Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer
File: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer (raw, json)
Hash identifier: 8DTNFvU+CKkr0AQYsVne8bz5TNpqjjY5ae6AQkHv2GE=
Subject key identifier: CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3CC1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:13:00 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 160.250.18.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15553 (0x3cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Apr 3 08:13:00 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ec:9e:d0:a5:e8:89:a4:75:9a:77:bd:ae:17:
74:28:46:ff:5c:2c:70:c3:7c:49:7e:79:99:7d:59:
0f:27:4c:26:43:73:72:80:db:52:88:51:35:4f:2a:
27:a3:d4:57:f2:b2:b5:2b:3a:bd:ad:56:0d:12:f9:
25:3f:37:16:8a:ff:28:b3:a8:3c:64:82:7e:7b:f8:
0c:b7:0c:39:fb:e8:5f:19:49:89:9d:b5:f7:30:a3:
c3:71:3d:73:5b:30:fd:86:ec:ae:e3:06:85:87:91:
46:a1:11:65:75:26:4e:21:19:48:47:40:69:2a:32:
43:76:0b:60:75:7b:c5:9a:9e:38:bd:bc:eb:c2:8d:
40:b7:64:1d:c0:d6:a8:10:76:e8:ef:3b:1f:d7:6f:
64:d3:f6:67:61:bc:d9:7c:c7:7e:07:80:ad:db:f6:
16:4f:48:a5:25:6b:e2:7e:d7:8f:e3:88:aa:61:d6:
ef:e2:18:d2:2f:72:0b:aa:eb:23:7f:07:c8:81:19:
f0:44:1f:5a:3d:53:27:ba:eb:0a:03:69:b7:c7:5b:
18:cd:67:0b:9d:3e:72:e5:65:d4:ec:0b:70:1d:e2:
ef:2f:44:36:59:cb:b7:e0:59:2c:eb:d6:5c:34:c3:
d6:42:d9:c4:40:78:0d:db:aa:b1:98:b0:87:42:b5:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.18.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:3c:fc:cb:47:0d:1e:cc:bf:8a:da:8e:62:3f:3d:15:dd:2e:
e2:9a:51:76:13:79:9c:8d:cc:a9:b4:87:0e:17:d5:bd:44:e9:
8c:5d:3f:a2:4d:47:6e:6d:cc:d2:17:1e:06:57:6f:30:22:c5:
99:10:45:3c:97:6c:50:7b:ad:4d:86:39:46:64:67:11:c3:6e:
37:fc:7c:c9:a7:6f:1c:ca:18:9a:c7:26:3b:19:9e:a6:ca:4d:
f1:ad:f7:21:78:aa:95:bb:be:9b:ce:39:01:cf:15:84:7d:ef:
27:47:6e:21:81:34:5a:40:6c:67:9f:91:ee:a8:59:94:b2:5a:
56:91:41:f6:42:fd:b1:1b:6d:aa:0c:a8:cb:0e:db:69:f9:77:
d1:b5:db:18:ee:a0:39:dc:7b:37:99:f3:e6:e4:89:cc:d7:71:
35:50:6f:d3:ed:86:9e:0e:f9:8a:e7:14:1a:a1:b0:2f:9a:00:
3e:f1:57:93:75:cd:3a:9c:1c:80:da:cf:3a:0c:98:23:d7:1f:
b9:54:28:b8:c2:a7:fd:77:8a:12:8f:d2:f0:39:21:d1:1f:1c:
61:a2:25:40:61:e7:ea:50:4c:89:0e:53:64:2d:90:9b:17:92:
38:4f:51:21:2a:1f:db:45:a2:54:4b:dc:cd:03:fe:3e:61:f1:
07:72:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:41:59 2025 by rpki-client