This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
File:                     3rhuqt7hwX7OKn_2OIUm96kmDUc.cer (raw, json)
Hash identifier:          Vz0V6IVtYSNdJHOxK4LCbqwUF96XMwQbRZEQgXArAx0=
Subject key identifier:   DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:42 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 113.31.128.0/21
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59144 (0xe708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:42 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:7e:c4:7d:4b:cb:0e:65:d2:18:78:25:23:
                    8e:1e:54:db:0a:a5:a0:b2:97:37:10:13:7f:4b:59:
                    3f:02:6b:b5:61:03:81:52:d3:2a:4d:2d:4d:6e:e5:
                    ab:6e:28:21:eb:14:f9:69:95:d6:cf:59:fb:df:f2:
                    3c:c8:41:a0:d6:67:74:dd:27:32:6f:22:25:b6:a8:
                    4f:2c:d1:06:2d:68:3e:57:1f:17:54:31:dc:2e:42:
                    74:8d:c7:88:17:2b:e5:de:1f:fd:5c:ab:a4:f8:4a:
                    b6:af:37:7d:58:ff:1b:2c:67:e4:e1:5f:5d:fd:2b:
                    8a:43:64:e0:da:b3:07:03:58:06:b2:02:a9:a8:f0:
                    d2:c4:67:ed:d7:41:35:73:ea:d3:1a:f9:fd:33:c9:
                    ad:16:5c:f1:45:17:db:cb:44:6d:fd:1f:2f:18:8f:
                    22:72:40:3e:4e:83:a3:00:14:5f:56:bb:d2:cf:81:
                    0a:08:f3:99:fe:ee:5d:bb:c9:c4:a0:b2:a6:77:bb:
                    87:66:97:7c:8c:8c:0a:f9:19:38:3e:be:b5:55:87:
                    c5:da:8a:9a:67:d2:bb:ca:7f:42:74:a1:f0:e0:f0:
                    e5:c6:c0:87:e6:8f:e1:e8:fb:74:0c:a3:a8:c1:88:
                    91:05:40:5e:26:bc:d2:45:97:13:5e:04:08:3b:09:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.31.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:58:b0:08:5d:fe:60:88:bf:1f:5d:cd:b2:4e:90:37:32:37:
         03:c6:3b:75:ea:7d:5e:0b:47:2c:93:34:e9:5b:15:11:59:4e:
         11:e4:db:70:92:63:87:54:24:d4:20:95:f1:98:bb:5c:c0:ae:
         b1:8a:5e:8a:ab:1c:e4:12:11:43:96:40:c2:d5:58:56:47:c3:
         12:37:44:74:e9:39:81:0b:95:0b:88:cf:a5:0b:69:de:c1:7f:
         ef:74:7b:9a:56:a6:ae:9e:18:43:24:4e:6a:e5:c9:90:9d:c6:
         79:3f:8d:39:f2:97:08:62:71:1e:d4:f7:9f:aa:8d:c6:2c:40:
         1d:ff:29:87:1f:bd:a4:1a:c4:4c:a3:31:d4:19:e5:1c:d9:81:
         69:f7:8c:78:f4:1a:76:10:da:4e:d7:73:1b:ac:63:bf:74:0a:
         b8:8d:92:0b:79:a0:61:c1:e0:13:57:63:68:93:d6:dc:2c:f2:
         9d:fe:5c:7e:9e:b3:5a:4c:2a:6b:dd:6e:b1:8f:c4:78:f0:43:
         5b:3b:a4:05:a1:f2:09:9f:6c:7d:b1:82:be:7e:78:46:46:0c:
         56:fa:c9:5c:70:0d:1a:89:c7:ea:98:34:eb:28:bf:65:8b:8d:
         08:1f:86:5f:8c:04:16:b2:4b:ee:b2:94:fd:c4:3a:07:b5:e5:
         e5:df:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----