This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer
File:                     ImVJtimWQLSBXnDwQDUhopYBYN0.cer (raw, json)
Hash identifier:          lwhZ10H8M5dDKpk1t1qH/Y4Rc4XDBEI4yP2pzDCBC1w=
Subject key identifier:   22:65:49:B6:29:96:40:B4:81:5E:70:F0:40:35:21:A2:96:01:60:DD
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E7D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Wed 14 Jan 2026 19:56:32 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 131511
                          IP: 157.119.252.0/22
                          IP: 202.6.202.0/23
                          IP: 2402:2620::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59352 (0xe7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan 14 19:56:32 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=226549B6299640B4815E70F0403521A2960160DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:8b:cf:67:ca:c9:d4:16:2a:3a:93:78:2c:
                    75:f3:a6:70:e9:85:1c:91:23:50:94:e0:fc:02:25:
                    d9:a8:bf:54:22:1f:35:f7:27:82:a9:f9:2f:85:a1:
                    97:b6:44:5a:5c:30:54:af:a8:a8:c0:8e:a1:12:3c:
                    e3:b2:68:1e:fa:93:20:33:f2:55:a9:ef:92:47:d7:
                    f5:d2:c2:07:27:7f:ec:08:4b:57:1d:45:cc:bd:a3:
                    08:ed:91:b2:fe:aa:55:14:86:22:79:22:48:2a:d5:
                    80:6f:bb:54:c6:9e:6d:d8:3c:dc:ae:39:90:46:e6:
                    c0:a4:24:c6:98:e0:37:4d:6a:a6:40:53:e1:ce:4b:
                    d8:6b:81:c5:bc:c3:5a:cb:5b:43:29:cc:33:27:a2:
                    64:cb:5c:14:64:f8:84:72:e8:ee:c3:98:fd:65:d1:
                    34:9b:8d:32:69:ba:be:bc:55:8a:7a:38:f4:13:5f:
                    ef:d0:42:ef:36:63:b2:8c:9f:ba:45:08:6c:aa:ce:
                    ec:7b:a4:93:7e:08:aa:e1:ef:b2:67:6d:2b:d5:96:
                    cc:f4:68:cf:fe:6b:f8:49:e5:67:6e:e7:5c:09:a9:
                    e9:bf:37:ec:ac:a5:90:78:a5:9e:4e:df:64:45:d8:
                    19:1f:c0:ce:7b:59:b3:0c:85:d3:c1:d4:bf:4c:16:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:49:B6:29:96:40:B4:81:5E:70:F0:40:35:21:A2:96:01:60:DD
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131511

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.252.0/22
                  202.6.202.0/23
                IPv6:
                  2402:2620::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:75:bf:9f:43:e2:cc:65:b4:bb:0c:73:51:b7:96:b2:26:d2:
         99:91:ca:4c:26:5b:62:e9:62:aa:27:e5:ae:e2:99:d1:d8:f7:
         cf:e0:c8:4f:eb:c8:a3:c1:83:3c:77:1c:94:36:b2:9f:c6:ea:
         39:69:98:4d:da:a0:dc:d0:cc:09:fd:fe:d7:25:26:4f:58:29:
         f9:05:ae:94:dc:02:03:a7:6f:1a:b2:5d:78:5c:1d:c0:c3:48:
         f5:d7:ab:7c:e7:26:b4:c6:0a:41:7f:f1:b0:fa:d5:54:8c:35:
         ae:2d:e6:1d:02:34:be:73:6c:0d:55:c0:32:fc:ab:03:3d:5b:
         ad:13:ca:68:5f:a4:2f:df:29:56:09:74:00:7d:7a:3f:1b:ac:
         ac:f3:69:e2:92:44:e2:05:3c:3a:e1:04:0d:e7:a9:5c:23:18:
         f8:0b:bd:a6:5f:f9:a6:22:dc:51:3d:cc:18:06:92:4e:4d:51:
         9b:33:eb:70:3d:17:a4:f0:e7:fc:6c:07:89:57:6c:97:e7:06:
         dd:86:9f:8d:7d:e6:1f:31:57:6a:ab:39:1c:7f:44:0a:2a:b8:
         18:c8:6c:98:c9:78:15:7e:6a:04:bf:22:72:f7:97:c8:81:04:
         23:ad:99:3b:ea:b1:ac:eb:55:ee:9b:04:f4:d9:80:f8:9d:fa:
         9d:d1:3c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----