Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer
File: qOvq1LE6eRhQyveRTqMND1A2w-c.cer (raw, json)
Hash identifier: ra4l7wXqn0pvTydEAMZjAzz7aA1OjhX15c3KVIefnAc=
Subject key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: DF6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 15 Oct 2025 07:38:21 +0000
Certificate not after: Thu 15 Oct 2026 07:34:23 +0000
Subordinate resources: AS: 139138
IP: 103.150.164.0/23
IP: 2406:b640::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57194 (0xdf6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 15 07:38:21 2025 GMT
Not After : Oct 15 07:34:23 2026 GMT
Subject: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:8f:f7:29:4d:78:03:91:74:ca:3a:b2:3e:
da:59:ff:8a:c4:7e:29:4f:32:73:0a:51:80:7b:51:
75:e5:12:9e:53:4a:73:c3:e3:b6:c5:cc:40:62:50:
26:2d:ac:84:7b:95:32:c8:91:8b:9c:fe:dc:3b:3f:
7c:53:48:51:46:ea:c8:3b:bb:d8:a3:f4:d4:88:51:
d7:6b:da:ab:ed:d7:58:55:83:dc:f9:b5:5f:41:03:
1b:46:b8:38:8a:0e:f3:1d:ba:02:4c:1c:32:95:2d:
61:c1:af:a6:91:11:a9:db:e6:ae:3e:57:c7:fe:ed:
26:91:19:7d:c4:0d:74:e3:d0:64:0b:7e:5e:c1:a6:
df:80:1c:b2:3a:80:f5:30:09:d7:a7:28:26:32:41:
6b:6b:f3:ba:8b:64:e6:d2:4f:24:f7:36:fa:d5:75:
ff:38:fd:97:b3:e8:54:52:53:6f:24:54:5d:ba:e5:
ad:91:92:6e:36:ce:78:b5:57:39:ab:83:f7:11:11:
10:75:eb:cc:65:df:d0:7e:b8:72:c3:c1:88:2c:49:
6f:f0:f2:65:17:c9:f5:8b:ef:f2:32:c1:fb:ca:e4:
3b:6b:cc:34:ea:01:dc:d1:89:37:e3:11:c8:ad:4e:
19:f7:f8:d4:79:c0:1b:76:72:94:7a:71:a4:14:f6:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139138
sbgp-ipAddrBlock: critical
IPv4:
103.150.164.0/23
IPv6:
2406:b640::/32
Signature Algorithm: sha256WithRSAEncryption
4e:e1:ac:d2:3b:2a:42:1c:6c:ab:3b:42:b4:24:2c:df:01:99:
b8:ca:59:75:0e:46:2a:e0:cc:24:88:6d:19:ed:41:4e:dc:84:
7c:7d:97:e2:0b:73:55:ce:1b:ac:97:3f:f3:c7:2c:1d:08:7d:
50:1c:9a:d3:62:62:e6:cd:91:9b:3e:81:62:6e:75:ce:fd:81:
d6:e1:5f:f4:fc:fe:10:fb:a7:4f:ca:19:ce:b3:6a:39:a8:1f:
85:38:0f:ec:22:75:c3:61:ba:be:c9:80:cb:07:15:bd:19:60:
c7:8b:99:e8:dd:a2:5a:c0:38:e9:a9:da:fa:e0:1d:b3:d7:07:
ec:b7:dc:16:6f:43:02:e9:a7:f3:37:b8:cb:a3:54:7c:c2:85:
de:82:7b:a6:e0:9e:4a:9e:e4:56:dc:24:a3:7a:ac:7d:d9:ad:
ab:82:90:b4:aa:04:73:96:01:23:e9:e1:54:33:f3:10:22:41:
77:93:b1:e1:bd:3d:4b:44:93:f9:35:04:8d:be:be:43:41:e7:
c4:81:8e:1f:ee:48:b6:5e:a7:af:41:9e:e6:a4:cc:99:6e:c4:
56:1a:21:e9:96:d6:ec:fd:9e:8d:38:41:a2:ad:cb:c8:dd:19:
07:38:63:d7:c5:26:f0:e6:03:be:d2:8e:33:dd:98:43:4a:46:
ab:93:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:31 2025 by rpki-client