This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer
File:                     R2fj9DSSQBFPCs03VtVATczdRXg.cer (raw, json)
Hash identifier:          ZG4Ea9ZpPTtY686Owlzw+Q1uK6ghiyjYp7jqJV7gV6g=
Subject key identifier:   47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E740
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:30:38 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 63588
                          IP: 202.136.80.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59200 (0xe740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:30:38 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=4767E3F4349240114F0ACD3756D5404DCCDD4578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:c2:69:c7:b3:4b:47:4a:03:1c:24:92:ba:
                    66:95:1d:15:89:a3:11:0f:5f:30:62:7b:56:1f:87:
                    5f:fb:91:d3:a5:e7:4a:52:ae:28:32:ef:f4:d6:7f:
                    ae:a9:f1:22:53:c3:31:87:7a:a7:11:a4:97:c6:48:
                    8b:42:35:e5:b6:43:8a:58:aa:c8:a0:4d:5f:0d:6d:
                    e9:20:69:d0:12:6c:46:7a:a5:4d:c3:b2:69:d5:e7:
                    84:36:65:4a:ea:e7:45:0b:36:10:61:6f:92:84:f1:
                    8c:4d:8b:ec:8e:fd:33:19:79:71:f5:5d:00:c4:e2:
                    fc:30:f6:b1:0c:01:cc:30:67:b3:ff:92:b4:0f:a0:
                    07:f5:7d:c7:40:c7:50:92:07:87:de:d0:e0:c9:2b:
                    ed:3d:b3:2c:7c:59:0b:4c:a9:4f:90:2b:cc:55:68:
                    00:4c:6a:bb:8b:63:cc:23:e7:4a:70:bc:70:02:c2:
                    93:2d:6e:06:1f:98:b5:1e:89:f4:86:a7:58:86:53:
                    c5:7d:06:a0:93:01:bf:41:f5:09:39:66:c5:cb:6b:
                    7c:4f:98:fb:50:46:79:07:7b:f0:b4:4d:31:50:3d:
                    24:e9:98:1d:bc:de:fc:57:cc:99:c6:bf:a4:34:09:
                    03:47:3a:98:ae:c5:ef:18:01:de:b1:92:2d:5d:d2:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63588

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.136.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:ee:25:7a:30:98:4c:51:91:25:05:90:6e:41:04:4e:87:
         41:db:4f:25:49:80:d2:98:e0:eb:2e:34:73:d4:4c:47:0f:e4:
         71:74:8b:ef:82:ad:e9:98:76:39:f3:1b:b5:e3:b8:f8:ee:4d:
         aa:08:2a:d5:b9:30:62:ce:71:9d:ec:cd:d1:93:d6:be:fe:79:
         ad:e1:85:2a:05:09:60:00:d0:21:c2:2e:73:a9:0d:a2:5d:b2:
         23:52:5c:63:63:18:df:35:bd:74:c0:34:3c:82:6a:11:2c:45:
         d5:f1:a5:7d:00:42:b0:29:65:fe:a1:94:8c:c2:af:53:70:8c:
         27:29:db:85:ba:28:30:55:ef:5d:17:9a:4a:3e:66:99:f9:d5:
         de:08:27:3f:60:45:ed:a0:6b:9c:ca:3e:dd:30:3c:cb:cb:f6:
         70:8a:d2:a7:6e:15:08:5f:44:96:b3:39:c8:28:2a:72:c9:81:
         a6:85:d2:0c:53:25:b6:6f:79:4a:f4:f0:a7:e9:6d:1e:0f:61:
         58:c1:69:9e:09:ce:78:07:35:45:6b:44:6c:c5:46:2f:12:e0:
         ec:55:a0:bb:4e:80:b6:4b:ea:7c:c3:a0:6e:49:a1:bb:91:56:
         13:61:06:9a:a4:06:d5:54:b6:60:14:b9:a6:91:dd:85:53:36:
         bb:e6:3d:90
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIDAOdAMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMwMzhaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDQ3NjdFM0Y0MzQ5MjQwMTE0RjBBQ0QzNzU2RDU0MDREQ0NERDQ1
NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXMJpx7NLR0oDHCSS
umaVHRWJoxEPXzBie1Yfh1/7kdOl50pSrigy7/TWf66p8SJTwzGHeqcRpJfGSItC
NeW2Q4pYqsigTV8NbekgadASbEZ6pU3DsmnV54Q2ZUrq50ULNhBhb5KE8YxNi+yO
/TMZeXH1XQDE4vww9rEMAcwwZ7P/krQPoAf1fcdAx1CSB4fe0ODJK+09syx8WQtM
qU+QK8xVaABMaruLY8wj50pwvHACwpMtbgYfmLUeifSGp1iGU8V9BqCTAb9B9Qk5
ZsXLa3xPmPtQRnkHe/C0TTFQPSTpmB283vxXzJnGv6Q0CQNHOpiuxe8YAd6xki1d
0t1jAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUR2fj9DSSQBFPCs03VtVATczdRXgw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
OTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM5MS9SMmZqOURTU1FCRlBDczAzVnRWQVRjemRSWGcubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4ZDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAcqIUDANBgkqhkiG9w0BAQsFAAOCAQEAFI7uJXowmExRkSUFkG5B
BE6HQdtPJUmA0pjg6y40c9RMRw/kcXSL74Kt6Zh2OfMbteO4+O5Nqggq1bkwYs5x
nezN0ZPWvv55reGFKgUJYADQIcIuc6kNol2yI1JcY2MY3zW9dMA0PIJqESxF1fGl
fQBCsCll/qGUjMKvU3CMJynbhbooMFXvXReaSj5mmfnV3ggnP2BF7aBrnMo+3TA8
y8v2cIrSp24VCF9ElrM5yCgqcsmBpoXSDFMltm95SvTwp+ltHg9hWMFpngnOeAc1
RWtEbMVGLxLg7FWgu06AtkvqfMOgbkmhu5FWE2EGmqQG1VS2YBS5ppHdhVM2u+Y9
kA==
-----END CERTIFICATE-----