This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer
File:                     GubvWysCBd1fK0KBGsYIANaP1KA.cer (raw, json)
Hash identifier:          GK9O4uxJ/hJbpz2OdAxkv71ojEnkeLbuWRuYBkB0+b4=
Subject key identifier:   1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E662
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:26:28 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 139187
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58978 (0xe662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:26:28 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:1a:a5:ba:13:6a:53:d5:96:96:31:9c:90:
                    13:68:51:5b:16:76:98:aa:cf:c9:6e:6a:4f:67:76:
                    2a:f9:0a:ae:9c:67:b0:83:8e:ee:c7:c7:66:e4:6f:
                    31:71:c8:38:9d:9d:7b:e7:7a:c1:35:2a:ee:89:13:
                    34:f1:79:95:ce:d9:c6:7a:53:11:e0:58:98:ab:aa:
                    1c:d0:d1:18:39:e3:04:43:cb:41:14:63:b0:c1:31:
                    90:a4:a8:2e:e8:a0:a0:a6:9c:c0:97:da:6e:27:a1:
                    71:35:e5:89:f6:4c:2c:17:df:3f:ce:e2:b9:a2:f9:
                    0e:79:23:79:1f:cb:51:d1:af:49:4d:53:97:96:b1:
                    99:76:f0:63:cd:4a:aa:2a:09:68:fc:1f:16:1b:01:
                    a6:ba:24:b4:0b:8d:65:80:e6:f7:81:19:61:4c:38:
                    cc:81:83:71:08:d4:db:9a:ba:01:0f:57:ef:bd:67:
                    fa:f6:fc:c9:fa:33:03:80:d7:99:29:ed:3a:d5:04:
                    8e:d9:31:1d:5c:33:36:a2:e7:6a:98:ac:bd:23:21:
                    73:7f:42:1c:92:3e:44:f2:48:28:a9:36:e6:bf:c4:
                    37:89:fb:78:a7:8b:78:98:ea:21:df:00:88:93:2c:
                    73:7d:f1:35:e1:84:2f:73:3f:f7:29:b3:21:f8:1c:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139187

    Signature Algorithm: sha256WithRSAEncryption
         81:30:24:98:91:27:b5:bb:5e:66:ff:63:41:66:af:fd:67:12:
         9a:f7:35:b0:85:6d:4e:54:2f:d3:09:d1:b7:a2:8f:b5:9e:17:
         2b:c5:64:47:9d:a8:80:d4:1d:e8:50:3b:86:d5:bb:f1:ea:de:
         58:23:39:5b:08:d9:06:ff:74:e0:d2:c7:dd:de:b1:b9:93:e0:
         89:b4:25:ab:51:66:7c:66:41:f7:d2:71:32:44:92:f1:a9:ff:
         6c:4a:1d:8a:eb:13:eb:ac:7d:49:b9:ce:17:cc:ce:69:55:29:
         6d:68:7a:e3:9d:7e:49:be:24:15:d5:4e:b5:d6:2f:0b:63:48:
         7d:c3:20:fd:28:8f:01:04:f4:15:82:e3:c0:25:bf:2c:37:ca:
         6b:69:ef:16:2f:ad:9a:2c:8a:36:08:17:68:9a:18:a1:eb:18:
         47:55:17:e3:e7:2e:d8:ec:d6:70:e4:83:ea:0c:6e:79:72:8b:
         26:3f:f0:6c:e8:37:ec:f4:26:56:df:e6:15:ff:8f:6e:17:22:
         f7:ed:7f:db:65:0c:10:65:0b:10:4c:4c:13:b0:a2:24:ee:1a:
         72:ad:09:25:26:8f:0d:94:99:12:33:e8:0e:4c:b4:d4:66:81:
         30:21:2c:b2:16:f2:20:b7:3c:91:bd:15:8b:b3:82:54:14:13:
         59:ad:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----