This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7LOaM1zREusBI9YGxoOFkdBbWIQ.cer
File:                     7LOaM1zREusBI9YGxoOFkdBbWIQ.cer (raw, json)
Hash identifier:          5nylgFx/F3WWAupcC7zZNk38Qj2n6VrIVJKNkcNhmh0=
Subject key identifier:   EC:B3:9A:33:5C:D1:12:EB:01:23:D6:06:C6:83:85:91:D0:5B:58:84
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E7C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2468/7LOaM1zREusBI9YGxoOFkdBbWIQ.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2468/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 12 Jan 2026 19:59:49 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 103.212.48.0/22
                          IP: 192.140.136.0/22
                          IP: 192.140.156.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59335 (0xe7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan 12 19:59:49 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=ECB39A335CD112EB0123D606C6838591D05B5884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:ab:72:8f:71:5e:22:0a:83:f0:aa:15:5a:
                    0b:38:38:7a:d9:7a:da:2d:2f:0f:c9:b4:80:6d:8e:
                    ab:bd:be:29:3d:37:52:21:33:5d:7b:67:e9:4c:ed:
                    2b:a9:a0:87:00:5e:40:ef:8f:81:80:43:69:3e:a1:
                    83:92:3f:96:b5:dc:57:8b:72:54:da:e2:78:7f:94:
                    0d:d6:81:a0:00:01:10:82:13:13:09:79:f6:bd:4c:
                    51:23:b7:fd:6d:dd:7f:9d:e9:df:4b:ac:04:f6:1d:
                    5d:82:ef:0d:3c:90:30:18:5d:ea:61:70:56:b5:f3:
                    3f:43:1d:2e:42:9a:73:60:99:a6:ca:37:64:ad:27:
                    84:9b:2d:4d:25:ca:3c:8c:54:bd:6b:20:26:fe:3f:
                    df:51:2a:57:76:d5:75:7b:f2:1d:a0:d5:c8:34:10:
                    48:15:b9:cd:b7:32:6d:6f:dd:8d:8a:51:76:4c:16:
                    a1:be:60:09:dd:eb:90:8e:1c:93:18:77:63:93:52:
                    19:7b:08:03:33:1a:82:be:59:bf:a4:88:d3:bd:fd:
                    af:43:42:7d:ef:b0:0d:32:91:b6:0b:20:f8:db:41:
                    dd:f8:81:97:43:5f:a3:8c:eb:e6:5d:b7:94:44:07:
                    1f:6a:69:65:9f:27:20:50:7a:d4:14:42:98:81:c4:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:9A:33:5C:D1:12:EB:01:23:D6:06:C6:83:85:91:D0:5B:58:84
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2468/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2468/7LOaM1zREusBI9YGxoOFkdBbWIQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.48.0/22
                  192.140.136.0/22
                  192.140.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:ae:07:1d:94:f7:b1:74:c6:fa:bb:63:45:d3:bd:da:82:
         1d:86:ab:6e:a6:d4:f5:21:76:26:4c:9e:b4:8e:64:b7:ba:d0:
         f2:44:89:3f:f3:72:72:a4:ca:d7:a8:cd:cd:b3:f5:a5:87:80:
         14:a7:e3:28:d1:ae:cb:39:e2:0b:47:ca:cf:73:c3:8f:59:e9:
         dc:5b:04:36:34:94:c7:f0:95:27:50:0d:38:d3:dc:51:f1:48:
         e3:4b:96:b2:72:5d:85:e8:e4:74:bb:e1:bc:2d:93:76:81:00:
         ba:38:6f:28:6b:ff:ab:86:09:b0:c4:54:b6:11:98:15:42:74:
         f5:9d:e8:92:ae:cf:ae:50:6f:5e:53:f0:cb:80:d5:d1:94:bd:
         6d:ce:9b:5a:3b:ab:7f:22:45:03:6f:c5:1c:5b:30:5a:65:a3:
         8f:97:e0:c8:d9:7b:57:30:28:d0:a1:d4:da:d4:d0:95:19:bf:
         fe:91:36:0b:62:18:6c:d4:3a:e2:52:df:2f:b4:65:5a:94:3d:
         fe:4e:55:11:bf:25:44:27:b5:10:14:f9:c5:66:cd:f0:58:2c:
         f3:00:f6:d6:5f:9a:e0:02:3e:c2:ea:95:de:09:ad:eb:ac:2f:
         bc:05:d0:62:fb:ed:d5:c5:f1:de:4a:11:f3:1d:f4:4e:13:b2:
         28:9e:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----