This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/17ShZ52D0ID8_qOSpk1CSkdVt4A.cer
File:                     17ShZ52D0ID8_qOSpk1CSkdVt4A.cer (raw, json)
Hash identifier:          t6rkX0gKaIsFXDOMbTm5ca5xO2G8p6Mkt/GzqzQ51Yk=
Subject key identifier:   D7:B4:A1:67:9D:83:D0:80:FC:FE:A3:92:A6:4D:42:4A:47:55:B7:80
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E636
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/17ShZ52D0ID8_qOSpk1CSkdVt4A.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:25:50 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 2401:f0a0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58934 (0xe636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:25:50 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=D7B4A1679D83D080FCFEA392A64D424A4755B780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:45:7c:c1:f1:e9:31:22:a6:aa:fb:49:6d:
                    75:14:f4:7e:f1:af:b0:3e:e2:4e:79:03:ec:23:ba:
                    c7:97:27:49:b2:c7:56:5a:04:fc:d7:ea:ab:4c:64:
                    48:94:bc:54:22:18:dd:b8:1c:b1:58:16:de:c6:10:
                    f3:dc:b5:99:ab:0d:ff:08:29:76:b6:43:58:93:01:
                    1b:b7:56:02:2a:c3:02:07:91:04:c6:d1:cd:0f:8e:
                    a0:c0:be:81:00:2f:d6:48:34:dd:97:17:f0:bd:de:
                    a1:cb:1b:bf:87:b9:f1:4c:3d:49:d1:6b:7f:fb:9f:
                    79:9f:38:ba:10:fc:96:fb:a0:30:11:b3:9b:f7:85:
                    35:ba:50:93:51:f3:1a:25:e0:2f:35:db:e4:65:cc:
                    33:a7:0d:f6:0a:7e:e6:7d:e8:1a:29:d4:11:10:6c:
                    a2:9b:a4:0c:f6:d8:e6:81:c9:a6:dc:42:a5:1f:5b:
                    b7:19:50:ed:d0:1f:8b:19:d4:18:ce:ee:c8:4a:7b:
                    07:b6:00:2f:65:78:9e:ab:ed:38:f1:9a:78:a8:8c:
                    c7:5d:f3:e0:c3:7e:e3:5b:52:6d:c4:88:00:2d:84:
                    f3:67:78:2e:0f:ee:b5:6b:d5:26:47:0a:21:df:b2:
                    71:34:45:c4:f6:62:73:cf:0c:2a:11:b5:a1:67:9c:
                    04:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B4:A1:67:9D:83:D0:80:FC:FE:A3:92:A6:4D:42:4A:47:55:B7:80
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3351/17ShZ52D0ID8_qOSpk1CSkdVt4A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:5e:85:2f:fb:4e:c9:a9:6c:84:69:bf:8d:fa:87:c0:8a:95:
         e1:39:02:ed:53:7f:ed:84:15:78:b3:f6:62:5d:fe:ad:ba:57:
         ad:2b:19:b0:a2:41:55:7b:98:4d:d1:ca:92:2d:b4:6d:d8:9f:
         d9:4d:32:50:c2:96:e6:44:d7:61:05:f8:7c:9a:21:84:12:9f:
         aa:47:3e:25:85:fe:8e:b2:a1:68:a3:0a:02:26:5d:a8:eb:cd:
         86:c6:ad:b7:a1:0f:83:3e:32:ae:84:17:1a:b8:53:8e:c8:06:
         b5:b9:0e:4b:82:1d:21:86:f2:cf:0b:55:84:3c:c0:4e:0e:25:
         d5:22:f8:7f:e0:67:57:46:1e:b8:7e:00:15:b9:23:a3:25:98:
         3f:1c:84:8d:d3:93:57:19:76:81:20:3f:42:65:0f:1f:45:3c:
         7a:9f:d7:55:94:d5:f5:7d:ce:8f:97:52:79:92:67:35:ec:f5:
         1a:56:74:9f:71:dd:ee:4f:8e:b5:b8:33:ef:23:db:eb:8f:ba:
         8d:27:c3:2d:99:86:74:d5:de:d8:6e:5c:51:ae:0f:fb:07:d8:
         c1:8c:e5:b7:ce:bf:95:3d:d5:6d:f9:f6:47:da:75:c9:90:71:
         3c:ce:63:a7:f4:f6:4a:9b:04:b3:e4:39:df:20:34:f8:7c:a6:
         99:b1:f0:d6
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDAOY2MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI1NTBaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKEQ3QjRBMTY3OUQ4M0QwODBGQ0ZFQTM5MkE2NEQ0MjRBNDc1NUI3
ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6EV8wfHpMSKmqvtJ
bXUU9H7xr7A+4k55A+wjuseXJ0myx1ZaBPzX6qtMZEiUvFQiGN24HLFYFt7GEPPc
tZmrDf8IKXa2Q1iTARu3VgIqwwIHkQTG0c0PjqDAvoEAL9ZINN2XF/C93qHLG7+H
ufFMPUnRa3/7n3mfOLoQ/Jb7oDARs5v3hTW6UJNR8xol4C812+RlzDOnDfYKfuZ9
6Bop1BEQbKKbpAz22OaByabcQqUfW7cZUO3QH4sZ1BjO7shKewe2AC9leJ6r7Tjx
mniojMdd8+DDfuNbUm3EiAAthPNneC4P7rVr1SZHCiHfsnE0RcT2YnPPDCoRtaFn
nAQTAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQU17ShZ52D0ID8/qOSpk1CSkdVt4Aw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
NTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM1MS8xN1NoWjUyRDBJRDhfcU9TcGsxQ1NrZFZ0NEEubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHwoDANBgkqhkiG9w0BAQsF
AAOCAQEAtF6FL/tOyalshGm/jfqHwIqV4TkC7VN/7YQVeLP2Yl3+rbpXrSsZsKJB
VXuYTdHKki20bdif2U0yUMKW5kTXYQX4fJohhBKfqkc+JYX+jrKhaKMKAiZdqOvN
hsatt6EPgz4yroQXGrhTjsgGtbkOS4IdIYbyzwtVhDzATg4l1SL4f+BnV0YeuH4A
FbkjoyWYPxyEjdOTVxl2gSA/QmUPH0U8ep/XVZTV9X3Oj5dSeZJnNez1GlZ0n3Hd
7k+Otbgz7yPb64+6jSfDLZmGdNXe2G5cUa4P+wfYwYzlt86/lT3Vbfn2R9p1yZBx
PM5jp/T2SpsEs+Q53yA0+HymmbHw1g==
-----END CERTIFICATE-----