Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer
File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer (raw, json)
Hash identifier: Vu9FiTFsWTfE9TKeZEm5r2Xmbtstz4tENIJTVSw1euk=
Subject key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D9DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 03 Aug 2025 09:17:33 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 137794
IP: 103.138.134.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55770 (0xd9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 3 09:17:33 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:c7:2c:71:18:21:d9:cd:64:88:56:7a:58:
a4:3b:f4:71:5b:87:47:d5:89:62:d7:29:3b:b9:61:
89:6e:4a:9e:20:4e:21:cd:c3:4c:e7:e6:2f:aa:ed:
b1:8f:a1:c8:30:45:4f:50:16:ba:2c:ed:d2:8f:7f:
12:b1:4d:11:49:78:42:b9:65:95:72:c7:44:33:30:
a2:e7:ee:cc:d2:f3:aa:b1:f6:db:1c:da:19:9e:98:
c9:66:d8:0d:e3:1b:bb:cf:71:7b:f8:50:54:10:3e:
6b:18:7b:e7:2d:e3:06:cf:06:e1:b8:c8:0b:85:ce:
d0:b9:42:60:d6:2e:08:e0:6d:1e:23:fe:2f:1c:e8:
53:87:2d:96:21:e5:8c:d9:3c:ce:48:28:bf:d3:f7:
25:f4:70:aa:ea:bd:b0:db:2f:74:23:dd:a5:d2:8d:
45:8d:00:b6:ce:ab:e4:3c:66:49:11:c5:35:3b:5e:
62:77:61:62:0d:6b:3f:79:aa:3b:18:0e:1e:04:c6:
c1:7d:8d:05:88:25:64:f4:98:eb:1f:ae:2e:63:f3:
84:1a:c3:58:f9:76:f8:04:b0:f8:43:47:45:8d:56:
bd:e6:cf:bf:ec:35:0e:b1:73:c1:72:8f:2b:be:7f:
01:ec:2a:25:ea:2b:47:e3:29:65:2d:a5:50:dd:16:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137794
sbgp-ipAddrBlock: critical
IPv4:
103.138.134.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:ff:94:f3:0a:9e:3a:c0:a3:ef:2a:49:4c:91:24:d4:f4:b2:
5b:8f:9a:c4:1d:fb:f4:4a:af:09:3e:66:7c:98:47:46:0b:bc:
16:ea:77:7c:b8:00:c6:65:e8:e6:14:3c:47:31:b2:9f:dc:a6:
bc:f6:56:d7:ad:bc:ef:8d:b3:38:8e:f4:b7:c6:eb:da:e7:34:
27:dd:10:1b:c5:33:a3:6c:4c:09:34:8d:c2:11:56:98:12:90:
cd:39:7f:da:ed:4c:12:5e:18:f6:60:50:c3:48:c5:ad:81:07:
3a:71:2b:26:ec:5a:a2:a8:60:0c:f3:97:f2:a7:27:44:23:1d:
99:28:bf:19:13:ea:e3:aa:90:a3:3b:94:bb:64:c6:62:5a:e2:
bd:fe:e8:d6:2f:70:24:c1:80:11:cf:fb:b6:fb:78:67:4d:f6:
7a:19:ed:24:c1:3e:ad:21:14:e2:4e:3a:51:f0:26:0e:78:7d:
83:67:30:2d:20:97:0a:d4:ee:a6:7f:0e:11:18:02:7a:d4:75:
74:ea:54:bc:64:68:92:67:1c:90:3c:ef:f4:eb:29:73:af:dc:
d1:ab:12:59:c9:e0:4d:b6:e0:5d:81:e8:f4:cc:d3:fe:39:c5:
e1:6c:0d:fa:28:38:07:43:68:21:a5:b8:bb:07:90:0f:05:f9:
85:40:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:14 2025 by rpki-client