Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer
File: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer (raw, json)
Hash identifier: hpPBVH7RPUHX+fkeqyJ2ZZ4JflgQ9tcISgWQVkMLhnc=
Subject key identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:29:05 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 2401:a720::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52177 (0xcbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:29:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:ac:7b:83:c2:5c:5a:cd:e2:76:64:31:01:
b6:81:2b:77:7b:7f:96:68:39:07:f3:31:75:86:f4:
95:ec:77:a2:6d:19:8d:8c:29:49:21:04:39:98:43:
2d:3c:6d:8d:eb:b3:08:c5:2a:7d:79:4e:63:22:38:
fc:0a:8e:5a:e5:de:8a:8c:e9:61:d3:53:1b:76:38:
f4:b9:18:98:b2:a1:8a:02:ba:fb:39:c8:3a:f4:ac:
ed:73:e5:73:9a:35:45:10:26:b6:09:49:52:ec:29:
2a:ab:e8:cc:d4:df:6a:2a:d2:e3:56:61:76:69:26:
b9:1a:0c:b9:b2:36:06:12:d3:40:d6:72:11:61:f7:
ec:59:7e:dc:5b:9a:3d:0e:da:14:8e:40:da:68:37:
a7:43:08:3f:d3:eb:7b:f2:7d:90:98:a4:c2:23:9a:
a7:b1:d0:49:50:29:83:90:15:25:11:7d:20:90:72:
42:cf:cf:38:3d:76:a3:49:39:c1:f2:72:aa:39:ba:
f3:cb:53:ed:ca:28:b3:74:6e:25:78:d6:02:e6:64:
d8:24:92:82:34:f2:38:74:78:28:91:cf:f0:91:a7:
d4:57:35:89:99:b8:83:e0:ed:a6:aa:64:30:18:36:
25:ac:36:65:dd:e4:ad:99:18:a0:fa:65:cb:81:a4:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a720::/32
Signature Algorithm: sha256WithRSAEncryption
6d:6b:5c:c0:77:a9:b3:6a:b4:70:8e:94:0f:26:9e:4a:ff:ba:
14:e6:34:0c:31:35:d0:7d:09:c6:2a:23:16:0f:e5:95:86:d8:
4d:a9:53:0f:09:e6:bd:43:0c:75:98:13:06:61:87:9c:6c:94:
b7:6c:e2:c7:8d:41:61:5c:3b:63:4c:e0:81:71:91:75:3c:d1:
d6:ec:c8:a1:81:b7:ca:fd:99:6a:fc:fd:77:87:0b:ee:9c:f8:
85:e8:5c:53:27:fb:57:d5:60:e5:fd:62:36:f3:2b:6e:73:02:
3e:59:9e:36:38:03:cb:da:ec:87:4c:27:e1:e6:4b:77:e8:92:
f8:90:32:b2:9b:3f:ad:9e:02:61:2d:7b:65:c3:ca:44:9f:71:
d0:f4:1f:41:c2:bb:dc:2c:80:95:7b:67:bf:88:02:b2:45:8b:
c4:a8:d2:69:6e:b3:cd:d0:5b:d6:cf:72:d3:79:89:d1:e0:22:
ea:c1:70:e5:54:d5:01:7c:3d:e6:f1:cf:ed:7c:10:be:42:4f:
8d:4f:64:5b:c0:0d:42:be:17:80:ee:1a:81:83:90:f2:90:c8:
f0:40:eb:82:74:90:41:29:ca:01:ec:a2:00:68:a0:a3:50:8e:
5e:ce:58:65:6d:2a:0a:f2:3c:63:8b:a0:cd:94:8a:80:de:e8:
6e:67:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:35 2025 by rpki-client