Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
File: zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer (raw, json)
Hash identifier: 0YJVkR4kQlICVMq9WnKvkxqdaF17AFPktJF2NTFzM0k=
Subject key identifier: CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C812
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 02:57:42 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 59015
IP: 43.224.240.0/22
IP: 43.247.100.0/22
IP: 103.43.240.0/22
IP: 103.234.128.0/22
IP: 119.38.224.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51218 (0xc812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 02:57:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CC8CF726F2323299108744D6930BEF18D677445D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:11:4d:11:66:2a:57:0a:00:e3:10:ea:3e:
cc:8a:81:a2:47:43:52:a7:a0:d2:40:a1:ee:66:d1:
2c:b6:fc:5a:51:a5:1a:4f:f3:02:c3:7f:98:70:f2:
73:6c:31:14:9e:85:cf:f7:30:fa:2b:b1:a8:4f:b7:
de:c2:e0:28:8d:e3:31:0e:3e:46:51:55:76:e0:75:
11:70:5f:d6:39:78:f7:07:aa:09:f3:68:53:6d:63:
e7:74:85:51:af:bf:e3:4b:be:ce:37:af:9d:41:13:
16:e9:f3:28:bf:f8:f7:34:04:2f:d1:7f:99:aa:0c:
64:a3:ac:93:26:6b:46:5a:a8:bc:c3:eb:3c:a4:b8:
ef:d7:30:ad:d9:15:40:1a:f3:37:1f:09:f5:9b:3c:
22:f3:7d:b7:e4:d3:0e:c1:46:53:21:7a:b0:45:69:
5d:d2:6f:49:fd:cb:63:6a:6a:fb:cf:7a:14:d6:ff:
64:ac:36:aa:3d:05:2f:fb:2e:55:07:4d:39:8c:a4:
40:68:da:cd:84:9e:2f:fe:46:55:71:38:6e:44:00:
36:67:0f:5e:68:9a:dc:97:ed:48:8f:64:3f:85:bd:
bb:fe:5e:ac:9d:9e:9a:37:84:37:70:3e:ae:6f:dc:
fd:74:ff:e9:ce:73:b9:56:ba:89:c0:8e:f1:8f:0b:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59015
sbgp-ipAddrBlock: critical
IPv4:
43.224.240.0/22
43.247.100.0/22
103.43.240.0/22
103.234.128.0/22
119.38.224.0/19
Signature Algorithm: sha256WithRSAEncryption
17:42:68:d4:6b:9f:f6:06:b4:e9:0d:41:b0:eb:7a:1b:ec:8a:
22:42:39:40:80:3b:4a:3d:e0:63:98:da:4d:a2:21:ea:31:c1:
aa:f8:e4:b8:09:6d:6f:e6:4f:0a:36:b0:6a:9b:8d:d4:32:69:
47:11:d2:44:16:e6:17:5c:20:82:df:06:35:e5:cb:7b:f3:07:
5a:af:3c:45:db:a8:66:e8:62:59:b8:3f:c0:4e:41:a7:8b:a6:
b8:2b:88:7d:17:a2:02:49:5f:fc:29:2a:71:1a:ea:dd:ad:51:
25:49:60:50:22:1b:ae:6c:cf:9c:78:33:2a:d6:de:8d:ee:db:
84:ec:ba:4a:75:87:ab:d3:1f:ad:c1:4e:b8:40:18:b5:3b:50:
2f:43:61:ef:ff:5a:ac:eb:77:43:cc:7b:c9:60:09:67:6a:c7:
1c:68:12:f3:32:9a:e6:3e:d1:7f:6d:5d:da:cc:53:9c:a7:70:
29:69:28:2a:c8:05:c6:e2:cc:a7:cf:57:1b:b4:fe:27:25:3e:
6e:17:d7:fd:14:61:ad:4f:49:b4:60:9a:fb:10:64:b9:3f:f7:
71:5c:eb:fc:b7:c3:52:73:d2:ed:48:61:51:f4:3c:a0:3f:36:
51:3a:d3:ea:18:80:fb:46:ab:e2:b0:00:8b:35:62:67:ec:0c:
f6:6c:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:34 2025 by rpki-client