Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Iq75clj2o_y0l84acaepGCjcIzk.cer
File: Iq75clj2o_y0l84acaepGCjcIzk.cer (raw, json)
Hash identifier: RvhJKwGVsOX7bfae8EtOJ1lVS4xjFCJEh5CuQhCndSU=
Subject key identifier: 22:AE:F9:72:58:F6:A3:FC:B4:97:CE:1A:71:A7:A9:18:28:DC:23:39
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 4602
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/Iq75clj2o_y0l84acaepGCjcIzk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Feb 2026 04:18:55 +0000
Certificate not after: Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources: IP: 144.79.148.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17922 (0x4602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Feb 27 04:18:55 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=22AEF97258F6A3FCB497CE1A71A7A91828DC2339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:f3:a6:24:3c:75:df:6f:bf:fd:43:75:4a:
90:1b:86:12:b5:ba:c4:97:75:06:6c:2a:73:d9:2d:
ba:45:18:5f:75:29:2a:f3:61:2f:f9:af:41:f0:c9:
1f:c7:ec:2e:5b:ea:42:27:e0:63:06:be:b3:86:5f:
5c:77:74:fe:07:9d:f9:64:24:1f:51:b5:4a:4b:81:
8d:6e:e6:90:ae:27:a1:87:e7:9e:6f:b1:15:cd:4f:
5b:32:c1:61:0f:b8:de:8e:2a:e5:2f:a3:e6:e3:e8:
99:97:17:95:56:73:a4:68:91:5e:48:b2:fc:be:46:
61:ea:95:50:64:f8:ae:97:bc:67:c5:47:37:af:d4:
51:2a:73:e7:49:e0:2b:98:d7:02:7f:28:ac:29:d6:
53:fd:c9:d5:ff:d6:ff:39:e5:6b:dd:4c:3d:4b:4a:
89:94:2b:d5:24:75:d6:3e:0d:9e:15:09:a8:02:be:
ab:1f:04:73:ca:27:69:84:a9:30:3f:eb:86:d7:14:
0e:8a:06:ec:47:ec:66:31:f3:86:85:03:ad:37:62:
80:99:67:6c:18:7c:a7:36:83:a9:e1:ea:aa:e5:ce:
00:d6:b6:67:d7:06:c8:36:77:03:b1:75:5c:b2:78:
b6:de:34:d4:91:bd:0f:ec:15:35:0c:fb:e3:2a:80:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:F9:72:58:F6:A3:FC:B4:97:CE:1A:71:A7:A9:18:28:DC:23:39
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/Iq75clj2o_y0l84acaepGCjcIzk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.148.0/23
Signature Algorithm: sha256WithRSAEncryption
70:9d:1f:f6:df:9b:3d:ec:d6:af:e4:04:ab:b8:cc:c2:88:3f:
4b:bd:02:5d:c4:e0:31:0f:3b:aa:b5:d1:be:1a:37:07:1f:4f:
cb:85:d1:1c:56:a2:08:82:ed:61:e5:99:4f:11:a0:5b:b3:dd:
f5:8b:c6:71:17:13:ee:c5:61:2f:f2:21:d3:5a:4b:b7:51:3c:
57:31:a6:51:e7:3a:68:b4:5d:b0:7f:97:2d:5e:37:93:cc:fb:
4e:85:c0:c6:8b:c8:1a:40:75:ee:16:ec:90:89:f6:08:37:98:
ad:6d:7d:33:35:2c:c3:11:05:5d:b8:18:af:cd:6f:91:3b:24:
ea:bb:b8:88:e6:b6:57:bb:24:93:ca:b1:dc:34:cd:67:0a:61:
b5:73:0b:4c:4b:05:5e:87:d8:2b:43:fc:52:48:cd:d4:de:d4:
dd:ba:37:e3:69:8c:27:31:aa:5c:81:76:ad:bc:f5:d2:a7:6d:
90:40:f6:6f:91:24:fb:90:05:63:d8:4b:10:9e:26:20:3a:f6:
10:5b:0f:a6:0e:aa:d4:5f:7d:ec:57:67:85:6e:b2:44:9e:a9:
35:b2:38:01:f6:c3:47:89:87:c8:81:d5:bb:bc:81:c3:5b:19:
49:50:24:d3:52:54:c7:a3:d2:3d:49:cd:5d:1a:e7:0c:d2:a6:
30:57:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:42 2026 by rpki-client