Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/pT5UsSYIO-poFXlysjQqCd94Fag.cer
File: pT5UsSYIO-poFXlysjQqCd94Fag.cer (raw, json)
Hash identifier: pbbvnjJrLD+fh7rVE6sRmKL4uzVsQ7bJkKhUR2hmMZo=
Subject key identifier: A5:3E:54:B1:26:08:3B:EA:68:15:79:72:B2:34:2A:09:DF:78:15:A8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DD38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 11 Sep 2025 19:32:55 +0000
Certificate not after: Mon 03 Aug 2026 08:44:40 +0000
Subordinate resources: AS: 24415
IP: 60.200.0.0/16
IP: 2403:6880::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56632 (0xdd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 11 19:32:55 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=A53E54B126083BEA68157972B2342A09DF7815A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:28:fe:6b:92:86:92:17:f6:01:09:d5:11:db:
22:72:b9:d0:6c:57:ad:87:c2:9e:2d:01:cf:ab:84:
15:b7:9d:18:0c:4b:8e:25:18:82:b4:e4:7f:a5:73:
82:25:11:67:7d:f3:bc:86:31:c9:3c:44:95:5d:f2:
b0:25:ac:c4:a0:8c:73:e2:6f:72:bd:ea:35:c7:20:
1f:1b:05:20:32:46:c8:54:74:f2:d3:ad:eb:31:3f:
16:49:f7:d7:e2:30:df:3d:a9:98:79:d0:b9:65:16:
d4:8a:90:ea:e4:aa:64:1a:d4:8e:c7:5f:bd:13:eb:
75:ab:0c:48:9a:49:83:0d:de:21:3f:7a:30:d4:0b:
e1:0a:94:53:65:cc:1e:23:8a:20:15:86:ba:ca:89:
d6:d7:61:37:e9:31:49:69:24:92:39:3b:ce:9f:ce:
e2:bc:68:40:63:ac:54:2d:32:c7:71:b5:3a:71:47:
df:31:da:7d:d8:21:7a:e7:b0:bd:eb:0a:15:e5:8d:
8c:d7:b6:a4:b7:e8:6e:db:0e:84:c1:1e:0a:60:97:
54:4c:fe:2b:4e:d8:ea:ba:0b:8f:88:60:9a:ba:d3:
45:08:f1:05:ec:3e:28:39:53:cf:0d:19:83:01:01:
d3:3a:e4:e6:87:10:e2:e6:09:b4:e9:8c:c0:39:8b:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:54:B1:26:08:3B:EA:68:15:79:72:B2:34:2A:09:DF:78:15:A8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/135/pT5UsSYIO-poFXlysjQqCd94Fag.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24415
sbgp-ipAddrBlock: critical
IPv4:
60.200.0.0/16
IPv6:
2403:6880::/32
Signature Algorithm: sha256WithRSAEncryption
3b:2f:78:8b:47:cd:16:3e:1c:32:e8:46:b4:38:ee:cb:97:60:
bc:c2:8f:69:9e:7b:c9:0b:2a:49:a3:20:22:f1:84:bf:73:94:
c2:4d:2c:52:6f:52:7d:59:10:af:c8:6d:c8:1e:69:69:90:f9:
c3:c8:6a:0a:81:8a:d6:e1:32:86:99:3e:95:cb:99:30:0c:4a:
bc:01:12:69:08:0e:99:9a:05:bf:cc:a3:d8:9d:29:ca:6a:c1:
e5:a1:21:37:99:7f:80:bf:72:b0:31:a5:bd:c0:fd:a6:b9:3e:
75:69:1e:73:11:a8:cd:a8:dd:3d:f4:e2:c8:30:18:2d:5e:af:
dc:a8:19:b0:d5:48:75:92:39:6c:76:f7:1d:c3:93:41:97:9f:
33:d3:05:4f:00:60:4e:8d:64:d7:a2:50:69:08:56:53:0c:3d:
3b:b6:5c:65:71:0d:ae:2f:18:9e:e5:85:ee:5e:47:6a:ac:c1:
36:0a:ce:30:60:bc:ec:b6:94:c4:ba:78:95:8e:06:b6:30:40:
c9:6d:4f:2a:df:c1:2a:ca:11:48:eb:3e:a8:f0:05:13:2f:8c:
3b:3e:6f:d4:77:68:e9:ee:42:f4:4a:4f:4e:2f:a9:b4:9b:69:
91:17:1c:1e:91:bc:15:cd:6b:6b:d7:f9:9f:a5:57:f0:26:be:
b8:65:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:34:47 2025 by rpki-client