnF//QiBfIScQ88KDjLb15yrzH1+QCi+mb2wg4FpyzOgR7LFWMArWy1yTq6Qkj
tYWE5IvLOyc/JlN4n/EEBQ==
-----END CERTIFICATE-----
Generated at Mon Jun 22 05:18:14 2026 by rpki-client