This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fG2F62AxocqYwos7xhqYL63H-Eo.cer
File:                     fG2F62AxocqYwos7xhqYL63H-Eo.cer (raw, json)
Hash identifier:          Z0QAN+STkUdFcVkA83oKAwhL8/cjiCrk+HboG7XOdco=
Subject key identifier:   7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       4456
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:26:27 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 138.252.118.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17494 (0x4456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Jan  9 08:26:27 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=7C6D85EB6031A1CA98C28B3BC61A982FADC7F84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:88:f1:96:a0:ab:94:fc:17:23:cd:dd:76:
                    c4:e9:4b:aa:ad:da:06:9b:1b:f5:31:74:f5:2b:76:
                    f2:e2:d0:b9:fc:0d:1e:34:43:f3:a0:d1:6f:d0:52:
                    24:9b:61:41:44:f6:84:99:dd:c5:5d:97:8b:1a:15:
                    62:58:6a:de:f7:44:bb:3b:19:fa:ff:e7:e2:38:bc:
                    2b:16:04:be:e3:e6:6a:4b:ca:ca:d9:d0:3d:71:f8:
                    aa:45:dd:4a:1d:c8:34:64:91:c2:32:40:cb:cc:91:
                    a7:64:8d:0f:e0:df:42:b5:14:65:24:20:fd:48:78:
                    22:fe:48:2b:7e:f2:57:67:f2:40:83:47:77:23:d5:
                    62:d2:bf:2f:3f:f7:8d:09:8f:ec:25:b5:de:4e:e5:
                    40:bd:3f:69:11:93:a8:62:5e:4d:cf:84:e0:e1:19:
                    a1:ce:74:ed:96:42:3d:a1:23:45:92:64:96:39:ab:
                    54:aa:37:df:85:19:d9:06:7b:bd:8f:42:bc:11:dc:
                    8a:42:54:76:3c:63:d4:a6:0b:49:85:e3:ef:2c:42:
                    1b:ff:29:4f:5f:07:84:56:b6:59:77:3f:c7:24:b6:
                    91:c6:10:85:7b:21:8b:96:4a:28:ed:9e:b0:6b:7f:
                    40:b1:50:13:ad:f1:29:90:fb:00:90:93:ac:9f:42:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6D:85:EB:60:31:A1:CA:98:C2:8B:3B:C6:1A:98:2F:AD:C7:F8:4A
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3408/fG2F62AxocqYwos7xhqYL63H-Eo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:21:23:c4:6b:78:e8:39:8d:7c:14:8b:0c:9f:f8:3b:fd:91:
         67:39:11:98:ca:76:19:f9:6f:49:08:25:b5:1e:1a:00:0b:ff:
         9c:89:fe:f8:67:cc:be:e4:d8:d2:3a:32:c4:5b:f5:27:34:76:
         36:21:a8:5c:2b:c5:19:67:b0:69:ea:64:82:45:d2:c2:8e:d2:
         a6:08:17:ad:67:ea:e0:4d:78:c4:3b:5e:af:fa:45:22:1c:50:
         10:c3:a6:f7:c9:07:12:cc:4d:49:80:b2:4b:b2:91:35:e1:d6:
         a1:29:5c:e2:cf:76:51:19:d0:ba:7b:51:43:cd:d1:8e:86:08:
         5a:15:dd:49:47:5d:95:21:f2:71:48:08:0c:e9:a3:4c:da:05:
         e2:29:93:2e:54:c8:dc:39:bf:18:7f:de:64:19:16:8f:2c:30:
         98:f0:32:d9:fa:ab:30:14:4e:d2:01:c3:db:e1:45:97:d9:e6:
         fc:e5:67:56:09:3e:ba:0e:de:8e:52:af:e6:34:4d:a0:5f:de:
         7a:81:fb:39:2b:88:25:14:eb:22:a2:0a:98:50:81:e7:d4:ab:
         e9:9a:9c:83:47:cb:6f:d2:82:b5:3a:9b:05:74:69:e3:a5:7a:
         86:5b:ae:71:11:91:ba:a5:ef:c2:29:46:20:dc:fa:28:91:26:
         c5:1e:43:fd
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICRFYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw
QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjYyN1oXDTI3MDEwOTA4MjMxOFowMzEx
MC8GA1UEAxMoN0M2RDg1RUI2MDMxQTFDQTk4QzI4QjNCQzYxQTk4MkZBREM3Rjg0
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDSiPGWoKuU/Bcjzd12
xOlLqq3aBpsb9TF09St28uLQufwNHjRD86DRb9BSJJthQUT2hJndxV2XixoVYlhq
3vdEuzsZ+v/n4ji8KxYEvuPmakvKytnQPXH4qkXdSh3INGSRwjJAy8yRp2SND+Df
QrUUZSQg/Uh4Iv5IK37yV2fyQINHdyPVYtK/Lz/3jQmP7CW13k7lQL0/aRGTqGJe
Tc+E4OEZoc507ZZCPaEjRZJkljmrVKo334UZ2QZ7vY9CvBHcikJUdjxj1KYLSYXj
7yxCG/8pT18HhFa2WXc/xyS2kcYQhXshi5ZKKO2esGt/QLFQE63xKZD7AJCTrJ9C
mUkCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR8bYXrYDGhypjCizvGGpgvrcf4SjAf
BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx
RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQw
OC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zNDA4L2ZHMkY2MkF4b2NxWXdvczd4aHFZTDYzSC1Fby5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/HYwDQYJKoZIhvcNAQELBQAD
ggEBAHMhI8RreOg5jXwUiwyf+Dv9kWc5EZjKdhn5b0kIJbUeGgAL/5yJ/vhnzL7k
2NI6MsRb9Sc0djYhqFwrxRlnsGnqZIJF0sKO0qYIF61n6uBNeMQ7Xq/6RSIcUBDD
pvfJBxLMTUmAskuykTXh1qEpXOLPdlEZ0Lp7UUPN0Y6GCFoV3UlHXZUh8nFICAzp
o0zaBeIpky5UyNw5vxh/3mQZFo8sMJjwMtn6qzAUTtIBw9vhRZfZ5vzlZ1YJProO
3o5Sr+Y0TaBf3nqB+zkriCUU6yKiCphQgefUq+manINHy2/SgrU6mwV0aeOleoZb
rnERkbql78IpRiDc+iiRJsUeQ/0=
-----END CERTIFICATE-----