Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vvTp5jo1op9jC_eGDbiJiDoRIgc.cer
File: vvTp5jo1op9jC_eGDbiJiDoRIgc.cer (raw, json)
Hash identifier: 8Q90XudVWPrju8JYKTBs7tdjeKXeG607fg7YMoIatK4=
Subject key identifier: BE:F4:E9:E6:3A:35:A2:9F:63:0B:F7:86:0D:B8:89:88:3A:11:22:07
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/vvTp5jo1op9jC_eGDbiJiDoRIgc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:27:43 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 2401:9260::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52155 (0xcbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:27:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BEF4E9E63A35A29F630BF7860DB889883A112207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:1a:bb:87:35:ae:00:31:cf:bd:39:e0:1f:
2e:b6:a2:ab:f4:3f:e4:e9:88:43:d2:4e:3d:7d:44:
0d:6c:e8:9f:af:4e:57:b1:70:f5:bd:05:e7:71:01:
28:2e:0b:a8:74:3b:11:9b:1f:d5:25:5e:5f:bc:04:
86:74:da:2d:44:aa:a7:6a:42:a3:32:d1:81:2d:59:
5b:e0:99:85:e1:41:8c:07:78:9c:ca:50:32:d6:6a:
93:1a:a6:97:d3:cb:76:9f:3e:4f:ab:c3:be:1e:33:
0f:33:de:a5:ef:fb:88:55:4b:68:02:7c:e1:56:92:
f2:e3:34:f4:d1:15:69:8b:3b:4a:d6:0b:8b:0e:3c:
e3:cb:a5:ae:38:f8:b1:e2:7d:84:8b:79:91:ae:8a:
6e:10:59:a4:f0:9c:50:f0:2c:26:8e:d8:1a:cf:08:
27:55:37:0b:b5:bd:ee:14:49:9b:c7:52:49:58:85:
96:45:09:15:dc:46:9c:11:40:5a:e3:53:7a:cb:a9:
07:26:f2:1c:91:72:aa:5b:9c:25:9d:16:74:e2:74:
12:60:e7:f8:bd:5a:8f:9e:e4:16:6f:df:95:08:26:
ab:dc:67:ec:d5:19:4d:4a:97:0d:f7:c6:12:37:98:
69:2a:36:fe:b6:65:d0:ae:6c:ce:1e:fb:5b:c1:12:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:E9:E6:3A:35:A2:9F:63:0B:F7:86:0D:B8:89:88:3A:11:22:07
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/vvTp5jo1op9jC_eGDbiJiDoRIgc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:9260::/32
Signature Algorithm: sha256WithRSAEncryption
6f:71:6d:8d:65:3f:3b:31:57:f1:cd:3c:36:29:47:66:da:7a:
42:c7:a5:e4:04:ec:ef:ac:c7:40:d3:ac:a2:ef:41:55:25:41:
34:34:e3:2e:61:42:c8:5b:21:ad:44:89:c8:c7:7b:e9:00:b0:
23:ef:fd:ba:1a:2d:c5:4e:4b:66:f1:2c:46:43:36:7a:56:df:
26:ce:c9:29:90:5b:95:ad:02:7e:5c:22:f7:67:35:9a:9f:00:
a8:a2:c9:30:2c:67:ac:ea:ce:22:bd:e3:7f:ad:c8:b3:b9:77:
39:63:ea:d1:f0:0b:1d:33:b0:50:0f:9c:c3:91:62:04:68:2f:
65:39:61:b0:f3:c2:f8:53:84:3a:16:a7:1a:8c:6b:64:ee:88:
35:11:cc:03:ff:09:bf:fd:ed:80:ee:a5:ff:2a:cf:f3:50:dc:
58:12:de:96:88:70:41:e4:fe:4f:9f:8a:f4:79:e4:f3:f4:8b:
8d:6d:64:4a:f8:1a:1e:3e:85:78:9e:3f:56:6d:86:c3:72:a4:
56:c7:39:42:aa:c3:63:2e:5a:06:1b:d3:85:b6:91:d2:a9:66:
39:ac:5a:2f:2d:b6:a5:3a:a0:d5:f5:44:9c:7b:f7:aa:c0:95:
8d:b9:a8:a6:68:87:f6:64:69:29:8c:0b:a6:b5:d6:26:f5:cd:
0f:1c:8f:0a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDAMu7MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMzI3NDNaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKEJFRjRFOUU2M0EzNUEyOUY2MzBCRjc4NjBEQjg4OTg4M0ExMTIy
MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGBq7hzWuADHPvTng
Hy62oqv0P+TpiEPSTj19RA1s6J+vTlexcPW9BedxASguC6h0OxGbH9UlXl+8BIZ0
2i1EqqdqQqMy0YEtWVvgmYXhQYwHeJzKUDLWapMappfTy3afPk+rw74eMw8z3qXv
+4hVS2gCfOFWkvLjNPTRFWmLO0rWC4sOPOPLpa44+LHifYSLeZGuim4QWaTwnFDw
LCaO2BrPCCdVNwu1ve4USZvHUklYhZZFCRXcRpwRQFrjU3rLqQcm8hyRcqpbnCWd
FnTidBJg5/i9Wo+e5BZv35UIJqvcZ+zVGU1Klw33xhI3mGkqNv62ZdCubM4e+1vB
ElwJAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUvvTp5jo1op9jC/eGDbiJiDoRIgcw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy
NzYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzI3Ni92dlRwNWpvMW9wOWpDX2VHRGJpSmlEb1JJZ2MubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGSYDANBgkqhkiG9w0BAQsF
AAOCAQEAb3FtjWU/OzFX8c08NilHZtp6Qsel5ATs76zHQNOsou9BVSVBNDTjLmFC
yFshrUSJyMd76QCwI+/9uhotxU5LZvEsRkM2elbfJs7JKZBbla0Cflwi92c1mp8A
qKLJMCxnrOrOIr3jf63Is7l3OWPq0fALHTOwUA+cw5FiBGgvZTlhsPPC+FOEOhan
GoxrZO6INRHMA/8Jv/3tgO6l/yrP81DcWBLelohwQeT+T5+K9Hnk8/SLjW1kSvga
Hj6FeJ4/Vm2Gw3KkVsc5QqrDYy5aBhvThbaR0qlmOaxaLy22pTqg1fVEnHv3qsCV
jbmopmiH9mRpKYwLprXWJvXNDxyPCg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:38 2025 by rpki-client