Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/pDidtIvE6TSc2eEd0MttcHaa4xk.cer
File: pDidtIvE6TSc2eEd0MttcHaa4xk.cer (raw, json)
Hash identifier: mkibIluKziLm1Sozcb6g0Y4X4rNXiiKb/PX1n/WfEGg=
Subject key identifier: A4:38:9D:B4:8B:C4:E9:34:9C:D9:E1:1D:D0:CB:6D:70:76:9A:E3:19
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3C10
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:32:07 +0000
Certificate not after: Sat 20 Dec 2025 00:30:32 +0000
Subordinate resources: IP: 160.250.252.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15376 (0x3c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:32:07 2025 GMT
Not After : Dec 20 00:30:32 2025 GMT
Subject: CN=A4389DB48BC4E9349CD9E11DD0CB6D70769AE319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:ba:5a:d7:c5:bb:4f:c8:2d:6c:1f:a1:96:
d1:74:14:97:6c:8c:8b:7c:bc:68:20:a3:b0:c9:61:
55:e1:be:8b:81:da:74:3b:8d:ad:23:50:82:39:95:
3f:ef:ab:a1:6f:6e:a0:81:d5:11:ec:df:ba:92:38:
f0:5e:c3:db:25:fe:31:23:07:14:2a:68:62:e7:d5:
0f:be:6c:da:69:da:5c:a4:d3:11:44:04:0d:13:c4:
2b:67:08:97:4b:ca:91:11:f1:b3:7f:17:6c:ca:1e:
e9:2c:93:5a:0f:0b:f0:c9:ae:24:a6:97:37:08:d3:
dd:61:3e:f5:67:b9:b5:d6:e8:bc:9e:b6:56:94:61:
f2:0a:eb:d6:fa:d2:6c:e6:de:6a:a0:c0:21:a1:87:
b1:94:a7:ae:86:69:d3:e7:d3:64:2e:65:d9:79:3c:
2e:ab:4d:be:b5:bc:cb:11:f3:6b:0c:5b:da:4d:60:
31:6b:b6:37:5b:f6:fb:63:92:30:48:69:b3:aa:0e:
28:fb:af:c4:26:86:e8:6a:fa:80:ef:a1:71:93:7a:
67:ca:0a:53:52:22:89:40:f3:88:97:4e:ec:c8:d2:
92:9e:34:bc:5d:52:f2:35:4a:9f:24:b9:44:76:cf:
eb:7f:2b:45:6c:32:0c:3d:10:6a:3f:e0:9c:f2:b4:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:9D:B4:8B:C4:E9:34:9C:D9:E1:1D:D0:CB:6D:70:76:9A:E3:19
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/pDidtIvE6TSc2eEd0MttcHaa4xk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.252.0/23
Signature Algorithm: sha256WithRSAEncryption
70:a7:c0:98:5c:2d:39:64:57:92:0c:7b:84:f6:31:3b:ee:86:
97:b1:42:f0:b2:a3:21:10:64:bb:88:c9:74:1c:7d:2b:b7:67:
12:4a:86:d3:6e:91:85:58:81:d0:6c:3a:22:e0:c9:ad:f9:48:
ee:7f:c1:f8:d5:76:64:1d:e5:81:a2:cc:a7:ad:82:f7:9b:5e:
23:07:26:21:61:07:9c:8c:af:2b:23:23:7d:fc:76:9a:2b:ab:
e8:4a:e4:00:47:0a:0e:21:21:77:e1:14:4b:f3:57:fe:fd:35:
a9:90:07:70:32:27:da:6e:45:4d:12:a2:90:2d:a7:a7:fa:fa:
27:b6:8a:b3:bb:a5:17:10:60:92:eb:be:7b:dc:dc:d5:d8:08:
5f:a1:89:05:88:4d:34:ad:1b:c0:6d:16:23:1d:68:ba:5e:35:
90:30:a4:5d:1d:0d:cf:a1:25:da:0e:53:07:ca:92:b9:03:2e:
83:97:c3:b0:0b:67:37:27:b5:e3:a4:64:ed:59:c7:0b:71:58:
95:78:81:f8:34:f2:91:fb:44:73:27:5d:6e:1f:ca:ec:d0:55:
ec:86:e0:0a:a0:20:e5:2d:b3:7d:ae:40:a5:3c:c4:b7:bb:8a:
a6:f7:d5:6d:69:37:ec:4c:1a:78:19:0c:7c:68:b3:70:55:64:
a9:02:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:06:56 2025 by rpki-client