This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
File:                     0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer (raw, json)
Hash identifier:          UWpm/Kp/6LFBHqsGg/Axs1tjhitOoyLHuDidpepfkpE=
Subject key identifier:   D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027061
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
caRepository:             rsync://rpki.cernet.edu.cn/repo/cernet/1/
Notify URL:               https://rpki.cernet.edu.cn/rrdp/notification.xml
Certificate not before:   Thu 30 Oct 2025 00:44:03 +0000
Certificate not after:    Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources:    AS: 144699
                          IP: 103.165.110.0/23
                          IP: 240a:a801::/32
Validation:               Failed, certificate revoked on Fri 31 Oct 2025 07:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159841 (0x27061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 30 00:44:03 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:8c:21:32:e5:12:99:ef:d3:39:59:8a:ab:
                    71:99:75:c1:5e:32:d5:8a:44:1d:6e:2b:c0:f6:b9:
                    07:1f:4c:46:d1:de:e4:a0:3f:0b:5e:9e:c8:99:7a:
                    7f:48:e4:33:9d:83:61:bb:f0:95:8a:2b:fa:84:84:
                    c1:71:6f:4d:3c:0c:49:da:d5:54:1f:fa:6e:b6:fe:
                    14:69:10:d0:8e:63:ae:d0:45:c0:e7:89:ae:a5:90:
                    3b:ac:30:3b:7c:c6:e1:3d:9f:a0:cc:c0:f4:df:6c:
                    a3:5d:cb:62:0b:e8:95:75:3b:c2:62:09:fa:8a:1c:
                    b5:e8:c0:02:be:5a:86:22:e7:20:3c:32:14:7b:f0:
                    a6:47:b9:17:fc:ed:d1:34:9b:b9:c4:c2:e9:62:7a:
                    a1:da:c4:ad:d9:3e:ee:d8:4f:8f:cb:12:fa:aa:cc:
                    e1:2f:f0:60:e6:a1:ce:e2:32:25:eb:41:72:71:10:
                    4b:a1:c5:00:dd:b9:9b:13:fd:cf:f8:57:d8:66:94:
                    d8:1c:a3:f6:30:cd:96:8a:7c:14:c5:0e:61:01:c5:
                    fe:19:30:36:fc:11:55:8c:81:c6:72:b7:0c:11:d8:
                    87:f7:35:cd:1f:e0:f7:74:31:0e:11:be:05:e4:a3:
                    b9:f7:a1:17:00:94:2a:d7:8e:7c:ea:a3:11:4a:ef:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/
                RPKI Manifest - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
                RPKI Notify - URI:https://rpki.cernet.edu.cn/rrdp/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  144699

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.110.0/23
                IPv6:
                  240a:a801::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:0c:04:ec:cd:98:34:ee:f3:8a:f7:db:43:1d:6c:64:ee:7d:
         4b:05:2e:55:fc:42:b4:ea:ed:77:b9:4f:32:df:f2:ca:12:d1:
         15:9c:17:dc:4e:13:17:d8:2b:2f:49:ed:19:d0:3b:67:ac:64:
         68:fb:9e:05:09:61:df:3a:05:49:a3:80:3b:55:7f:bd:9f:46:
         5d:1a:24:fb:84:f3:61:0f:e0:70:ed:40:1e:ab:a1:48:2f:3d:
         59:8e:7f:98:04:b9:6f:89:a3:12:0c:bb:d1:1d:04:96:c1:8b:
         21:27:37:61:7e:b4:dc:b0:3d:de:ab:9a:f5:73:78:27:df:5c:
         09:39:7a:31:b1:6a:42:b0:70:5e:09:ba:42:73:07:3d:1a:7f:
         18:8e:60:67:d4:6d:d6:37:2c:7d:ec:f3:7d:fc:8c:c3:f1:89:
         0f:1f:9b:2e:ac:32:dc:4b:8b:c6:37:7b:b9:06:15:4d:2b:3a:
         d4:ab:55:94:b4:19:fa:0a:16:f3:03:7b:bf:77:b2:6c:84:92:
         97:73:48:e2:58:db:f3:0a:ac:d1:e1:e8:61:e2:41:b7:13:78:
         82:69:ab:f1:1b:92:34:9d:3f:e5:cd:0a:e2:d7:19:67:87:e9:
         5f:d5:0a:ee:72:fe:79:29:79:5c:5d:c3:bf:c3:dd:33:6a:01:
         b8:e7:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----