Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OCdChXYoqbKyIFmuiEdvIwYL6tA.cer
File: OCdChXYoqbKyIFmuiEdvIwYL6tA.cer (raw, json)
Hash identifier: JjIieZdkiBvIjBW6Fvkj05c9Uj3qnpyttHTikAKjqD0=
Subject key identifier: 38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3CB7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:11:51 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 160.250.16.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15543 (0x3cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Apr 3 08:11:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=382742857628A9B2B22059AE88476F23060BEAD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:66:59:6b:e1:83:53:be:01:5f:a6:53:11:c4:
b8:19:96:5d:50:19:2f:f7:4f:7b:61:dc:c7:6d:5c:
1d:40:4e:da:57:07:6b:64:a1:e2:d9:7f:29:ec:20:
2d:cf:02:00:8b:10:ea:1e:1c:3e:0f:70:5b:b7:ae:
50:37:32:cf:27:b1:16:42:46:a4:69:06:9c:fa:68:
70:69:e3:30:06:6c:d9:b9:d1:27:73:54:b9:9a:01:
d6:07:09:87:ec:11:f7:66:8b:98:c6:eb:d2:ee:90:
73:c3:c7:ed:2d:c8:61:00:f3:d6:54:7a:1a:4d:26:
51:d1:59:cc:58:48:e9:4c:50:aa:63:29:21:74:cf:
04:7c:16:17:19:39:02:5b:e6:50:34:26:ae:67:cc:
e0:42:55:fa:95:ce:bf:f6:5d:b8:c9:ab:2c:21:8f:
5f:86:2b:36:66:27:69:e8:2d:4f:3e:49:0c:ed:c5:
2d:16:d8:0f:bb:d6:b5:b6:72:cf:b0:9d:0c:e4:45:
d5:d5:13:3c:47:57:9c:f7:ec:ed:ea:08:18:d4:63:
60:49:90:73:4b:52:a0:e5:21:32:fe:90:71:b4:f5:
32:37:7a:c7:87:33:aa:61:6b:98:b4:74:0b:9d:24:
2d:bf:71:66:9e:56:94:37:9a:ec:90:c8:ec:ce:44:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:27:42:85:76:28:A9:B2:B2:20:59:AE:88:47:6F:23:06:0B:EA:D0
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3328/OCdChXYoqbKyIFmuiEdvIwYL6tA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.16.0/23
Signature Algorithm: sha256WithRSAEncryption
76:2a:bc:b6:ff:53:87:ed:26:b9:59:d2:62:44:40:bc:3f:d6:
52:37:5e:e9:62:ad:9d:71:9e:81:ba:f2:58:5c:77:35:d8:c7:
28:7a:e6:5b:c4:11:3d:41:b8:fa:ee:56:fb:03:8b:1e:41:34:
69:4e:b0:11:2b:9e:56:87:90:34:f6:95:0f:c3:ba:75:28:0f:
bf:b3:21:ff:f9:ad:f7:8f:e4:b3:18:aa:df:40:0f:f5:8d:c5:
f0:12:a2:71:46:95:d6:ef:bd:05:bb:27:1b:f8:64:3c:f6:c5:
b0:30:f7:ff:ff:47:d1:c6:aa:d3:0a:87:54:4b:60:69:6b:b8:
38:0f:aa:6c:ae:da:75:b9:1b:86:28:de:56:35:a0:72:f5:23:
06:9c:b7:18:54:a1:cf:7c:61:67:92:2c:36:77:30:39:95:4e:
06:c5:e5:ea:64:be:f6:a6:52:31:36:b2:bc:84:62:be:ae:b7:
d0:8f:46:da:71:34:c7:6e:a8:13:80:34:0f:00:29:bd:fc:f0:
78:4c:8b:bd:8f:0c:e4:04:02:78:18:e2:98:fe:e4:46:5c:e6:
5a:fd:4e:a5:e2:ac:c3:a6:5c:3e:f5:0b:a4:b8:c4:9d:b2:6f:
3c:a6:8d:ea:09:d8:08:8d:2f:fa:5a:e4:c4:92:c1:33:8f:8e:
4a:0b:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:34:53 2025 by rpki-client