Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/plGj7hJAG2jtk-OCwFpKMLgCneQ.cer
File: plGj7hJAG2jtk-OCwFpKMLgCneQ.cer (raw, json)
Hash identifier: iy81DETN1Vn4Qi40hhc4ssqH7kSxMdNrABkMWkgvL00=
Subject key identifier: A6:51:A3:EE:12:40:1B:68:ED:93:E3:82:C0:5A:4A:30:B8:02:9D:E4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 794F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/plGj7hJAG2jtk-OCwFpKMLgCneQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 05 Jul 2021 01:26:10 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.139.212.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31055 (0x794f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jul 5 01:26:10 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A651A3EE12401B68ED93E382C05A4A30B8029DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:9c:c9:45:15:6d:e3:63:50:27:6a:b9:5b:
2f:97:91:1e:62:bd:0a:f1:6c:75:ca:c6:e4:4f:04:
aa:c2:4a:ea:7b:cb:a7:19:57:fd:e4:bc:6d:27:49:
33:a5:aa:7e:e5:d9:4c:87:17:07:75:03:fe:7e:8e:
fc:69:f4:43:cc:fd:ca:31:c4:77:b1:9a:19:a2:b1:
b9:11:ba:3f:19:8e:43:20:9e:56:6f:b4:0e:5c:ec:
4c:7b:ea:1b:49:d8:d5:d5:40:44:8c:bd:a6:bc:60:
40:f0:5c:b9:58:5d:42:c1:a5:9a:31:95:66:6b:17:
5a:9a:8e:f2:07:dc:77:df:f1:64:3e:75:81:c3:20:
fa:e4:aa:83:c2:2c:b1:36:7d:17:95:d5:cd:85:e4:
dc:e0:2a:2d:6c:45:a8:b1:6f:b2:6d:3e:d8:37:63:
f5:cf:2b:8e:b4:83:f8:fb:59:4a:6f:87:96:35:57:
e4:f2:72:44:20:c8:68:31:c8:f4:55:c4:a6:57:58:
11:09:07:46:d9:00:e2:ed:38:b5:5b:a4:d4:4a:6b:
2a:8a:2c:da:7e:12:52:fd:51:ae:c4:0c:af:41:53:
ff:de:94:df:d4:b7:05:e9:3d:2b:58:27:8b:87:45:
3b:e9:d7:9b:c5:b8:fb:04:ea:51:71:2a:59:f0:01:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:A3:EE:12:40:1B:68:ED:93:E3:82:C0:5A:4A:30:B8:02:9D:E4
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/plGj7hJAG2jtk-OCwFpKMLgCneQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.212.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:7d:7a:96:40:a6:13:45:08:8e:a3:61:fc:ee:43:d3:dd:a3:
dc:02:43:cb:5b:c6:c1:42:64:b2:de:37:bf:30:d3:0f:45:c6:
5c:36:2e:3b:c8:23:7c:7a:2c:7b:11:22:63:8d:0d:6d:71:b2:
ca:11:27:15:75:76:6a:b6:80:56:ea:b3:f1:61:68:ac:92:9f:
73:99:0e:4e:e6:75:c5:69:41:15:83:75:12:d9:e9:fe:04:ff:
3d:6e:03:21:25:6e:0e:39:3f:5f:db:e8:d5:21:70:db:7c:42:
a2:94:55:75:83:17:14:9b:a9:e7:de:98:25:23:9f:41:32:b1:
80:04:ec:6d:68:81:89:e2:99:02:e8:0d:1d:86:42:5a:ba:44:
6d:ee:70:7c:60:91:8b:68:23:6f:3b:cb:8f:60:a8:54:e4:00:
a7:c7:26:bf:68:6c:65:e5:b7:95:4a:0a:5a:b4:71:cd:d6:95:
db:f3:27:f4:82:e4:5c:a4:63:84:56:18:87:ae:ea:53:dd:fd:
97:bd:6c:8b:5e:ea:5f:4c:2d:03:11:eb:86:2f:f6:f1:5b:09:
68:29:05:29:fe:b2:71:86:87:9d:de:7f:62:39:ca:3a:b2:e1:
1b:24:dc:c9:db:d7:ac:7b:e1:b8:ef:2b:c1:3e:78:11:d4:38:
af:29:e7:c8
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICeU8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDcwNTAxMjYxMFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoQTY1MUEzRUUxMjQwMUI2OEVEOTNFMzgyQzA1QTRBMzBCODAyOURF
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANmpnMlFFW3jY1Anarlb
L5eRHmK9CvFsdcrG5E8EqsJK6nvLpxlX/eS8bSdJM6WqfuXZTIcXB3UD/n6O/Gn0
Q8z9yjHEd7GaGaKxuRG6PxmOQyCeVm+0DlzsTHvqG0nY1dVARIy9prxgQPBcuVhd
QsGlmjGVZmsXWpqO8gfcd9/xZD51gcMg+uSqg8IssTZ9F5XVzYXk3OAqLWxFqLFv
sm0+2Ddj9c8rjrSD+PtZSm+HljVX5PJyRCDIaDHI9FXEpldYEQkHRtkA4u04tVuk
1EprKoos2n4SUv1RrsQMr0FT/96U39S3Bek9K1gni4dFO+nXm8W4+wTqUXEqWfAB
7f8CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSmUaPuEkAbaO2T44LAWkowuAKd5DAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5
Ny8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yODk3L3BsR2o3aEpBRzJqdGstT0N3RnBLTUxnQ25lUS5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFni9QwDQYJKoZIhvcNAQELBQAD
ggEBAAx9epZAphNFCI6jYfzuQ9Pdo9wCQ8tbxsFCZLLeN78w0w9Fxlw2LjvII3x6
LHsRImONDW1xssoRJxV1dmq2gFbqs/FhaKySn3OZDk7mdcVpQRWDdRLZ6f4E/z1u
AyElbg45P1/b6NUhcNt8QqKUVXWDFxSbqefemCUjn0EysYAE7G1ogYnimQLoDR2G
Qlq6RG3ucHxgkYtoI287y49gqFTkAKfHJr9obGXlt5VKClq0cc3WldvzJ/SC5Fyk
Y4RWGIeu6lPd/Ze9bIte6l9MLQMR64Yv9vFbCWgpBSn+snGGh53ef2I5yjqy4Rsk
3Mnb16x74bjvK8E+eBHUOK8p58g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org