Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/htsNiHRv_AgU5YmhOSQPL3QtDFY.cer
File:                     htsNiHRv_AgU5YmhOSQPL3QtDFY.cer (raw, json)
Hash identifier:          wrggibzoGk33ylxPAaXbrPhEQey6sSRxKI6NdqBGmQk=
Subject key identifier:   86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       EAFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sat 07 Feb 2026 19:57:17 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 63566
                          IP: 27.112.0.0/18
                          IP: 103.252.204.0 -- 103.252.211.255
                          IP: 103.252.232.0/22
                          IP: 103.252.248.0/22
                          IP: 118.194.0.0/17
                          IP: 122.11.0.0/17
                          IP: 2402:1f80::/32
                          IP: 2403:4c80::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60155 (0xeafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb  7 19:57:17 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=86DB0D88746FFC0814E589A139240F2F742D0C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:e5:be:75:77:ed:02:0f:bf:d6:64:d8:9b:
                    dd:cf:2c:62:07:3e:de:14:39:27:5a:dd:b2:5b:24:
                    e5:52:4c:5f:ce:6f:19:ed:59:f7:bc:a0:ae:77:0f:
                    79:df:00:e1:22:48:69:ff:89:9a:95:31:9e:8b:c7:
                    fc:da:9b:b1:bf:bd:a0:80:3f:59:56:a5:51:fe:37:
                    d2:d7:a2:04:2f:ed:6a:5f:f3:38:eb:96:ce:c2:95:
                    0a:73:c0:65:86:a2:8d:7b:71:89:8b:33:42:7b:db:
                    e1:30:40:e4:b1:2b:11:50:be:4d:38:73:40:1a:17:
                    21:e0:09:2d:4a:85:11:d0:2f:51:1e:76:11:a5:8b:
                    48:f3:9a:b5:f0:9f:54:58:74:57:4c:fe:4d:ea:41:
                    d5:df:f1:27:f6:b7:88:5b:99:e6:98:01:a3:aa:4d:
                    f3:b7:a5:1d:a8:8d:00:b7:c3:d2:9b:24:36:6d:11:
                    89:f3:f9:93:05:34:55:11:52:0e:28:50:22:cc:18:
                    3a:9b:ad:02:af:c3:fd:f3:cc:99:f2:df:14:f7:76:
                    08:50:d2:ba:71:7a:d0:44:c2:8a:89:f3:fc:b5:4e:
                    4e:df:12:ce:17:fa:8f:99:58:ce:1e:4b:4e:8c:4f:
                    37:30:b2:06:0a:fc:92:f5:9a:3e:b3:31:32:54:b8:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DB:0D:88:74:6F:FC:08:14:E5:89:A1:39:24:0F:2F:74:2D:0C:56
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/htsNiHRv_AgU5YmhOSQPL3QtDFY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63566

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.0.0/18
                  103.252.204.0-103.252.211.255
                  103.252.232.0/22
                  103.252.248.0/22
                  118.194.0.0/17
                  122.11.0.0/17
                IPv6:
                  2402:1f80::/32
                  2403:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:fc:12:46:22:6e:db:d8:ba:e6:e1:c5:6f:7f:ff:94:1f:0e:
         a1:7f:60:3a:c1:c7:cc:7c:63:31:46:fb:47:32:3a:f2:33:2b:
         41:c9:5a:86:44:0c:1d:20:a7:10:5e:67:dd:85:c7:70:4c:8c:
         6d:1c:01:98:5a:d1:c8:34:cc:df:17:49:66:2e:18:3e:d7:69:
         c1:39:fa:9c:e7:c7:ad:09:6c:7d:a8:30:06:ae:d7:ab:61:6d:
         12:f9:2a:64:32:d0:6e:ff:4a:c0:9c:60:40:ed:a9:75:d3:e0:
         2a:3f:d9:ba:59:30:11:ff:c9:65:f1:9b:f3:12:18:e5:45:26:
         ed:84:d5:5d:f5:9f:8e:67:1a:a8:6c:0c:6f:4c:78:21:ba:e9:
         ec:59:22:d2:8f:55:66:59:85:25:1a:9e:41:51:3a:e5:64:20:
         94:32:a4:4b:6a:83:a2:5c:69:af:82:2f:2e:2d:50:c5:c8:07:
         22:13:9c:67:dc:13:ec:9e:94:50:df:e4:35:64:0d:dd:95:54:
         a6:2c:8b:21:48:4f:bf:84:42:41:40:6f:5d:c4:0b:b0:61:fd:
         3b:e2:16:ca:db:ff:25:88:9a:2a:83:1f:5b:56:f2:2d:d2:27:
         9f:51:2b:d2:25:18:7e:36:e4:22:31:5d:60:4f:58:22:5b:34:
         8a:f6:ea:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:42:51 2026 by rpki-client