This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer
File:                     2S0gFnN4OWtvovkcS7Vg78LTQAM.cer (raw, json)
Hash identifier:          5/GOfsl+9CPDuxuqAUIUOkETOAuRozTpBWYLpoCbvgk=
Subject key identifier:   D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:28:34 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 146789
                          IP: 2401:7ce0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59078 (0xe6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:28:34 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=D92D20167378396B6FA2F91C4BB560EFC2D34003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:63:e5:2d:4a:08:05:e7:ba:2e:28:93:58:
                    31:39:ce:f9:5b:a1:27:d6:62:fb:41:3f:1d:cf:a3:
                    f5:45:d6:ef:1e:fd:3d:85:98:85:fe:99:8b:a4:8b:
                    1e:a3:9e:13:28:32:c5:89:9f:39:ce:9e:10:0f:3e:
                    a8:2d:80:fe:9a:88:a5:5f:cb:1d:a4:28:73:05:14:
                    ed:02:8b:c8:a8:e8:3e:e5:4d:4a:27:b2:bc:23:88:
                    23:fc:5b:c7:e4:4c:c9:86:b4:30:24:66:34:b9:e5:
                    c9:96:aa:bf:e4:73:e1:4d:2f:74:24:dd:4c:6c:93:
                    dc:93:07:b7:d6:53:a7:aa:7c:6d:b8:0b:cf:1a:64:
                    41:10:a1:9f:c8:95:14:d3:58:0a:a5:0c:22:cd:69:
                    86:83:62:a8:1d:2a:21:a7:0e:bb:b7:1f:a9:cb:34:
                    8a:95:83:dd:eb:b1:f2:08:d5:83:7a:2f:a8:9b:42:
                    9c:c5:b5:29:70:f6:4f:de:c1:91:01:62:2c:76:dd:
                    fb:b8:89:4a:b6:ba:cd:ac:ed:49:4c:98:01:0d:1f:
                    a0:1b:b2:c2:24:f2:95:ee:5d:4f:66:1c:e9:e6:fc:
                    6c:c7:f2:1b:59:74:76:21:60:b5:d3:2a:51:13:13:
                    b3:c5:af:01:88:a2:cf:ef:1e:13:64:d1:a1:06:5d:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146789

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:cb:28:57:f1:05:d1:3d:ff:78:b2:a2:20:09:7c:54:49:ed:
         0b:e6:48:a4:c2:a7:29:b2:20:99:59:0b:e7:6c:bc:eb:75:c5:
         bd:ce:f5:9f:3f:b4:d4:82:fd:4d:a0:30:97:39:d3:70:9f:0f:
         76:72:e4:95:a4:42:49:d1:0c:81:b9:3f:ff:fd:f6:e6:1f:68:
         c9:7b:cf:e4:39:e9:42:9e:27:f6:78:73:94:54:30:c9:dc:25:
         73:a6:ea:47:56:eb:3d:3a:37:a9:84:28:c9:92:b9:99:47:6d:
         ae:9c:b7:7b:cd:6c:7f:9f:23:3a:f8:d6:f5:07:6b:e6:15:7e:
         9a:41:9e:a4:a6:66:0e:ea:69:62:fa:0d:c3:50:46:f3:e1:9a:
         2a:62:2b:20:73:37:7c:84:e9:22:d4:c3:67:fa:9a:3a:67:5a:
         87:dd:6c:12:71:80:cb:1e:c5:54:fc:c8:ae:41:a7:cd:49:3f:
         2b:0a:e0:87:90:39:6e:6f:b3:9e:82:39:0f:8e:63:40:94:cd:
         57:6f:fb:fc:da:78:fe:9a:02:d3:22:83:5a:fd:8d:db:37:4a:
         80:3d:b6:04:9f:9b:f2:5f:bd:95:e0:35:4d:52:0c:70:f2:67:
         24:9b:0e:52:f0:46:e1:cc:f1:1c:45:3c:a5:0e:5c:c2:5f:ec:
         22:87:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----