This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer
File:                     GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer (raw, json)
Hash identifier:          +Yd/2Rh6apWsbRLoPk6zhgxkoQ7ALmngqAtHP5ifFVY=
Subject key identifier:   1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E768
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:31:08 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 63572
                          AS: 135629
                          IP: 43.192.0.0 -- 43.194.255.255
                          IP: 2404:c2c0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59240 (0xe768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:31:08 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:03:e8:66:ae:0b:0d:32:fd:d7:c2:85:0c:
                    12:08:22:18:f6:1b:b2:d9:49:cc:c7:88:75:eb:c1:
                    29:4c:15:80:ed:43:f5:2f:c0:e8:22:2d:46:5a:3f:
                    67:84:a2:77:84:3c:88:f3:89:84:70:c1:7d:13:87:
                    01:ba:e0:47:52:5e:24:01:16:c2:b7:f7:06:94:f4:
                    67:3c:59:c4:a4:f5:9e:f8:d1:fe:f0:51:b8:28:bf:
                    f2:8d:83:2b:3c:a4:cf:1d:ac:1f:a2:43:e1:ff:32:
                    0a:09:d7:8e:08:61:ed:e9:9a:b0:82:55:95:43:ef:
                    52:ce:64:38:a4:d3:f9:5a:22:bf:aa:2b:b1:5e:a4:
                    fe:1b:01:65:56:7c:71:be:78:4f:99:81:dd:fe:c9:
                    3f:2b:44:20:58:03:37:8e:2b:05:bd:33:13:e0:66:
                    77:12:1d:6a:f5:f1:a5:00:f1:6c:d0:c5:64:09:82:
                    b1:1f:ac:e5:95:b0:b8:78:d4:17:d6:7e:ce:e1:13:
                    b3:86:c8:21:b1:34:51:5e:f4:cb:fa:fb:6a:60:d2:
                    4c:86:88:f0:e0:f4:ec:fa:1b:3f:6a:04:f1:1f:55:
                    cd:1d:8f:ee:7d:1c:a3:69:1f:b5:21:75:fe:63:f6:
                    69:97:a4:02:28:6d:9d:de:38:d6:cc:fe:6c:40:7c:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63572
                  135629

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.192.0.0-43.194.255.255
                IPv6:
                  2404:c2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:d2:8b:a4:53:7c:63:76:29:18:ad:9a:a5:0e:e8:3e:b4:13:
         96:59:1a:77:cb:d2:e0:3b:dd:7b:df:f9:38:80:0e:7e:ee:58:
         1d:22:f9:7c:bc:d1:14:0e:e2:03:9a:06:53:b5:0b:2d:f7:b4:
         7a:a9:4f:c2:91:e1:ff:da:42:7c:e9:e7:a8:53:a7:41:dc:19:
         cb:6e:6c:19:56:50:e7:ac:0f:26:25:f1:43:d1:16:25:54:cd:
         0b:87:aa:69:0e:bd:00:40:ec:f5:5c:a3:22:c9:fa:ed:0f:4c:
         9b:6c:fe:89:f1:98:62:16:d4:21:5a:8c:29:ba:d0:23:07:cb:
         02:e5:a2:98:6c:6f:97:90:cf:b7:70:fe:59:41:6d:b5:0e:b2:
         05:53:0e:de:db:66:3b:69:4f:bf:a6:14:00:58:a3:0d:ee:9d:
         b2:52:52:1f:fe:36:98:d2:ec:d6:0a:e1:32:f9:5f:46:a6:50:
         a3:26:6b:e2:96:49:2b:c2:5e:8c:4f:31:d4:50:bd:4d:a4:31:
         31:74:78:0f:fd:bf:66:31:a2:0c:91:62:01:7e:07:76:f4:53:
         e7:a8:1c:c4:44:df:c0:be:6f:3f:6f:47:eb:0b:cf:50:b8:ba:
         c7:22:a0:e5:6e:20:b7:aa:59:b5:c0:31:84:cb:f6:6a:f9:b1:
         70:7c:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----