Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer
File: SjSV_QtTU5dWd0kGZfAxxGksrbo.cer (raw, json)
Hash identifier: AtATY5B3zILDnGWkiwBx5njaLf1lgesP2O9Hc3uUlO4=
Subject key identifier: 4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:07:54 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 146788
IP: 103.2.188.0/23
IP: 2400:f860::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57745 (0xe191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:07:54 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=4A3495FD0B5353975677490665F031C4692CADBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:c1:61:5e:5d:a0:a6:14:33:b9:f4:1b:6e:
8b:d9:b7:d0:0f:15:a8:df:4a:e6:dd:9e:ef:ec:79:
8c:99:22:cd:07:75:e7:e8:ff:71:f4:b6:d3:04:17:
88:d9:77:58:d0:81:34:ea:40:49:d1:a3:39:01:0e:
c6:7a:14:b2:7b:87:18:bc:84:e0:f4:d2:5f:d1:2c:
09:fb:df:ab:ec:bd:ed:c0:8d:a6:01:d7:a2:ce:a7:
29:df:86:fc:3a:8a:cf:1c:5c:c9:dd:f9:40:74:e0:
0e:d6:b4:13:96:42:7b:3b:7c:ab:0d:07:7b:fa:91:
39:ba:64:3f:54:23:98:70:20:1a:bd:29:85:78:8d:
13:cf:a4:95:15:96:f9:04:39:3c:db:d4:aa:35:72:
82:c0:47:6b:d1:99:1c:89:ec:f7:91:0d:e7:d2:ed:
88:77:43:d1:b6:12:2f:af:c4:ed:76:bc:28:75:0b:
b0:71:34:17:48:f2:ac:64:4f:4f:d0:7e:00:4a:59:
34:89:e4:4b:49:f0:4b:3a:72:d6:d1:34:01:25:4a:
07:a8:8b:59:75:d7:41:b4:92:f4:7d:6e:d2:1f:85:
24:71:2c:30:90:65:11:be:0c:16:8e:7f:84:96:a1:
70:8c:42:da:dc:72:15:7b:cc:53:3d:1d:b7:8a:74:
74:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146788
sbgp-ipAddrBlock: critical
IPv4:
103.2.188.0/23
IPv6:
2400:f860::/32
Signature Algorithm: sha256WithRSAEncryption
71:d0:d8:75:9a:41:62:99:0e:5b:ae:ca:05:9a:8e:fb:bd:e3:
88:73:41:73:d5:b2:38:74:a9:48:d0:0d:cc:c5:cf:88:34:df:
8d:a7:ba:86:30:4a:0a:33:bc:71:f4:4a:b0:2f:6c:53:46:cc:
41:12:5b:bf:db:8d:f4:18:4a:8e:8f:da:c9:35:ea:b5:ea:33:
fd:53:2f:d6:e0:55:7b:d9:7e:9c:14:80:2b:48:e8:4b:12:dd:
90:a1:7c:49:59:4a:c5:68:72:e5:fa:dc:d1:ed:9f:be:3b:e6:
4a:05:67:c6:7a:f2:5e:65:ff:cb:18:a7:f0:1e:7e:e9:c8:28:
6d:53:0a:9a:c6:2c:f1:a7:04:5a:be:23:07:90:73:56:c9:a3:
b9:c9:b1:03:b2:14:4f:22:d5:2c:01:42:95:17:a0:40:fc:c4:
57:70:12:00:03:4e:0a:20:70:58:43:9a:6e:f8:de:f5:9a:d1:
8e:7b:b7:04:2a:ce:a3:18:38:33:0a:9b:9c:e7:1a:67:87:af:
28:5d:51:68:fb:46:7b:10:b1:fc:bf:41:29:2e:ea:5f:02:de:
e6:e4:e4:4c:64:02:42:d0:11:c1:da:bc:ef:2f:5f:cf:ff:c9:
34:3b:d5:d6:74:42:a7:fb:40:a0:ca:c4:a5:20:5a:43:cf:7f:
9f:67:7e:52
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIDAOGRMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA3NTRaFw0yNjEwMjMwMzAxMDNaMDMx
MTAvBgNVBAMTKDRBMzQ5NUZEMEI1MzUzOTc1Njc3NDkwNjY1RjAzMUM0NjkyQ0FE
QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS28FhXl2gphQzufQb
bovZt9APFajfSubdnu/seYyZIs0Hdefo/3H0ttMEF4jZd1jQgTTqQEnRozkBDsZ6
FLJ7hxi8hOD00l/RLAn736vsve3AjaYB16LOpynfhvw6is8cXMnd+UB04A7WtBOW
Qns7fKsNB3v6kTm6ZD9UI5hwIBq9KYV4jRPPpJUVlvkEOTzb1Ko1coLAR2vRmRyJ
7PeRDefS7Yh3Q9G2Ei+vxO12vCh1C7BxNBdI8qxkT0/QfgBKWTSJ5EtJ8Es6ctbR
NAElSgeoi1l110G0kvR9btIfhSRxLDCQZRG+DBaOf4SWoXCMQtrcchV7zFM9HbeK
dHSxAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUSjSV/QtTU5dWd0kGZfAxxGksrbow
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy
MTQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzIxNC9TalNWX1F0VFU1ZFdkMGtHWmZBeHhHa3NyYm8ubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwI9ZDAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWcCvDANBAIAAjAHAwUAJAD4YDANBgkqhkiG9w0BAQsFAAOCAQEA
cdDYdZpBYpkOW67KBZqO+73jiHNBc9WyOHSpSNANzMXPiDTfjae6hjBKCjO8cfRK
sC9sU0bMQRJbv9uN9BhKjo/ayTXqteoz/VMv1uBVe9l+nBSAK0joSxLdkKF8SVlK
xWhy5frc0e2fvjvmSgVnxnryXmX/yxin8B5+6cgobVMKmsYs8acEWr4jB5BzVsmj
ucmxA7IUTyLVLAFClRegQPzEV3ASAANOCiBwWEOabvje9ZrRjnu3BCrOoxg4Mwqb
nOcaZ4evKF1RaPtGexCx/L9BKS7qXwLe5uTkTGQCQtARwdq87y9fz//JNDvV1nRC
p/tAoMrEpSBaQ89/n2d+Ug==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:49:11 2025 by rpki-client