Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GNOMXLFLfmfU5pKTTsqs4rwzZes.cer
File: GNOMXLFLfmfU5pKTTsqs4rwzZes.cer (raw, json)
Hash identifier: dPvPFgtSTB1lD2MjsrCa2+cdjzW/jpboK4rK+80++qg=
Subject key identifier: 18:D3:8C:5C:B1:4B:7E:67:D4:E6:92:93:4E:CA:AC:E2:BC:33:65:EB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E36F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1230/GNOMXLFLfmfU5pKTTsqs4rwzZes.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1230/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:14:35 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: IP: 103.60.228.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58223 (0xe36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:14:35 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=18D38C5CB14B7E67D4E692934ECAACE2BC3365EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:68:a4:2e:9a:55:2e:9e:e7:98:72:ec:ca:
4e:9a:d1:5f:18:55:ff:24:39:74:55:8d:96:da:82:
1e:42:c0:f0:ee:13:7f:da:45:14:76:d1:13:89:d0:
ee:b8:10:0a:00:dd:86:47:ca:60:e9:be:0b:b0:c1:
e3:43:09:a0:f3:e0:75:a8:b1:7f:07:5f:4b:e9:33:
75:f1:a5:c9:05:09:a9:77:4b:8b:d3:93:72:6d:33:
b6:44:e0:19:de:db:5e:14:69:c6:cb:6f:6f:17:40:
da:3a:e7:58:3c:4e:cd:cb:80:d4:45:d1:70:97:29:
e0:4a:3c:f6:fd:35:89:18:20:d7:a6:9f:5d:46:64:
95:01:4b:73:03:1f:21:cf:fa:e2:d3:ff:e6:8d:3a:
79:fa:c0:24:fc:7c:35:4c:cd:5c:07:0b:9d:56:a5:
14:4f:61:15:cc:98:7b:0e:49:65:1a:bb:70:3f:a1:
28:0c:78:d6:3b:3d:61:98:31:34:84:b0:3e:bd:fe:
83:80:7d:de:f8:74:d9:f1:b1:94:1a:a2:c0:7e:2b:
79:99:7e:0d:54:c2:61:1a:c7:ac:28:57:75:6b:7f:
dd:b0:d1:b5:4c:5a:a3:4a:d5:dd:92:19:21:71:79:
1e:c7:82:96:bb:48:fd:b1:93:69:94:8d:94:d3:83:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:8C:5C:B1:4B:7E:67:D4:E6:92:93:4E:CA:AC:E2:BC:33:65:EB
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1230/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1230/GNOMXLFLfmfU5pKTTsqs4rwzZes.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9f:c9:b1:90:5f:04:10:39:87:a7:ec:5d:b5:31:ce:81:f2:
64:cf:d5:a2:ed:03:38:fe:10:89:9f:5d:29:fd:cc:7d:0c:87:
7c:3f:95:8d:7a:68:4f:1d:f6:d4:96:f9:66:e4:19:12:41:18:
2c:2d:a6:8e:1c:49:dc:68:7a:a6:74:d9:3f:b7:74:9e:69:63:
dc:b2:ee:db:ca:42:d0:c7:11:3f:b9:1d:43:94:0a:19:4f:5f:
48:9c:a8:53:f2:ac:c1:54:15:43:99:65:5d:9c:15:a5:d7:6a:
a4:d0:24:5c:1d:1f:94:80:63:c6:85:af:1a:e7:b3:67:6a:cb:
1c:92:e2:89:74:4e:f1:f1:1e:45:a5:e7:dd:e9:f9:16:6a:89:
f7:4b:51:74:8f:11:9a:ad:33:1b:68:99:c9:e6:e7:69:fe:fc:
84:1f:3e:0b:a2:6d:d1:6f:be:24:16:32:78:b0:5c:f0:2a:0f:
07:f8:e1:7a:db:f2:30:63:06:3f:3f:e6:fb:89:1a:18:a6:21:
c5:74:fe:99:0a:aa:53:3d:81:d1:ce:75:a3:4f:f4:ee:ab:a2:
e6:32:f2:82:d4:3c:dc:e1:b4:51:89:75:af:36:70:a4:ee:88:
79:73:7c:b4:5f:85:53:93:2c:77:23:ed:f4:20:9e:5b:b3:db:
5a:1c:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:51:34 2025 by rpki-client