This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RJgA4NOab6QpLdGwZto9qI0i-rw.cer
File:                     RJgA4NOab6QpLdGwZto9qI0i-rw.cer (raw, json)
Hash identifier:          O4Otk5TCaUQQLJi/7OWeTNxjqNWVuwsMOxM6xJ7Fw3Y=
Subject key identifier:   44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       44F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Tue 20 Jan 2026 19:58:17 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 160.250.14.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17648 (0x44f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Jan 20 19:58:17 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=449800E0D39A6FA4292DD1B066DA3DA88D22FABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:13:67:6d:f8:d2:3d:ae:b1:9d:c5:c1:08:
                    d5:de:1d:5b:36:a2:82:72:cf:22:96:c6:52:b1:a0:
                    53:79:6f:47:32:ff:9e:b5:75:f0:c3:1e:04:5e:7b:
                    03:08:3d:3c:cb:db:11:a2:4d:c9:57:73:f0:3a:37:
                    8e:73:b1:29:0f:71:71:ef:0a:b3:7a:7b:79:ff:33:
                    23:b9:bb:c5:8b:8b:b7:24:da:5f:19:ce:19:e0:4e:
                    3f:ea:af:67:5d:73:61:51:54:29:17:a5:8f:d8:7d:
                    11:19:9c:ac:f1:ee:35:2d:01:98:15:1e:9e:f0:6e:
                    e6:48:85:5f:9b:fc:9a:24:8d:0f:ad:cb:b3:e7:ea:
                    95:27:a7:5c:79:9f:af:8a:71:01:b3:21:80:29:9b:
                    5b:8e:a7:0f:b6:39:e6:5f:95:72:4a:60:03:59:9f:
                    d6:86:31:59:52:40:4b:45:0b:2e:dc:8a:31:12:28:
                    ed:7c:5c:cf:b5:ea:a4:53:19:de:36:2b:ce:bd:57:
                    c4:2d:39:2e:9e:da:af:be:d4:72:49:7d:50:a7:b4:
                    ef:d7:a3:7b:8b:f1:96:96:54:87:71:5d:78:f9:5d:
                    7e:9f:13:7f:95:65:bd:9d:05:4f:2f:7c:12:f6:36:
                    3d:8e:c9:b9:da:45:a3:a3:a0:11:5a:9c:b2:9e:5f:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:98:00:E0:D3:9A:6F:A4:29:2D:D1:B0:66:DA:3D:A8:8D:22:FA:BC
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/RJgA4NOab6QpLdGwZto9qI0i-rw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:b9:8c:9c:89:e5:37:81:45:73:8a:e2:ef:00:92:c8:44:
         45:92:0d:24:c2:d5:ce:6b:ac:ff:75:6e:eb:ea:bc:1a:7a:3f:
         d0:7a:63:ea:40:07:a4:c8:7b:75:90:55:b6:1e:3a:df:31:93:
         af:c0:09:73:8e:46:ed:62:9a:51:7d:12:29:30:f7:f9:95:0c:
         94:fc:6b:c4:aa:7a:5e:a0:a6:71:05:7c:c8:bf:e2:e8:97:da:
         c7:e5:9c:39:06:0e:1b:31:d7:dd:43:9b:a4:49:5e:9e:f4:87:
         91:97:dc:18:98:a5:62:cb:38:d8:c6:04:c3:33:54:98:ca:9a:
         0f:ae:de:76:97:00:b9:59:c6:6f:cf:0a:72:2e:93:a8:54:e9:
         28:c9:2c:90:04:21:f3:67:ae:71:73:36:f2:81:28:98:b6:bd:
         fd:16:77:7b:e7:44:8a:0c:af:4f:9c:12:75:36:23:84:47:56:
         81:bf:aa:b2:86:40:1c:38:71:8c:3a:ce:a3:11:f2:c9:60:3f:
         d7:97:b2:aa:7c:34:61:1f:30:39:dd:65:5b:f4:cd:75:8f:a4:
         c3:6a:db:20:84:41:f6:b1:44:70:19:3a:1d:b3:89:96:73:07:
         9f:e9:0f:fd:ae:95:7c:3f:12:33:96:62:0d:0e:b8:be:4b:aa:
         aa:83:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----