This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
File:                     LsLMuD3fv0MzIma3amIhNiFD42U.cer (raw, json)
Hash identifier:          6rXI3VNTsABybsS1NuLHhaGFRPV8hTmwMR49umy+9G8=
Subject key identifier:   2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E7AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 12 Jan 2026 19:58:21 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151268
                          IP: 103.109.20.0/22
                          IP: 103.236.52.0 -- 103.236.67.255
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59311 (0xe7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan 12 19:58:21 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=2EC2CCB83DDFBF43332266B76A6221362143E365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:f8:53:67:7b:01:ef:8c:ae:e4:a5:70:71:
                    6d:e9:0c:ec:56:4f:ac:3e:f4:7e:d1:fc:ea:ce:dd:
                    c5:62:fd:da:4d:9b:73:38:96:e2:8f:d4:b6:fe:1c:
                    94:a3:cd:d3:fc:b0:5e:00:93:29:c1:ea:44:5c:9e:
                    4b:a2:47:7e:f5:21:1e:dd:91:97:29:c1:67:c0:6a:
                    55:29:29:5a:b4:02:ab:72:52:8e:39:8f:20:b9:f8:
                    d5:02:51:da:f6:a4:a6:df:7c:61:da:92:91:bf:4a:
                    cd:99:42:b7:33:b4:3b:3a:3f:19:ea:07:d1:b6:06:
                    fa:0c:5c:1e:20:f6:cd:de:0f:86:3e:d6:ec:c3:f2:
                    68:46:87:8f:3e:06:f7:b7:43:fd:bc:09:b6:ab:fc:
                    51:d9:1f:df:1b:7a:f4:91:00:9c:ac:46:41:a7:a4:
                    0b:50:68:3e:09:08:5a:f7:24:bf:f0:2e:cd:59:f5:
                    a4:ee:5e:ea:c9:a8:33:7f:b7:10:f8:47:48:88:76:
                    e6:76:5e:9b:5e:00:25:1b:a5:9a:aa:91:38:9f:67:
                    42:f0:25:df:75:29:83:1e:bd:7f:e1:ad:c4:a2:aa:
                    91:5c:f2:06:85:c1:e5:de:df:83:6a:a9:e5:0c:e8:
                    43:85:d2:f3:32:09:7e:d2:9e:ce:43:de:f5:2a:cb:
                    b2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151268

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.20.0/22
                  103.236.52.0-103.236.67.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:05:24:6a:a3:8e:73:47:ae:9f:e6:3a:cb:7a:8f:50:e3:cf:
         06:4c:1d:93:38:b1:40:14:72:37:02:95:fa:c6:46:ae:6f:6f:
         ea:02:1a:f6:29:d3:88:15:35:49:25:2f:b2:48:3e:cb:22:92:
         32:ee:ae:54:c3:bc:8e:9b:3c:2f:b0:99:1f:f5:a9:8d:20:0c:
         98:e6:9a:cd:60:5a:58:03:d5:30:47:42:5c:ef:c9:b7:98:22:
         f6:f5:77:d6:be:91:e9:61:3c:c6:3c:30:a0:6c:69:e6:79:9b:
         39:3e:07:ec:fa:42:17:71:72:2f:5f:8d:0d:4b:90:16:76:f6:
         9a:37:51:f3:d7:d0:5c:a1:1f:ef:ad:40:cf:ea:ed:50:ae:51:
         f4:3c:f5:07:ef:1e:7b:53:b1:8d:b0:00:e8:62:9d:a0:ce:45:
         ef:d6:8f:6d:e5:68:cd:01:39:7c:db:06:bc:14:5a:58:f7:ce:
         10:c6:e9:ba:98:bb:7e:94:17:95:1a:4d:ad:e8:b1:b5:f9:24:
         13:bc:43:88:59:08:91:78:ae:df:b4:ae:90:e9:5d:5a:b9:81:
         fa:5e:31:d1:d9:60:0e:81:e1:e5:d4:60:84:be:df:81:aa:e8:
         83:4d:ad:69:f4:1f:e9:c3:06:07:2b:9a:b0:ba:61:ab:4b:d3:
         1e:0d:ad:10
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIDAOevMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMTIxOTU4MjFaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDJFQzJDQ0I4M0RERkJGNDMzMzIyNjZCNzZBNjIyMTM2MjE0M0Uz
NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7fhTZ3sB74yu5KVw
cW3pDOxWT6w+9H7R/OrO3cVi/dpNm3M4luKP1Lb+HJSjzdP8sF4AkynB6kRcnkui
R371IR7dkZcpwWfAalUpKVq0AqtyUo45jyC5+NUCUdr2pKbffGHakpG/Ss2ZQrcz
tDs6PxnqB9G2BvoMXB4g9s3eD4Y+1uzD8mhGh48+Bve3Q/28Cbar/FHZH98bevSR
AJysRkGnpAtQaD4JCFr3JL/wLs1Z9aTuXurJqDN/txD4R0iIduZ2XpteACUbpZqq
kTifZ0LwJd91KYMevX/hrcSiqpFc8gaFweXe34NqqeUM6EOF0vMyCX7Sns5D3vUq
y7JNAgMBAAGjggJ/MIICezAdBgNVHQ4EFgQULsLMuD3fv0MzIma3amIhNiFD42Uw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
MzEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzMzMS9Mc0xNdUQzZnYwTXpJbWEzYW1JaE5pRkQ0MlUubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO5DAtBggrBgEFBQcBBwEB/wQeMBww
GgQCAAEwFAMEAmdtFDAMAwQCZ+w0AwQCZ+xAMA0GCSqGSIb3DQEBCwUAA4IBAQCf
BSRqo45zR66f5jrLeo9Q488GTB2TOLFAFHI3ApX6xkaub2/qAhr2KdOIFTVJJS+y
SD7LIpIy7q5Uw7yOmzwvsJkf9amNIAyY5prNYFpYA9UwR0Jc78m3mCL29XfWvpHp
YTzGPDCgbGnmeZs5Pgfs+kIXcXIvX40NS5AWdvaaN1Hz19BcoR/vrUDP6u1QrlH0
PPUH7x57U7GNsADoYp2gzkXv1o9t5WjNATl82wa8FFpY984Qxum6mLt+lBeVGk2t
6LG1+SQTvEOIWQiReK7ftK6Q6V1auYH6XjHR2WAOgeHl1GCEvt+BquiDTa1p9B/p
wwYHK5qwumGrS9MeDa0Q
-----END CERTIFICATE-----