This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer
File:                     d0sjtMGf81BgAQ8Ax0bbOiva5XM.cer (raw, json)
Hash identifier:          duOaHcN/un21hkIjTNrrlN7d5ioojGWjJvw7mFjWcuU=
Subject key identifier:   77:4B:23:B4:C1:9F:F3:50:60:01:0F:00:C7:46:DB:3A:2B:DA:E5:73
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E68C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:27:04 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151247
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59020 (0xe68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:27:04 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=774B23B4C19FF35060010F00C746DB3A2BDAE573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:80:d0:cf:65:8c:24:bf:6f:58:f3:f7:35:
                    03:41:52:55:b1:1b:b1:a6:90:62:0e:0b:8e:cd:f6:
                    2d:a6:2d:6c:f8:65:c2:ee:44:ec:62:1c:fb:14:0a:
                    c2:6c:5c:e3:84:9c:93:59:7a:73:80:3e:cd:c6:e7:
                    ab:fa:3c:50:bc:52:bd:1c:0c:8b:1f:aa:1b:70:9e:
                    a0:6c:96:37:d8:ff:3a:98:45:c7:ce:22:68:5f:d6:
                    9c:c3:a4:67:de:d8:d6:ea:a0:8f:be:9f:45:c7:9b:
                    6b:30:1e:61:38:77:f9:43:c2:67:ed:0e:ea:96:63:
                    cf:41:6c:ff:bc:ba:c0:1f:f4:c9:bd:92:c1:49:48:
                    6d:6d:13:5b:8c:76:b1:de:78:fb:d3:40:bd:58:53:
                    95:db:40:19:1a:d2:f4:4f:f4:5e:01:94:10:2e:5c:
                    6a:22:83:da:c8:6a:82:04:02:ce:9d:b6:de:47:87:
                    7b:37:07:05:03:d8:80:ef:3d:b7:e5:8b:2c:63:44:
                    62:e4:2d:f0:f7:eb:79:e7:8e:56:2c:36:1f:18:49:
                    be:65:31:1a:1e:4a:d0:14:86:69:79:63:f8:50:10:
                    7d:2e:90:f0:9a:5f:92:e7:0e:22:d4:5e:96:ac:34:
                    8c:e5:53:59:5b:fb:e4:e4:09:4b:f1:24:68:8b:19:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:23:B4:C1:9F:F3:50:60:01:0F:00:C7:46:DB:3A:2B:DA:E5:73
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3415/d0sjtMGf81BgAQ8Ax0bbOiva5XM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151247

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:bc:7b:a3:71:d8:85:63:60:60:c7:b0:52:1a:65:9d:ad:
         5b:a6:59:03:e5:8c:56:59:12:28:74:4c:13:2a:95:ca:4c:e6:
         33:e2:f8:8b:92:8c:f5:c5:40:e1:66:61:a5:f7:d8:33:86:35:
         59:80:78:05:c6:d7:41:27:cf:86:17:ad:22:45:4f:1e:0b:5b:
         c9:72:85:dd:16:cb:7d:95:95:03:f2:38:5b:d7:27:93:9f:e4:
         5a:4f:d2:c0:34:46:c0:7c:63:6c:e5:10:1a:b0:61:7d:71:8c:
         a5:cf:0d:9c:e1:6e:e6:93:c3:bd:2f:0f:63:0a:e8:ef:bd:f8:
         1a:89:bf:18:b2:a9:49:f9:46:19:52:b2:30:96:15:0f:da:b5:
         65:7b:63:37:15:14:02:7c:34:8a:a9:7d:40:81:7c:b8:b4:7c:
         a2:b5:c9:49:b2:7e:ae:64:80:b9:5b:e0:97:66:16:d8:5e:eb:
         cd:fa:58:19:2d:0c:b2:d7:a5:ed:40:c4:f7:e5:75:e5:6b:85:
         7a:6d:78:b3:b4:d4:e0:ee:ab:d9:81:dd:e0:65:ed:77:48:60:
         fd:52:82:86:41:8b:21:6f:78:48:f8:2d:c7:65:ca:10:d3:61:
         3c:82:22:46:81:b9:4d:6c:b7:7a:d9:1c:00:85:d7:20:dd:f1:
         03:32:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----