This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-d70lGN6U32CKR2goZ8GrzWyJgY.cer
File:                     -d70lGN6U32CKR2goZ8GrzWyJgY.cer (raw, json)
Hash identifier:          ChnDxmHnKMBMzYcFkRdAbm1z3dnBJSqj7QVI/B8fpPc=
Subject key identifier:   F9:DE:F4:94:63:7A:53:7D:82:29:1D:A0:A1:9F:06:AF:35:B2:26:06
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E626
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:25:35 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151229
                          IP: 2402:18a0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58918 (0xe626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:25:35 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=F9DEF494637A537D82291DA0A19F06AF35B22606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:fd:f6:cb:85:8b:36:8a:fd:18:bf:ca:92:
                    a5:5c:26:3d:f3:8b:54:97:70:23:3f:18:eb:f9:bc:
                    3d:6b:b5:f4:d7:ee:6c:b4:95:89:07:f3:4c:fd:fb:
                    0e:6c:a0:3d:21:16:ce:e6:02:db:89:5e:c0:3d:fc:
                    97:b1:f1:10:e4:41:d1:c9:17:60:85:a2:ea:3a:4a:
                    7c:cd:a5:2f:3e:1f:3e:21:9f:79:04:49:ec:f1:42:
                    93:4a:2f:31:8d:d1:af:72:01:f6:00:58:ee:69:1e:
                    9e:4a:3c:c3:ec:0e:a9:52:a0:1c:31:04:c6:c0:e3:
                    cd:fb:a6:89:9c:0b:84:bf:51:c0:21:4a:d3:df:be:
                    09:19:0a:ee:8c:40:07:bd:07:eb:49:a5:ae:ea:0d:
                    16:bd:3b:4e:31:26:f3:dd:81:31:56:6c:ef:ea:5b:
                    55:e7:99:1d:07:49:dc:14:c4:b7:1d:eb:58:7c:44:
                    13:3f:fe:1c:37:16:b4:21:a3:a2:f6:11:69:d4:09:
                    ba:fa:59:16:5f:86:ca:ce:2a:87:70:91:85:bc:db:
                    1a:86:4e:5a:f5:1e:15:55:3a:4c:48:8e:c6:b8:26:
                    0a:0f:4b:a7:40:96:3c:74:c8:f2:58:2e:b2:53:9d:
                    02:01:f7:2b:a8:16:ac:a9:fe:06:fe:07:d2:f3:e0:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:F4:94:63:7A:53:7D:82:29:1D:A0:A1:9F:06:AF:35:B2:26:06
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3383/-d70lGN6U32CKR2goZ8GrzWyJgY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151229

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:18a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:a4:1d:9a:8d:b5:ad:62:72:a2:f1:14:35:65:f7:ce:7d:96:
         73:8c:b5:a3:6e:9d:4f:8a:50:b5:c2:f5:1c:1d:e0:ed:78:12:
         bc:df:da:96:1b:ff:c2:37:e7:48:4a:31:42:95:fe:e8:27:ec:
         d2:d1:12:59:8a:fe:b2:7a:51:8d:a0:d1:be:83:1a:24:58:b3:
         34:2d:ba:97:a4:0f:47:17:a1:5c:54:da:b7:1e:51:51:a1:db:
         20:97:89:d8:19:34:82:bd:81:29:3d:89:ea:70:a4:4b:f3:89:
         1d:75:64:12:3f:2d:cf:97:17:a8:4c:26:1d:27:b3:35:38:c2:
         f2:45:e2:76:ac:1f:42:58:55:b2:42:70:48:b1:49:cd:6a:b3:
         87:54:38:7f:5b:d4:18:f7:3c:53:89:2e:32:d6:06:fa:77:75:
         26:44:bc:ac:be:ed:77:ab:8a:74:2d:b7:14:fd:e3:36:3a:f2:
         cf:65:c4:3b:7a:58:97:b2:f1:ac:95:c7:be:10:99:97:5d:82:
         73:65:38:a9:53:6f:b4:96:c8:76:a8:e7:d8:8c:c3:c9:b9:4d:
         6f:78:bc:55:18:b9:18:9c:8c:fe:57:8a:22:67:29:05:30:06:
         8b:a1:4f:5b:38:bc:2d:86:55:f0:38:5a:65:e6:75:b5:c9:61:
         47:7c:59:db
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIDAOYmMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI1MzVaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKEY5REVGNDk0NjM3QTUzN0Q4MjI5MURBMEExOUYwNkFGMzVCMjI2
MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5J/32y4WLNor9GL/K
kqVcJj3zi1SXcCM/GOv5vD1rtfTX7my0lYkH80z9+w5soD0hFs7mAtuJXsA9/Jex
8RDkQdHJF2CFouo6SnzNpS8+Hz4hn3kESezxQpNKLzGN0a9yAfYAWO5pHp5KPMPs
DqlSoBwxBMbA4837pomcC4S/UcAhStPfvgkZCu6MQAe9B+tJpa7qDRa9O04xJvPd
gTFWbO/qW1XnmR0HSdwUxLcd61h8RBM//hw3FrQho6L2EWnUCbr6WRZfhsrOKodw
kYW82xqGTlr1HhVVOkxIjsa4JgoPS6dAljx0yPJYLrJTnQIB9yuoFqyp/gb+B9Lz
4NidAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQU+d70lGN6U32CKR2goZ8GrzWyJgYw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
ODMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM4My8tZDcwbEdONlUzMkNLUjJnb1o4R3J6V3lKZ1kubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOvTAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQCGKAwDQYJKoZIhvcNAQELBQADggEBAB6kHZqNta1icqLxFDVl
9859lnOMtaNunU+KULXC9Rwd4O14Erzf2pYb/8I350hKMUKV/ugn7NLRElmK/rJ6
UY2g0b6DGiRYszQtupekD0cXoVxU2rceUVGh2yCXidgZNIK9gSk9iepwpEvziR11
ZBI/Lc+XF6hMJh0nszU4wvJF4nasH0JYVbJCcEixSc1qs4dUOH9b1Bj3PFOJLjLW
Bvp3dSZEvKy+7XerinQttxT94zY68s9lxDt6WJey8ayVx74QmZddgnNlOKlTb7SW
yHao59iMw8m5TW94vFUYuRicjP5XiiJnKQUwBouhT1s4vC2GVfA4WmXmdbXJYUd8
Wds=
-----END CERTIFICATE-----