This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QV82SQKuPpLOqr3b3NRhLqut6pg.cer
File:                     QV82SQKuPpLOqr3b3NRhLqut6pg.cer (raw, json)
Hash identifier:          PwWyCUQHBXhQ17ewbjV/NDy5bXERs2cw8u5F57D+ldg=
Subject key identifier:   41:5F:36:49:02:AE:3E:92:CE:AA:BD:DB:DC:D4:61:2E:AB:AD:EA:98
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/QV82SQKuPpLOqr3b3NRhLqut6pg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:08 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151283
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59108 (0xe6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:08 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=415F364902AE3E92CEAABDDBDCD4612EABADEA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:60:1e:c8:f6:81:5f:76:c2:e2:4a:d4:d2:
                    45:fb:e9:e0:5a:c3:8b:31:bd:04:c4:3a:c6:2f:0d:
                    8e:b5:56:2b:3e:60:e3:60:6a:1e:64:a3:6a:98:f6:
                    13:70:e3:90:87:92:8f:dc:4c:51:43:97:66:d4:c4:
                    68:19:c3:d3:8d:e7:90:d5:0e:0c:37:8e:1f:33:df:
                    9b:74:e3:6d:b1:72:31:cd:b8:51:fa:a1:3a:eb:a8:
                    32:53:cf:99:1b:ae:9b:f2:fa:bd:a2:9d:6f:a0:0b:
                    55:82:7e:84:56:93:d9:0a:f0:0a:39:2d:b7:8a:cf:
                    9b:12:72:a1:07:6a:c1:a5:2a:c1:61:4b:c3:94:47:
                    71:40:42:68:11:db:19:6c:bd:b2:9a:3c:31:04:bf:
                    94:c4:e6:32:c3:14:3c:91:53:40:f3:32:93:83:22:
                    4f:bc:1f:24:5b:13:9f:01:77:a6:6a:a5:17:92:e5:
                    c0:8b:c2:ce:4d:9e:32:eb:bd:4a:b2:a8:23:e7:cf:
                    d3:01:0f:b5:18:e1:5c:20:e1:a0:2e:cd:19:60:59:
                    43:cb:22:f7:c7:a6:ff:81:67:c5:71:bf:37:70:45:
                    5a:7a:1e:51:db:fb:bf:0a:af:a1:ff:0b:bc:65:b3:
                    ba:ff:69:e9:5b:55:39:10:4b:c6:60:17:fa:de:e1:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5F:36:49:02:AE:3E:92:CE:AA:BD:DB:DC:D4:61:2E:AB:AD:EA:98
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3299/QV82SQKuPpLOqr3b3NRhLqut6pg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151283

    Signature Algorithm: sha256WithRSAEncryption
         47:1d:a7:37:46:d1:22:e3:dd:84:5e:b1:ac:2d:23:31:a9:15:
         d7:f4:71:e0:4b:2c:cd:66:a1:e4:ad:65:77:3a:5c:13:fd:01:
         b4:9e:3b:07:62:8f:9e:ee:8d:df:13:78:ac:01:d6:22:e7:c8:
         80:d2:08:cb:46:b2:68:14:63:2e:df:37:52:fd:aa:2c:c0:62:
         2e:99:96:6d:04:ed:dd:25:2c:72:00:3e:34:47:86:15:1d:dc:
         78:2c:19:78:a3:15:45:9d:78:7b:db:b6:e3:bc:82:6c:00:f7:
         fb:42:e1:06:34:69:78:0a:30:5b:95:38:1f:d6:5c:8f:21:e0:
         2b:4c:96:72:5e:75:4f:de:b3:c8:b6:d8:b4:79:8c:92:ac:df:
         67:11:4a:96:ba:82:a1:d4:01:ff:1f:38:dc:62:ee:b4:79:f1:
         af:c9:59:ad:dd:56:aa:09:41:d6:05:c9:4d:11:d6:53:0f:7e:
         b5:ca:c8:8f:08:a3:a1:9d:e6:c7:74:1f:1e:92:f7:3d:7a:dc:
         f8:81:7d:ab:fe:9d:49:dc:34:65:93:03:ff:2a:c3:ca:44:eb:
         68:02:c0:43:fc:d1:94:97:e9:da:cb:6a:a6:53:24:7c:5c:83:
         b1:6d:7c:f9:71:57:9c:32:1e:7c:1b:65:87:84:39:a5:46:46:
         f7:1c:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----