Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
File: LznWwjiJNFGgbrNMUtd6vBiQa-A.cer (raw, json)
Hash identifier: 6L8vtXa14Xlhi11GFKFWpUEnzKLRgYrsaw1swJEOwDY=
Subject key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CEB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:15:52 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 139091
IP: 103.1.24.0/22
IP: 103.140.14.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52913 (0xceb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:15:52 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:c9:56:8f:b1:0a:f8:a9:7b:76:6a:3e:fe:
b8:ee:dc:51:0a:30:33:73:80:b0:23:12:38:fc:dc:
1c:57:d6:d5:c9:0b:a9:c8:96:e3:a7:72:5f:e4:5d:
4b:31:5e:fd:5c:8e:6c:cb:06:23:ba:3a:63:95:c6:
4a:f6:f3:92:4a:72:ad:96:6f:16:a4:64:0e:65:06:
d0:ec:52:94:f1:53:3c:d1:78:dd:18:86:2e:de:c7:
e9:83:b1:95:4b:6d:98:e6:77:c9:f1:b3:4a:98:68:
78:63:cc:85:ee:45:e5:64:d1:d3:c1:47:07:e0:0c:
d0:6f:5c:04:eb:6d:e7:06:9d:73:45:c1:b7:dd:29:
6b:04:a7:4a:29:78:30:75:f4:19:08:03:47:3b:2e:
0e:71:e1:39:79:cb:8a:26:b9:24:a7:a4:73:b2:6b:
d1:f7:e8:8f:68:75:6c:7b:b0:5b:a9:10:a0:37:89:
44:63:ab:59:3e:c1:67:7f:0b:68:27:d1:28:f5:74:
1a:38:df:5c:49:76:98:58:cd:cd:6d:49:5b:e1:f7:
f1:f0:ca:22:d4:fe:97:ee:86:b5:21:af:cd:34:e8:
cd:1d:b6:2f:ad:0b:35:1f:f2:df:38:42:e3:14:90:
b0:49:65:3a:d2:62:62:50:e7:62:ef:8c:53:d3:b4:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139091
sbgp-ipAddrBlock: critical
IPv4:
103.1.24.0/22
103.140.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:9d:4c:f1:ef:61:e2:83:13:ac:9e:f0:5a:42:70:4f:57:a2:
b5:3f:95:00:d6:25:00:f9:f9:f3:10:bc:4e:f7:05:98:b8:ba:
5e:aa:d8:83:23:db:30:2f:fd:b0:14:6b:08:48:4d:5c:f1:64:
ed:f4:c4:86:55:94:c0:ec:d9:06:a4:32:0a:c2:20:bf:57:43:
85:20:66:3d:84:a9:4f:b0:72:b3:4f:ef:d1:2b:e0:90:02:c0:
8b:8e:ee:95:c5:9e:19:8f:2d:c0:ce:bd:5b:b3:07:cb:bd:e9:
69:92:78:b6:95:1d:80:87:ef:b2:eb:dc:86:06:a6:53:16:ce:
51:1c:fc:c3:e9:8d:49:da:f1:57:58:94:6a:77:9e:d4:18:f5:
b3:a0:35:e5:4e:4f:95:d5:d8:3d:6d:0f:89:39:85:a4:07:40:
ae:c3:01:fb:dc:64:0d:ca:b1:89:e7:7c:94:fc:b2:f5:7c:b5:
c8:4b:7d:5c:d0:29:87:09:d1:18:0f:9b:04:51:f2:d2:7e:9a:
60:ad:c8:f5:bb:bf:da:16:75:8d:01:ca:47:f2:d8:fb:61:c2:
8d:47:96:57:1e:7b:a8:1d:e9:20:bd:e4:ad:0d:fb:9c:ea:eb:
ff:5c:f6:a4:ee:58:3d:f0:af:5e:bc:50:2b:8a:10:53:17:cb:
23:96:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:21:36 2025 by rpki-client