This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/06BdqqCQU2XvHzmKUupfkfbC2SA.cer
File:                     06BdqqCQU2XvHzmKUupfkfbC2SA.cer (raw, json)
Hash identifier:          miq8LJohoxF+yJutVYig2/JPY25sFC09GncBZgGFD2Y=
Subject key identifier:   D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:28:13 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 137731
                          IP: 103.62.88.0/23
                          IP: 2402:34e0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59058 (0xe6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:28:13 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=D3A05DAAA0905365EF1F398A52EA5F91F6C2D920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:14:94:87:a3:2c:bb:57:3c:f3:9c:ec:65:
                    1a:9c:54:cf:df:de:a3:de:a5:a8:5e:5b:45:61:17:
                    82:18:7c:ca:f3:81:b0:6e:b1:55:69:ef:85:bb:a7:
                    36:a6:54:82:28:39:29:ae:72:50:01:8b:85:dc:18:
                    e7:b6:4a:18:29:f2:40:ec:2b:da:18:c3:f5:d2:51:
                    ce:95:42:5a:07:ed:16:37:81:d4:28:27:fe:95:b5:
                    f4:f6:90:45:2f:8d:22:12:bd:1f:f1:ec:c5:e8:0d:
                    4b:1d:d6:b1:24:44:3a:7f:d6:bf:05:2e:b4:8b:81:
                    d2:84:ab:52:12:75:38:6e:a5:e3:34:da:43:48:74:
                    b0:91:97:c7:59:1f:8d:1f:5a:63:c4:6b:a0:4a:4e:
                    a5:86:d3:9a:ba:42:f9:1e:10:78:ae:19:93:bd:fb:
                    57:15:b4:9d:1e:76:8a:20:9a:ba:39:57:a8:5e:26:
                    e3:f1:13:39:ce:8b:47:21:a8:44:05:ac:a3:67:83:
                    0c:ee:fa:24:5d:82:7c:ab:f9:6d:87:9c:49:a1:38:
                    15:f9:21:3d:30:b4:d4:64:04:a8:02:2c:c9:9b:cd:
                    04:d4:21:d0:0d:00:c1:59:ea:56:16:2d:7c:97:39:
                    c4:2b:6f:6c:b3:51:08:a3:e3:24:b0:88:60:f8:be:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A0:5D:AA:A0:90:53:65:EF:1F:39:8A:52:EA:5F:91:F6:C2:D9:20
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/06BdqqCQU2XvHzmKUupfkfbC2SA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137731

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.88.0/23
                IPv6:
                  2402:34e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:b0:2c:0b:93:01:2d:a1:bd:77:dd:79:ae:fd:64:45:d3:
         51:87:2f:7a:9d:33:24:6d:cb:c7:55:d9:91:db:25:01:4b:5a:
         05:b8:38:c7:01:cb:63:10:49:a5:8c:7e:80:03:3d:f7:3a:e9:
         1c:b5:8a:48:4f:7a:b2:60:e5:4b:21:f7:2d:86:4a:9a:25:ee:
         e2:07:cd:12:5b:97:76:a0:be:9c:3d:f0:b7:f4:e7:57:32:13:
         a0:16:c0:89:22:34:ed:89:96:41:19:5e:6a:be:dc:08:6f:9a:
         ed:ef:82:df:11:59:d4:41:60:78:0c:c6:ec:20:2a:93:d1:20:
         e4:2f:27:75:aa:da:f1:03:92:74:33:69:f7:ab:fb:57:eb:fe:
         d0:8e:c5:d4:83:9b:91:20:a6:34:be:b8:30:3a:0f:1d:84:66:
         52:42:7a:b5:35:f2:f6:f7:64:a6:a4:4e:b7:cd:46:64:4e:04:
         7c:4f:9b:6b:99:33:d8:1e:bb:de:10:fc:9b:2b:78:1e:62:b4:
         3d:04:73:80:17:e9:34:e6:a7:ba:1e:73:5b:3c:84:6b:65:b4:
         a4:7c:ba:7b:25:87:09:be:12:d2:59:89:19:ca:b3:48:e5:bb:
         9b:a2:eb:dd:01:2f:40:35:71:0a:2b:f3:1b:1b:41:45:16:9c:
         ea:e6:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----