Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer
File: O3WyLEecFpumBZHB3tRCDFNoHbo.cer (raw, json)
Hash identifier: 2knqXOSi2djL2ZY6WfABOsf3Xyv9r79+9vinaEbLfQA=
Subject key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DD0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 09 Sep 2025 19:32:47 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 58993
IP: 27.0.160.0/22
IP: 43.228.116.0/22
IP: 43.243.12.0/22
IP: 43.254.88.0/22
IP: 103.82.224.0/22
IP: 103.208.12.0/22
IP: 103.233.52.0/22
IP: 103.238.132.0/22
IP: 182.50.112.0/20
IP: 223.223.192.0/20
IP: 2404:1c80::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56586 (0xdd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 9 19:32:47 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3B75B22C479C169BA60591C1DED4420C53681DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:10:28:dd:a3:cf:eb:82:0e:9b:67:b4:13:
b8:c0:28:36:7f:44:ad:a3:24:3f:ca:76:0a:83:e2:
2a:3d:c2:2e:5b:cc:d6:88:7b:19:15:2e:d8:7b:b5:
de:6b:a0:d4:42:95:b2:76:8c:6c:c7:ac:6f:7c:d8:
e6:9a:fc:a2:0c:46:75:88:33:8a:dd:52:e6:9b:bc:
65:42:92:78:df:e3:38:aa:89:c5:da:27:2f:20:fb:
9d:33:10:bb:27:bc:4e:bb:62:fb:e5:7c:d0:f2:b6:
80:e1:9b:56:ec:32:7a:99:7e:91:e2:3d:29:69:40:
28:df:8a:e8:8c:e9:17:64:07:7a:8f:f6:39:8b:a8:
d4:92:9f:31:a6:bd:c3:a9:b0:ac:63:5a:e7:56:8e:
15:75:9b:eb:af:f8:de:01:0f:45:56:c5:b2:e6:5d:
cb:73:80:a0:c4:75:fa:05:15:49:dd:be:13:67:9e:
5f:ef:07:47:b7:d9:e4:a0:e4:27:b3:c6:34:e2:58:
55:60:57:dd:29:a5:68:a7:5c:ee:99:cc:77:0a:92:
91:65:d0:41:a9:22:8d:64:a7:b3:51:1a:1d:8b:46:
a8:f2:a0:9a:f4:05:a7:d2:a4:50:e6:c8:a3:c5:50:
15:2c:3a:8d:25:50:9d:b3:c8:5b:0b:2e:67:2c:43:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58993
sbgp-ipAddrBlock: critical
IPv4:
27.0.160.0/22
43.228.116.0/22
43.243.12.0/22
43.254.88.0/22
103.82.224.0/22
103.208.12.0/22
103.233.52.0/22
103.238.132.0/22
182.50.112.0/20
223.223.192.0/20
IPv6:
2404:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
a6:a4:ad:d3:7d:34:92:38:5b:42:2e:49:4b:ce:1a:99:5d:ab:
0a:36:5c:b3:15:32:d0:51:2b:bd:30:36:f5:11:e2:43:c4:2a:
27:61:4f:35:33:8e:4c:5f:8b:a6:17:8f:e1:c5:25:c8:83:bf:
14:39:25:b8:a4:0e:01:ad:d9:58:88:45:84:cd:8f:38:a5:ec:
28:34:9a:e3:5c:f5:da:2a:bc:b1:21:eb:4b:5d:d1:86:44:0a:
22:54:da:9b:70:bb:8f:1e:5f:fe:50:26:0c:9d:bd:e9:4d:08:
48:03:2f:f2:29:a4:52:3c:a1:b0:8c:52:0b:a6:5c:7b:2c:f7:
17:1c:0a:0c:98:9f:83:48:e9:51:2b:8b:3a:e5:5f:16:99:7d:
4e:a5:c9:97:01:eb:0d:6b:86:a2:de:32:65:70:e1:32:eb:00:
a8:e7:63:7b:bc:b0:3a:c1:c3:8f:49:ba:5a:a7:09:af:b0:cf:
55:41:95:50:59:b9:bf:1a:d9:9a:de:cd:9a:0b:16:58:cd:74:
3a:01:3c:53:25:f3:90:81:24:24:11:eb:c2:15:b3:ca:57:34:
06:75:85:c5:8d:bd:13:e8:1f:18:4f:68:3f:44:d1:55:5c:b7:
16:c1:2e:22:31:af:6a:26:c3:d1:e8:06:7c:e0:e6:8e:99:b4:
f8:22:90:b3
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDAN0KMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA5MDkxOTMyNDdaFw0yNjA4MDMwODQ0NDBaMDMx
MTAvBgNVBAMTKDNCNzVCMjJDNDc5QzE2OUJBNjA1OTFDMURFRDQ0MjBDNTM2ODFE
QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3khAo3aPP64IOm2e0
E7jAKDZ/RK2jJD/KdgqD4io9wi5bzNaIexkVLth7td5roNRClbJ2jGzHrG982Oaa
/KIMRnWIM4rdUuabvGVCknjf4ziqicXaJy8g+50zELsnvE67YvvlfNDytoDhm1bs
MnqZfpHiPSlpQCjfiuiM6RdkB3qP9jmLqNSSnzGmvcOpsKxjWudWjhV1m+uv+N4B
D0VWxbLmXctzgKDEdfoFFUndvhNnnl/vB0e32eSg5CezxjTiWFVgV90ppWinXO6Z
zHcKkpFl0EGpIo1kp7NRGh2LRqjyoJr0BafSpFDmyKPFUBUsOo0lUJ2zyFsLLmcs
Qw1xAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUO3WyLEecFpumBZHB3tRCDFNoHbow
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM4
OS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zODkvTzNXeUxFZWNGcHVtQlpIQjN0UkNERk5vSGJvLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5nEwZAYIKwYBBQUHAQcBAf8EVTBTMEIE
AgABMDwDBAIbAKADBAIr5HQDBAIr8wwDBAIr/lgDBAJnUuADBAJn0AwDBAJn6TQD
BAJn7oQDBAS2MnADBATf38AwDQQCAAIwBwMFACQEHIAwDQYJKoZIhvcNAQELBQAD
ggEBAKakrdN9NJI4W0IuSUvOGpldqwo2XLMVMtBRK70wNvUR4kPEKidhTzUzjkxf
i6YXj+HFJciDvxQ5JbikDgGt2ViIRYTNjzil7Cg0muNc9doqvLEh60td0YZECiJU
2ptwu48eX/5QJgydvelNCEgDL/IppFI8obCMUgumXHss9xccCgyYn4NI6VErizrl
XxaZfU6lyZcB6w1rhqLeMmVw4TLrAKjnY3u8sDrBw49JulqnCa+wz1VBlVBZub8a
2ZrezZoLFljNdDoBPFMl85CBJCQR68IVs8pXNAZ1hcWNvRPoHxhPaD9E0VVctxbB
LiIxr2omw9HoBnzg5o6ZtPgikLM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:57 2025 by rpki-client