This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
File:                     ahHuR0JdFOuvL80k0gYrClK6BCw.cer (raw, json)
Hash identifier:          dPRx5tBWP4TRss1XoxXDX64YpzazDACBXMWg3XiVBEI=
Subject key identifier:   6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E70A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:43 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151270
                          IP: 45.249.188.0/22
                          IP: 103.217.180.0/22
                          IP: 103.236.68.0 -- 103.236.99.255
                          IP: 144.48.180.0 -- 144.48.187.255
                          IP: 2401:d0e0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59146 (0xe70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:43 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:b1:01:4f:cd:d9:f4:f2:d4:2e:0a:fc:7c:
                    ed:b1:68:23:7b:70:d9:b5:71:80:62:25:6e:2f:22:
                    18:72:0e:85:3e:06:3e:cf:43:e4:9e:1e:ac:29:d4:
                    d7:a4:49:00:7d:50:d7:11:64:05:67:7a:0d:f1:c2:
                    bb:46:6e:5c:d6:83:1e:0f:8e:19:d5:aa:e4:2b:14:
                    96:5a:a4:1c:70:a5:b0:49:ba:44:62:9a:2b:5a:9a:
                    be:d9:56:c3:06:67:08:f3:4f:29:a3:95:dc:7b:12:
                    e5:3b:91:c5:d2:1b:5e:fe:06:f9:a8:41:e0:12:c5:
                    82:c2:c4:70:5b:e0:62:79:2d:4e:fc:42:6a:3e:99:
                    21:2f:22:43:14:5d:5b:54:16:c3:ce:8e:ed:91:bf:
                    32:69:03:1b:a6:70:e9:bf:a0:93:8c:1f:f6:a6:a4:
                    55:cc:a6:d0:1c:40:88:47:29:c3:db:ab:f5:f4:89:
                    a5:97:d3:66:4c:f6:8e:68:68:a4:84:fb:b5:7c:d2:
                    72:0b:b4:29:68:b7:6f:4a:04:6f:1c:b3:d8:65:dc:
                    eb:86:41:65:a1:f3:3d:37:8b:20:a5:24:a0:d9:cb:
                    58:f9:22:63:8f:9d:ef:07:7d:b0:dd:32:da:47:80:
                    28:d7:3a:98:6e:dd:65:49:f0:4f:36:7d:f7:1e:8f:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151270

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.188.0/22
                  103.217.180.0/22
                  103.236.68.0-103.236.99.255
                  144.48.180.0-144.48.187.255
                IPv6:
                  2401:d0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:ad:56:8c:39:03:f8:31:cd:32:27:7f:bf:1c:62:d7:61:
         61:37:e6:13:96:21:e1:1d:8a:7a:a5:4f:0c:71:05:2b:c6:8f:
         61:67:d3:7a:24:1d:ae:e2:48:03:99:6d:aa:3e:d7:a1:4e:a3:
         e4:97:7c:fa:d9:c9:fa:b1:44:29:7b:06:58:87:a2:f3:53:ab:
         7c:b2:af:93:23:bf:7e:3d:60:84:3a:57:36:cc:5f:58:b2:3a:
         93:34:e7:f5:d9:ea:5d:1e:ba:06:89:aa:a7:b7:95:b0:fc:eb:
         89:3e:12:39:3b:9c:55:7b:f2:53:d3:0f:af:21:e9:0d:fd:f2:
         47:56:5a:48:08:b2:76:88:29:1a:7e:90:bc:6b:07:61:65:d6:
         41:b0:dd:d0:09:77:1b:ce:a4:b0:3f:b4:15:f0:e5:e5:d7:6f:
         b3:13:a6:91:7f:61:6c:87:b6:b1:69:7b:37:8f:2e:f4:26:8b:
         de:71:2b:90:77:ed:b6:0a:f5:d3:99:73:81:37:6c:08:0b:a8:
         32:42:ee:74:7a:b1:72:bc:d6:6c:50:72:38:8a:01:bf:a3:ab:
         27:f5:7a:1f:3f:3c:e4:99:26:ac:c9:d4:00:59:5c:e1:72:6f:
         90:65:62:0a:2c:84:7b:a2:38:3d:79:0b:ba:98:72:92:2e:b4:
         e1:dd:51:62
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAOcKMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI5NDNaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDZBMTFFRTQ3NDI1RDE0RUJBRjJGQ0QyNEQyMDYyQjBBNTJCQTA0
MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQLEBT83Z9PLULgr8
fO2xaCN7cNm1cYBiJW4vIhhyDoU+Bj7PQ+SeHqwp1NekSQB9UNcRZAVneg3xwrtG
blzWgx4PjhnVquQrFJZapBxwpbBJukRimitamr7ZVsMGZwjzTymjldx7EuU7kcXS
G17+BvmoQeASxYLCxHBb4GJ5LU78Qmo+mSEvIkMUXVtUFsPOju2RvzJpAxumcOm/
oJOMH/ampFXMptAcQIhHKcPbq/X0iaWX02ZM9o5oaKSE+7V80nILtClot29KBG8c
s9hl3OuGQWWh8z03iyClJKDZy1j5ImOPne8HfbDdMtpHgCjXOphu3WVJ8E82ffce
j99ZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUahHuR0JdFOuvL80k0gYrClK6BCww
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
MjYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzMyNi9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO5jBQBggrBgEFBQcBBwEB/wRBMD8w
LgQCAAEwKAMEAi35vAMEAmfZtDAMAwQCZ+xEAwQCZ+xgMAwDBAKQMLQDBAKQMLgw
DQQCAAIwBwMFACQB0OAwDQYJKoZIhvcNAQELBQADggEBADJ7rVaMOQP4Mc0yJ3+/
HGLXYWE35hOWIeEdinqlTwxxBSvGj2Fn03okHa7iSAOZbao+16FOo+SXfPrZyfqx
RCl7BliHovNTq3yyr5Mjv349YIQ6VzbMX1iyOpM05/XZ6l0eugaJqqe3lbD864k+
Ejk7nFV78lPTD68h6Q398kdWWkgIsnaIKRp+kLxrB2Fl1kGw3dAJdxvOpLA/tBXw
5eXXb7MTppF/YWyHtrFpezePLvQmi95xK5B37bYK9dOZc4E3bAgLqDJC7nR6sXK8
1mxQcjiKAb+jqyf1eh8/POSZJqzJ1ABZXOFyb5BlYgoshHuiOD15C7qYcpIutOHd
UWI=
-----END CERTIFICATE-----