This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer
File:                     JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer (raw, json)
Hash identifier:          0elt/R+Nt6qj7c1YI9NoyhFyD146LWDjeCWNShX2RHI=
Subject key identifier:   24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:11 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 58840
                          IP: 110.236.0.0/15
                          IP: 113.18.0.0/16
                          IP: 182.157.0.0/16
                          IP: 2407:c400::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59110 (0xe6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:11 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=240ED9E7AD0A83829D8F1A990C9FF94D6A106ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:5e:00:a0:19:90:67:88:03:7f:49:fd:df:
                    90:57:76:f6:f5:a5:65:28:50:a4:45:96:c7:c6:70:
                    7c:3a:02:37:34:e7:27:53:97:c1:df:57:e4:ca:7f:
                    1c:e1:75:11:4b:5d:3c:46:04:86:72:38:f3:7e:d9:
                    16:20:12:ab:a5:9d:3e:1a:44:cf:10:ee:d2:d8:64:
                    3a:bb:7a:83:61:ad:b9:31:fc:f1:ea:74:71:fc:bb:
                    ac:ef:c9:7b:21:c2:2f:7e:00:04:0d:55:ea:a9:40:
                    bd:a0:06:e1:3e:a4:db:f1:9c:5c:4b:a3:c7:8b:96:
                    90:69:17:8a:af:53:d0:0c:73:ee:32:ea:f6:d3:cf:
                    30:92:97:de:d7:cd:45:88:fa:e6:fc:cc:bb:28:5b:
                    fc:31:8f:6e:b6:9c:f4:a7:42:8e:4d:6f:fd:f3:dc:
                    c6:df:3d:bd:35:7b:ff:00:93:76:06:4d:34:38:d5:
                    b7:28:71:80:c3:15:89:7f:b8:ae:7b:7d:f3:4f:76:
                    14:8f:20:de:17:e6:0a:6b:5f:72:96:e2:cf:16:2f:
                    c8:65:7c:2e:f7:77:cb:ad:81:5b:53:0f:6d:bc:16:
                    b8:a6:0f:2c:27:6a:22:10:22:02:c3:c0:f6:1a:39:
                    96:f7:1e:6b:ee:6b:38:c4:89:96:67:5c:be:6e:ea:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58840

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.236.0.0/15
                  113.18.0.0/16
                  182.157.0.0/16
                IPv6:
                  2407:c400::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:70:2e:4d:39:8c:90:4b:63:72:34:16:a6:3c:8a:4c:5f:a0:
         11:61:0a:05:99:ed:9c:50:49:2d:8b:de:8e:8b:e5:b4:01:3c:
         9c:0d:53:96:61:fc:0a:1c:a7:57:d2:15:56:51:06:d0:69:f8:
         4f:37:7d:d9:82:c5:1c:ba:21:ee:4b:76:15:18:4e:ca:ca:10:
         56:df:fc:88:ec:84:f8:94:e4:5e:3f:62:2e:60:0f:6f:5e:e3:
         a6:fb:be:72:bb:96:bb:00:3e:d0:64:b1:61:48:19:f2:33:9a:
         fa:be:b6:81:f6:64:bb:8e:38:67:0e:3c:1d:86:8c:72:f3:fd:
         64:cb:f3:74:a8:d6:45:ea:83:c3:01:f2:96:44:db:11:74:ad:
         b5:82:55:11:e9:ea:7e:ba:a0:cd:1f:72:cc:a8:9b:05:19:6c:
         74:ff:ca:4f:f4:dd:5a:b2:9d:18:b3:6e:99:65:1c:d0:28:3a:
         33:77:2a:bb:94:8d:b1:16:e0:50:aa:fd:89:4a:00:10:5e:02:
         5c:0b:53:18:6a:5b:49:82:21:5d:e5:5a:d3:60:5d:c9:82:04:
         af:da:57:16:3a:e9:cd:c1:69:ca:13:b8:f7:20:df:59:05:54:
         88:3a:e5:15:80:c7:53:cb:84:a1:e2:1d:c0:8b:64:e6:d6:18:
         9a:2e:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----