This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.cer
File:                     _jLzsa0kZXSFtEO5cMb5v6Eil3Q.cer (raw, json)
Hash identifier:          7EKkRjpBNaNVqR04QZ7aVRU2uiU8+G6Afi2FHmpXUGU=
Subject key identifier:   FE:32:F3:B1:AD:24:65:74:85:B4:43:B9:70:C6:F9:BF:A1:22:97:74
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E62A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3384/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3384/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:25:40 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 2402:1c20::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58922 (0xe62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:25:40 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=FE32F3B1AD24657485B443B970C6F9BFA1229774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:34:6a:7f:e7:2d:69:27:67:db:f5:a1:4a:
                    ac:c2:c0:c0:bb:e0:be:c2:17:6f:7d:f4:f7:9e:c8:
                    e2:51:bd:41:4d:52:a3:1f:09:96:06:09:c3:a4:0d:
                    ea:70:b1:3e:5d:d0:17:ab:85:c8:ec:e9:e6:c8:16:
                    54:00:7e:dd:96:4b:d8:fb:6f:2b:16:06:bb:42:8a:
                    47:ee:ca:ed:ca:21:4f:2f:7f:81:cc:21:90:92:a5:
                    c3:aa:84:ab:40:74:d1:a5:8d:e9:76:f0:4a:d6:24:
                    99:5d:c3:6a:4f:0a:3d:30:e8:8c:ac:8b:c5:02:81:
                    a6:09:e9:3c:ac:53:55:08:85:84:64:73:54:2d:e6:
                    18:a2:77:4e:1a:19:ac:0d:d6:c3:66:ac:51:97:2c:
                    dd:4c:3e:c1:c0:44:6d:c5:6e:3b:85:49:71:a1:83:
                    c1:ec:68:34:09:3f:41:41:37:92:95:09:70:28:64:
                    e3:a1:70:d1:ec:53:2e:1a:ce:44:90:66:b2:fe:ec:
                    3d:d4:97:a3:7e:88:bc:22:b0:95:d6:96:76:c5:bd:
                    28:22:ec:ca:e1:e1:51:aa:41:11:07:03:1d:b0:bb:
                    b0:15:c8:be:59:8b:5a:00:b3:54:51:50:13:13:1e:
                    81:95:c1:85:5d:b4:99:c8:5b:4d:cd:3a:17:81:76:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:32:F3:B1:AD:24:65:74:85:B4:43:B9:70:C6:F9:BF:A1:22:97:74
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3384/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3384/_jLzsa0kZXSFtEO5cMb5v6Eil3Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:a7:95:05:60:f5:d1:4a:ee:38:32:5f:9a:4d:ff:c5:e7:
         fe:0f:d7:56:dd:06:45:5b:c8:fa:87:1f:21:a3:60:cf:4e:f6:
         13:e8:72:2a:51:e9:f3:94:ac:b4:66:80:3f:2e:44:a9:83:bc:
         4e:ae:61:81:da:bd:5c:e9:17:a5:4f:8f:88:22:04:50:43:4a:
         30:43:67:a6:17:b0:94:6b:00:f7:5d:59:7d:9c:08:13:67:38:
         ae:8b:32:3a:cf:ad:73:f5:14:14:e3:3d:e3:64:9c:c1:f8:8b:
         56:23:b8:4d:c6:cc:8a:6f:c5:07:48:6a:2e:e3:de:59:3c:83:
         db:4c:6f:62:4d:1e:d9:11:e2:11:f2:d2:cb:cc:57:09:95:a3:
         e1:e7:59:50:b7:19:26:e4:bb:c0:a1:d3:7c:67:2a:e5:81:29:
         51:c6:b5:0e:64:b7:dc:b2:42:fe:36:70:8c:8a:ce:0b:2a:09:
         05:f4:39:08:2a:b3:db:1c:af:bf:05:a3:c3:81:4e:d2:86:7e:
         6f:4d:64:2a:97:62:35:34:a3:a0:a1:80:ab:45:af:1f:6c:67:
         bd:8d:60:43:81:29:4b:ff:94:98:ce:50:a1:2e:09:84:2d:35:
         ca:83:b9:ee:27:fc:df:1f:b7:de:32:30:dc:82:7d:3c:9b:5e:
         53:41:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----