This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer
File:                     E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer (raw, json)
Hash identifier:          Bpm8NSPXe/aVRwI4YVXdNymFiCANGQzVqH6r0dhOBNw=
Subject key identifier:   13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:27:25 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 146799
                          AS: 146801
                          IP: 103.29.24.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59044 (0xe6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:27:25 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:9b:b5:c8:ad:5c:2b:bd:56:c3:77:18:39:
                    4a:c1:79:ab:d4:f8:b1:57:4c:a2:fd:5d:cc:d0:84:
                    1d:88:b8:28:16:ec:91:ee:fc:78:5c:77:10:c3:80:
                    d6:89:2f:d9:fb:55:06:06:af:8a:41:df:00:a4:38:
                    1c:3b:49:35:73:88:18:95:c4:97:fe:22:32:06:0f:
                    48:89:7a:6c:0d:90:01:95:db:ce:60:eb:bb:a2:59:
                    d1:e5:01:13:f7:47:14:ff:fb:9f:50:0c:a6:dd:36:
                    4a:29:c5:7f:c4:cf:60:05:37:75:b0:d1:7a:18:44:
                    e5:ec:77:31:ae:ba:9a:12:c0:ea:76:bb:d9:cc:b4:
                    c2:97:3d:b1:99:63:ad:25:70:28:6e:e1:4e:55:1a:
                    22:ec:43:ed:c1:05:53:d7:f0:9f:7f:52:77:7c:47:
                    ad:e7:01:e9:6a:0c:00:c4:0d:82:32:df:09:0c:8d:
                    6d:c2:fa:0a:d6:f0:fd:ca:dc:9b:78:0d:06:e2:8c:
                    93:90:a0:5f:34:56:78:c2:2b:ae:9c:03:23:d2:af:
                    5a:3a:e5:89:73:1c:ec:ae:08:2d:fb:c9:11:ec:7f:
                    1b:89:59:fa:c6:aa:5b:36:00:b1:b8:a6:5e:99:31:
                    24:be:8b:d6:1f:6c:fb:a5:0d:76:e8:c7:7c:74:68:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146799
                  146801

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:93:71:41:96:f7:b0:14:85:46:27:92:6c:7a:e0:1d:96:
         1c:bb:32:07:bb:d4:11:9d:8e:3b:c8:97:c0:cb:51:97:91:0c:
         eb:f8:2a:ff:bf:06:53:8d:3a:24:4a:a5:17:59:72:aa:b1:a2:
         6d:08:df:81:52:f8:11:5a:e7:c1:4c:36:4a:f9:af:f6:90:4c:
         39:c5:ff:5a:ca:43:42:50:59:c9:8c:3a:8b:b9:06:20:94:1d:
         44:4f:38:5a:af:3a:88:e6:71:16:5b:82:38:9d:10:0c:0d:73:
         62:90:34:09:78:d8:ee:30:b3:de:34:f9:a5:66:36:37:3f:ce:
         7b:32:60:ea:cb:18:86:65:84:c8:f6:d4:03:dd:a9:63:e6:d0:
         71:26:0f:7b:31:64:6c:51:f3:48:21:42:19:93:09:fe:9c:3f:
         e4:b1:c3:89:f6:9f:68:04:13:86:b3:ea:d8:31:97:c5:22:ac:
         2f:12:85:3e:06:60:4d:e4:bd:ab:69:75:c9:c7:05:1b:51:65:
         ff:fb:57:68:8f:aa:83:ce:e7:06:ae:46:44:39:53:fc:86:7e:
         55:60:74:b1:1c:71:fb:c8:e2:63:17:f8:16:69:4c:1d:5c:aa:
         1a:b8:2d:71:98:90:c0:ba:d4:f5:da:91:ab:fa:bf:b3:ab:ee:
         c3:68:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----