This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/KIbeg5SgnMzWLU6w5QHhsxUy7VE.cer
File:                     KIbeg5SgnMzWLU6w5QHhsxUy7VE.cer (raw, json)
Hash identifier:          mi95cDpKDXC5+5rxCH0VnQe6nt40sdirHPvy0CWkiKI=
Subject key identifier:   28:86:DE:83:94:A0:9C:CC:D6:2D:4E:B0:E5:01:E1:B3:15:32:ED:51
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E77E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/KIbeg5SgnMzWLU6w5QHhsxUy7VE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:31:31 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 119.233.128.0/17
                          IP: 2404:b900::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59262 (0xe77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:31:31 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=2886DE8394A09CCCD62D4EB0E501E1B31532ED51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:09:c7:93:c1:fc:89:07:4c:4b:db:dd:c5:
                    41:04:7b:27:fa:c1:31:99:41:97:31:fa:07:a4:50:
                    81:8f:f7:bb:30:94:4f:bc:99:46:79:ee:bf:e7:40:
                    ea:30:61:0d:9b:1c:93:22:9f:16:30:c1:ce:66:9a:
                    69:fb:88:44:e7:db:3d:8b:82:4b:50:eb:8d:f0:f4:
                    cb:77:a3:92:78:02:75:72:a5:01:d5:ca:27:9f:81:
                    6e:16:73:79:c2:43:32:34:6a:ed:8f:e1:d9:30:f8:
                    bf:95:2d:d5:8e:22:84:0d:a4:ec:9d:20:2f:d3:b1:
                    0b:0a:79:39:7c:53:0f:26:14:39:c8:38:a4:72:04:
                    f2:53:34:67:72:2c:bc:fa:51:93:65:50:fc:df:2d:
                    41:7d:3b:9d:8c:e5:1d:f3:67:f4:87:1a:ad:90:99:
                    4c:74:2e:bf:16:94:3c:2b:28:2f:c9:e7:d9:b5:cd:
                    7e:d0:99:dd:75:12:50:35:af:d8:65:a1:8a:27:99:
                    f1:d6:ed:9e:36:75:cb:da:5d:66:ed:87:4a:fd:73:
                    59:7b:b5:cd:70:71:c6:a3:5b:34:69:f9:5c:df:c8:
                    31:8f:b8:52:89:e6:8f:3d:e2:c7:b2:84:76:95:46:
                    f5:90:ac:da:67:86:20:91:32:dc:2d:6d:31:13:26:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:86:DE:83:94:A0:9C:CC:D6:2D:4E:B0:E5:01:E1:B3:15:32:ED:51
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/181/KIbeg5SgnMzWLU6w5QHhsxUy7VE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.233.128.0/17
                IPv6:
                  2404:b900::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:24:e0:d7:65:50:7c:21:18:16:a6:32:06:dc:9f:42:3c:7a:
         79:72:e2:c2:29:ed:92:13:be:e3:30:68:2f:6e:7f:60:45:8b:
         02:60:a0:b2:f7:50:61:8e:d2:d8:75:ba:54:44:e6:d1:7d:0d:
         95:87:3e:5e:6b:48:f3:18:53:12:0c:28:4a:fa:19:b0:9d:45:
         47:45:eb:3c:2f:bf:ff:a0:fb:18:bd:d9:14:7f:67:36:73:7a:
         79:a0:0b:45:5b:84:a0:8f:ff:80:c2:6d:f6:f0:51:83:01:61:
         71:f3:3a:20:7e:fc:9f:4c:01:4d:f0:dc:ac:85:26:96:01:8c:
         aa:d4:1e:2c:d7:cb:cd:41:37:36:f8:fe:3a:35:60:28:90:65:
         88:98:32:f7:6a:90:00:15:28:43:76:c9:88:c4:6a:77:ea:ac:
         19:82:d9:3a:3e:59:5d:5b:3e:85:3b:bc:9f:95:80:01:b9:04:
         43:e9:cb:3a:57:be:4a:25:f3:d1:70:ba:e9:ec:d4:a4:83:67:
         e6:19:43:32:5f:4f:e7:59:c3:87:e9:c6:86:8a:72:ac:fb:10:
         fe:f7:f9:9a:5d:38:75:fb:74:59:55:85:93:e7:b4:7c:86:6d:
         aa:96:d6:fa:5d:3e:b4:e5:65:d2:ae:2d:c6:d1:49:e2:77:f3:
         64:b2:fe:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----