This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GLxZ3JsGxzGcQMR21-mmGNb_4WE.cer
File:                     GLxZ3JsGxzGcQMR21-mmGNb_4WE.cer (raw, json)
Hash identifier:          ypnZFMtSxs9xcG0BMXD4qfE2bP3uc1yu7XiwKbylJCo=
Subject key identifier:   18:BC:59:DC:9B:06:C7:31:9C:40:C4:76:D7:E9:A6:18:D6:FF:E1:61
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       4454
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:26:25 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 192.232.46.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17492 (0x4454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Jan  9 08:26:25 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=18BC59DC9B06C7319C40C476D7E9A618D6FFE161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:45:3c:17:95:5f:2a:ad:6e:00:bd:25:50:
                    7c:6c:cb:53:4a:be:93:c2:ea:23:e4:90:5b:16:94:
                    e4:36:fb:9c:e8:09:f7:de:8e:9e:87:10:f6:36:0a:
                    14:a1:11:fd:09:ce:2e:25:c9:c7:6a:60:57:b7:8b:
                    2d:e7:2f:11:17:27:b0:30:d9:0b:03:10:94:9b:da:
                    56:6d:0e:18:95:81:9b:27:47:9a:78:85:d4:58:fc:
                    52:a5:dc:ae:ab:70:6b:fb:d4:8e:6e:74:32:8a:73:
                    1e:2a:90:a9:4e:36:24:b7:4d:53:87:b6:23:3c:b8:
                    17:91:cd:7c:32:68:a9:4b:fa:41:ea:ab:57:42:95:
                    e8:8e:f1:c7:01:93:d9:01:93:41:fb:93:98:a5:11:
                    d1:2b:1e:b9:7a:d5:e1:9c:5a:34:a4:39:33:89:0d:
                    f3:e8:ef:4c:97:b2:d6:16:b3:b2:96:7b:09:f8:a6:
                    4b:1a:67:c6:1f:8e:86:e3:50:d5:32:b2:a5:73:26:
                    3c:b5:6f:0d:e8:55:6b:4b:cd:05:0a:06:84:1f:ce:
                    e8:ac:6b:75:84:b0:f4:e9:82:7a:dd:d4:c7:82:5d:
                    70:08:59:21:f3:aa:c3:a0:1b:ec:79:76:ea:24:e9:
                    16:16:16:f1:34:ba:02:a3:de:b6:1e:5e:c3:c7:02:
                    36:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:59:DC:9B:06:C7:31:9C:40:C4:76:D7:E9:A6:18:D6:FF:E1:61
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3424/GLxZ3JsGxzGcQMR21-mmGNb_4WE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:8d:46:61:43:4a:7f:b1:0b:af:74:55:33:4d:75:e8:22:
         5b:33:a7:dd:ab:f0:c9:23:b9:85:12:6f:ed:2a:cf:7d:f1:51:
         84:b4:72:d9:6e:92:f7:67:4c:50:23:a6:ab:11:7a:6d:b3:2c:
         fe:ad:70:2d:3f:c9:66:b3:c8:7c:a7:58:18:a9:e0:7d:75:42:
         89:1d:ad:b0:df:6d:5e:34:88:14:17:53:ae:d5:8f:d1:7d:13:
         78:9d:54:18:d2:a6:28:a5:75:d6:ed:83:cd:fa:ba:66:d4:53:
         91:99:cb:75:7f:7c:70:81:a4:2c:cc:b3:aa:54:45:93:53:e6:
         b3:13:04:f6:3f:ff:40:77:47:9f:ae:02:19:20:f0:fb:58:eb:
         8f:ac:f9:e8:80:d7:0a:43:da:42:44:7b:8e:48:2f:ff:f5:23:
         b3:89:11:40:19:0d:e7:f3:bc:3b:35:df:1f:68:de:bb:6a:1c:
         00:69:14:37:21:1c:17:56:fb:0d:f7:98:0a:eb:e8:69:11:02:
         c5:75:7f:ea:41:44:cf:c4:cd:17:67:7c:57:a2:32:48:60:bc:
         38:42:23:1f:4a:92:de:54:b3:ae:47:10:44:90:bf:3f:c7:15:
         ee:49:60:a2:07:33:01:7b:89:e6:ea:71:7f:25:6b:03:5c:61:
         f2:83:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----