This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer File: JAYub_eOGiv-CxWIf_OE9ltu6qA.cer (raw, json) Hash identifier: O23kzkFJrBxdxUfrVa2PvfAQALS6vJaS1pu0qrnWPmQ= Subject key identifier: 24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E7B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 12 Jan 2026 19:58:24 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 9814 IP: 125.96.0.0 -- 125.98.255.255 IP: 180.202.0.0/15 IP: 210.72.224.0 -- 210.72.247.255 IP: 211.99.0.0/19 IP: 211.160.0.0/16 IP: 2402:3c00::/32 IP: 2408:6000::/24 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 59313 (0xe7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 12 19:58:24 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:06:98:8c:c1:16:6e:e1:d0:1b:34:93:82:c2: 41:5b:62:4f:47:e9:2a:32:b0:ea:a8:81:0d:b7:2a: 46:8b:e7:21:0e:c0:e0:15:4b:20:46:bd:5d:17:b3: 68:5e:ae:a0:9a:7f:54:2e:72:27:b0:17:44:2e:38: 77:e3:84:4f:8e:b5:e3:20:8c:dd:86:3d:80:13:5b: 30:71:b0:cc:58:f8:de:27:93:11:61:72:07:95:3a: 23:05:de:58:ac:5c:3f:c7:d4:27:83:1c:de:20:b5: 62:13:72:f9:c2:ab:d1:26:e6:35:2b:dd:6e:80:fa: 46:72:f4:20:2b:75:fa:c2:90:09:e0:18:74:36:5c: 48:b8:81:fc:4d:2b:7d:22:2b:1f:74:82:83:14:72: 25:af:c2:9f:c2:90:18:d5:f9:2d:85:9b:e2:35:a5: b4:1c:2b:58:29:d9:32:22:98:cf:3a:ad:1e:a9:de: 1b:3a:c0:de:5e:0e:52:ad:5d:c5:d2:df:83:53:36: 78:da:2c:1d:dc:d3:10:47:c0:4f:37:eb:01:4c:c8: 06:3b:cf:a7:b4:a7:64:19:27:1b:ba:d5:c9:06:8e: 9e:41:2b:3c:8a:22:3c:d3:60:34:ea:d1:79:de:a8: 94:fe:8e:a2:7b:a4:4a:9d:dc:29:1e:e4:70:ce:1f: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9814 sbgp-ipAddrBlock: critical IPv4: 125.96.0.0-125.98.255.255 180.202.0.0/15 210.72.224.0-210.72.247.255 211.99.0.0/19 211.160.0.0/16 IPv6: 2402:3c00::/32 2408:6000::/24 Signature Algorithm: sha256WithRSAEncryption 3e:12:01:30:62:9d:a3:49:d5:0e:ae:f6:40:88:b2:6e:d6:af: c1:3c:d1:36:57:6e:a4:cb:7c:e9:e1:cd:2e:ee:68:cd:f9:6b: bc:43:ca:8b:3e:98:13:5d:28:3c:8f:3d:11:01:bc:1c:b3:ce: 0a:0c:85:43:52:23:b0:3c:9d:16:c3:a8:2f:f2:b4:00:dc:05: 28:33:a2:8f:e1:d3:9b:dc:13:5f:97:5f:c0:e6:f5:59:f2:23: 64:ad:3b:c8:a1:19:ee:2e:cd:87:4b:6c:89:62:81:ec:d2:f4: 75:79:b4:32:24:ae:d1:91:65:cc:a4:cb:b8:06:9f:bd:0e:d5: 95:83:01:b0:1d:98:fb:33:ba:73:dc:15:87:10:fb:85:b4:e8: 62:4f:22:4c:d6:92:43:a0:e9:87:32:e5:64:fb:de:43:c7:65: 36:45:f6:66:cb:18:65:48:c0:ef:20:32:5e:c2:9a:19:c7:fa: a1:74:d7:c5:73:db:dd:3c:5a:2f:0c:03:62:3e:49:82:5a:27: e0:3b:60:84:28:41:93:57:d7:02:48:da:0a:dd:54:ae:ef:d9: 61:d7:cc:78:23:61:12:5d:09:0f:94:9d:83:27:72:14:a4:5f: 43:ed:8e:3a:b6:d2:9b:b6:d9:75:d4:9e:a3:0a:70:92:41:de: 51:78:4e:1e -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIDAOexMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMTIxOTU4MjRaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDI0MDYyRTZGRjc4RTFBMkJGRTBCMTU4ODdGRjM4NEY2NUI2RUVB QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBpiMwRZu4dAbNJOC wkFbYk9H6SoysOqogQ23KkaL5yEOwOAVSyBGvV0Xs2herqCaf1QuciewF0QuOHfj hE+OteMgjN2GPYATWzBxsMxY+N4nkxFhcgeVOiMF3lisXD/H1CeDHN4gtWITcvnC q9Em5jUr3W6A+kZy9CArdfrCkAngGHQ2XEi4gfxNK30iKx90goMUciWvwp/CkBjV +S2Fm+I1pbQcK1gp2TIimM86rR6p3hs6wN5eDlKtXcXS34NTNnjaLB3c0xBHwE83 6wFMyAY7z6e0p2QZJxu61ckGjp5BKzyKIjzTYDTq0XneqJT+jqJ7pEqd3Cke5HDO H5OtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJAYub/eOGiv+CxWIf/OE9ltu6qAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHUBggrBgEFBQcBCwSBxzCBxDA3BggrBgEF BQcwBYYrcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzgw LzBWBggrBgEFBQcwCoZKcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzgwL0pBWXViX2VPR2l2LUN4V0lmX09FOWx0dTZxQS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICJlYwWAYIKwYBBQUHAQcBAf8ESTBHMDAEAgAB MCowCgMDBX1gAwMAfWIDAwG0yjAMAwQF0kjgAwQD0kjwAwQF02MAAwMA06AwEwQC AAIwDQMFACQCPAADBAAkCGAwDQYJKoZIhvcNAQELBQADggEBAD4SATBinaNJ1Q6u 9kCIsm7Wr8E80TZXbqTLfOnhzS7uaM35a7xDyos+mBNdKDyPPREBvByzzgoMhUNS I7A8nRbDqC/ytADcBSgzoo/h05vcE1+XX8Dm9VnyI2StO8ihGe4uzYdLbIligezS 9HV5tDIkrtGRZcyky7gGn70O1ZWDAbAdmPszunPcFYcQ+4W06GJPIkzWkkOg6Ycy 5WT73kPHZTZF9mbLGGVIwO8gMl7CmhnH+qF018Vz2908Wi8MA2I+SYJaJ+A7YIQo QZNX1wJI2grdVK7v2WHXzHgjYRJdCQ+UnYMnchSkX0Ptjjq20pu22XXUnqMKcJJB 3lF4Th4= -----END CERTIFICATE-----Generated at Mon Jan 19 12:20:25 2026 by rpki-client