Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer
File: v53ECbEbmTO6Vq39mHrqjUQseeY.cer (raw, json)
Hash identifier: KQrF3ksqLaVRAbiLMhuxLYD9mWfIEWtZ6ra/7zzlEZ0=
Subject key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CA43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:07:00 +0000
Certificate not after: Fri 06 Mar 2026 01:26:51 +0000
Subordinate resources: AS: 137760
IP: 163.223.28.0/23
IP: 2401:f3e0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51779 (0xca43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:07:00 2025 GMT
Not After : Mar 6 01:26:51 2026 GMT
Subject: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:55:e8:9c:cc:05:75:c8:d0:81:01:88:57:
30:f1:e4:9a:32:5b:3c:56:23:1c:c0:29:d5:69:d1:
7c:39:df:7a:9c:c9:97:9b:f8:39:71:93:38:8b:40:
74:fb:a8:57:4e:07:4d:7a:e5:f1:a9:f3:bd:d0:fb:
9a:d4:d7:05:e8:45:9c:ef:00:00:40:4e:77:97:df:
bf:30:fb:4e:6a:3e:ec:ce:00:c4:3a:8b:c9:06:8d:
b4:fd:10:cb:e7:6a:3b:4c:14:d4:8d:6b:62:16:e0:
1b:c1:a6:4a:2e:e4:2b:fb:41:c4:b1:bd:60:d3:5b:
d1:e0:c8:4c:b8:d9:14:97:26:48:f7:fa:a1:ed:f8:
61:15:c1:18:bd:0f:62:35:f5:1c:ad:af:b7:d7:d8:
5b:1a:2f:4b:78:82:f9:46:87:79:f7:d4:5a:69:d4:
f6:f4:b5:3b:c5:45:40:d5:39:4d:f8:af:18:33:5f:
77:d9:55:b5:96:ca:65:c0:89:e4:56:88:22:32:8a:
11:99:ed:93:cf:fc:0a:05:75:78:f6:0b:b7:87:74:
28:5c:5a:f6:61:1c:1e:83:44:9f:25:f2:11:a4:e0:
6b:01:1b:b2:a7:1f:ce:ad:1a:97:84:90:e3:22:5d:
a0:9c:91:ab:54:df:8c:30:b9:c0:32:6a:98:65:7c:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137760
sbgp-ipAddrBlock: critical
IPv4:
163.223.28.0/23
IPv6:
2401:f3e0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:a6:3d:c2:b3:e9:42:29:5f:16:93:e2:d8:ad:31:cb:27:b5:
b6:a6:5f:72:47:d0:e4:ea:56:7d:21:0e:1e:ff:82:6f:f7:d8:
12:46:46:5b:56:5d:a8:da:5e:61:96:85:f9:c3:8e:0a:e8:0b:
0c:b2:ce:6a:f2:c7:92:5d:01:e0:dd:a4:6c:7c:22:fa:40:dc:
4d:5b:86:64:e5:e3:c6:40:28:63:94:0c:8b:da:1b:23:83:a9:
7b:9b:6a:a7:9a:72:f2:c6:8f:20:56:b9:50:7c:3c:8f:98:42:
77:30:81:3e:14:a5:29:82:20:e0:52:91:16:87:d8:2c:c1:53:
c7:61:e4:f6:d7:12:06:36:3f:b6:d7:67:c3:5d:cc:c9:d5:6a:
d5:da:a3:d1:2e:95:db:d4:74:f4:aa:00:a2:b1:77:c0:6a:d1:
45:64:ff:d9:75:26:e1:44:e9:a4:2d:ef:a6:b3:f3:42:43:ed:
e4:4a:56:2c:5a:01:29:fb:82:21:32:a8:87:f3:ac:29:9c:b0:
d1:9f:57:0b:19:b8:dc:b2:8b:be:e6:9e:8e:51:b4:bc:16:11:
4d:67:c0:26:87:85:a0:13:b6:8f:eb:f4:bb:10:5b:60:a1:cd:
27:2b:b4:1b:fa:2a:6c:85:7e:99:3b:99:19:71:bb:d1:26:7b:
41:a7:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:51 2025 by rpki-client