This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2SYi6AR8q-hBFc2mnzsReAbUXOw.cer
File:                     2SYi6AR8q-hBFc2mnzsReAbUXOw.cer (raw, json)
Hash identifier:          C0bpucFDFrRsCB8ZrLHIDFchB9sMDtOD7z5s1h4oV38=
Subject key identifier:   D9:26:22:E8:04:7C:AB:E8:41:15:CD:A6:9F:3B:11:78:06:D4:5C:EC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E782
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/2SYi6AR8q-hBFc2mnzsReAbUXOw.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:31:35 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 24430
                          IP: 120.72.128.0/17
                          IP: 211.156.192.0/19
                          IP: 2402:c5c0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59266 (0xe782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:31:35 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=D92622E8047CABE84115CDA69F3B117806D45CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:26:a7:60:6a:1e:9e:22:21:f8:60:15:b6:
                    2d:dd:ed:f0:75:28:0e:83:8f:50:40:e9:52:76:70:
                    1d:52:7b:32:d5:8d:51:90:ac:15:42:69:fc:41:8b:
                    e1:20:1d:c4:4e:38:c2:76:ee:ea:83:3c:eb:7a:35:
                    aa:6b:bf:34:2d:0e:f4:fd:b0:c3:a6:2c:09:a7:04:
                    4e:b0:fc:25:ef:3c:5e:be:ec:40:f2:7e:a6:36:d0:
                    1a:50:20:06:02:65:84:74:69:6c:eb:b1:4e:ff:72:
                    c1:80:a9:a2:f6:bc:20:6e:59:93:76:37:54:3e:69:
                    41:47:aa:57:70:50:f8:35:bd:0a:34:01:6b:f4:2a:
                    4e:1f:dd:c6:62:3b:56:3f:96:29:3b:38:0e:93:87:
                    61:2c:55:ac:bc:5a:67:39:aa:dc:14:da:ee:c4:a0:
                    21:a7:1c:8e:83:e2:d7:79:63:89:f6:8d:c2:5f:e0:
                    ac:10:28:c4:56:e2:18:46:bd:11:a8:ce:df:67:17:
                    ba:ae:c6:6f:8f:8b:bf:6e:6c:fb:e3:38:88:29:be:
                    9a:ce:8f:f1:ea:58:a8:cc:dc:35:97:7f:3b:ec:5f:
                    54:99:96:cf:5c:e2:c5:dd:a3:ee:04:a2:fa:78:ac:
                    13:f9:d9:de:55:17:d3:27:30:dd:b9:c4:c8:98:30:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:26:22:E8:04:7C:AB:E8:41:15:CD:A6:9F:3B:11:78:06:D4:5C:EC
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/75/2SYi6AR8q-hBFc2mnzsReAbUXOw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24430

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.128.0/17
                  211.156.192.0/19
                IPv6:
                  2402:c5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:7b:0f:84:b5:0b:45:c9:3a:5c:20:58:da:07:b6:59:14:fc:
         95:fc:01:70:de:d5:2c:f0:2a:99:27:bc:a3:a4:6b:06:e1:23:
         b1:bd:01:44:20:97:39:e3:82:16:3a:3b:5e:23:4d:88:a1:7e:
         62:a5:7d:ae:88:88:be:0a:11:f9:b6:13:f8:12:84:22:ae:c5:
         2d:82:c6:29:97:06:8a:bb:98:d2:11:78:cb:d1:d0:54:86:bc:
         2c:fd:7b:bf:62:36:c6:2d:8b:66:57:47:3e:da:34:61:6e:36:
         d4:80:4e:4c:bb:2a:c1:d9:d4:59:68:36:b7:1c:c5:38:33:26:
         ae:78:49:12:6a:83:58:2e:4a:84:34:6d:24:af:cd:1f:43:13:
         50:9a:43:ea:15:4f:5a:6c:74:89:ac:fb:02:4e:00:cf:71:99:
         62:6a:3a:db:dd:5f:ce:01:9f:a9:75:c0:8c:be:7e:ed:45:d6:
         d3:af:07:32:a0:e9:ff:13:59:1b:c3:8e:a8:3b:28:dd:2d:ec:
         72:b7:4e:02:dc:3e:37:bd:89:14:46:e9:66:ce:2e:b4:17:98:
         87:07:67:6a:ef:55:35:87:69:0c:d4:fd:4c:34:59:ec:72:b7:
         c8:9b:21:a5:b0:a3:a5:b9:8b:b0:e3:fb:7d:fd:9b:6f:3f:51:
         f8:5f:c6:7c
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIDAOeCMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMxMzVaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKEQ5MjYyMkU4MDQ3Q0FCRTg0MTE1Q0RBNjlGM0IxMTc4MDZENDVD
RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOyanYGoeniIh+GAV
ti3d7fB1KA6Dj1BA6VJ2cB1SezLVjVGQrBVCafxBi+EgHcROOMJ27uqDPOt6Napr
vzQtDvT9sMOmLAmnBE6w/CXvPF6+7EDyfqY20BpQIAYCZYR0aWzrsU7/csGAqaL2
vCBuWZN2N1Q+aUFHqldwUPg1vQo0AWv0Kk4f3cZiO1Y/lik7OA6Th2EsVay8Wmc5
qtwU2u7EoCGnHI6D4td5Y4n2jcJf4KwQKMRW4hhGvRGozt9nF7quxm+Pi79ubPvj
OIgpvprOj/HqWKjM3DWXfzvsX1SZls9c4sXdo+4Eovp4rBP52d5VF9MnMN25xMiY
MFOvAgMBAAGjggKBMIICfTAdBgNVHQ4EFgQU2SYi6AR8q+hBFc2mnzsReAbUXOww
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHUBggrBgEFBQcBCwSBxzCBxDA3BggrBgEF
BQcwBYYrcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzc1
LzBWBggrBgEFBQcwCoZKcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzc1LzJTWWk2QVI4cS1oQkZjMm1uenNSZUFiVVhPdy5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWwwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICX24wNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgAB
MAwDBAd4SIADBAXTnMAwDQQCAAIwBwMFACQCxcAwDQYJKoZIhvcNAQELBQADggEB
ALZ7D4S1C0XJOlwgWNoHtlkU/JX8AXDe1SzwKpknvKOkawbhI7G9AUQglznjghY6
O14jTYihfmKlfa6IiL4KEfm2E/gShCKuxS2CximXBoq7mNIReMvR0FSGvCz9e79i
NsYti2ZXRz7aNGFuNtSATky7KsHZ1FloNrccxTgzJq54SRJqg1guSoQ0bSSvzR9D
E1CaQ+oVT1psdIms+wJOAM9xmWJqOtvdX84Bn6l1wIy+fu1F1tOvBzKg6f8TWRvD
jqg7KN0t7HK3TgLcPje9iRRG6WbOLrQXmIcHZ2rvVTWHaQzU/Uw0Wexyt8ibIaWw
o6W5i7Dj+339m28/Ufhfxnw=
-----END CERTIFICATE-----