This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer
File:                     g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer (raw, json)
Hash identifier:          daoyL80nDA1/uBmOMw+QjLg3uZCOuI0QUuFNkNWBcrM=
Subject key identifier:   83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:30:51 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 202.38.176.0/23
                          IP: 202.127.192.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59216 (0xe750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:30:51 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=835518B3540E89A2C3983213E02FEAAB77BDA544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:89:0f:19:1f:b9:30:f8:9e:96:ca:aa:ed:
                    cd:66:73:50:67:d9:72:58:8d:96:cd:20:0f:4a:46:
                    70:db:65:fa:00:04:0b:5e:9b:37:ac:c4:f1:b9:fc:
                    fc:36:b4:7d:d9:a1:1f:e4:df:a7:8f:01:c0:7a:a5:
                    1c:76:ba:2d:c6:84:6d:5b:63:5c:9d:3c:eb:df:59:
                    7f:41:a6:aa:3f:ef:36:de:0e:33:13:39:30:f8:f1:
                    19:45:37:8f:f8:63:77:69:fa:0a:1c:e6:0d:39:fb:
                    bc:73:0d:63:9f:8b:2d:70:c5:72:33:8b:0c:27:63:
                    af:46:91:97:5d:cc:ef:8c:ba:d2:53:70:c7:40:9d:
                    a4:ca:16:72:18:00:89:b9:c1:7c:79:04:39:c5:09:
                    7d:9c:e9:99:84:70:72:d6:17:b8:c1:b7:8b:7c:bf:
                    3c:e7:c4:b3:98:cd:ed:07:2a:65:d1:32:f2:9f:7f:
                    8b:9d:66:cf:f1:1a:34:88:92:89:59:b5:db:dd:ed:
                    e6:21:0c:4b:4f:0a:85:e0:f3:fb:58:46:33:2a:fa:
                    08:1d:5a:96:98:12:64:b8:69:5d:98:1e:e7:14:cb:
                    fc:69:fa:f3:4c:75:e3:6a:cd:0e:19:e6:ea:c5:f5:
                    17:d8:52:94:1f:f9:9e:71:f0:7c:97:ff:cc:7e:4d:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.38.176.0/23
                  202.127.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:82:e4:f0:73:49:e8:46:2d:76:a5:1e:c7:54:f9:b6:0b:47:
         16:3c:b6:9b:b5:c6:b6:a4:86:b8:c1:07:cc:ea:11:b3:81:cb:
         0c:05:15:b8:56:3c:67:2b:2c:45:da:fb:dc:d3:2c:03:24:7d:
         f2:95:e6:0e:96:7a:bb:4b:71:94:f5:b1:23:87:9c:5c:d3:40:
         62:1a:bb:09:40:c3:03:80:45:18:88:93:c2:da:20:81:78:c7:
         45:56:d1:29:d6:54:b9:d3:b4:ca:af:20:08:5a:72:96:46:36:
         48:77:f3:30:a1:0d:83:08:0c:42:7d:69:16:c8:7d:cc:06:3e:
         e1:00:04:e4:20:6e:bc:5b:df:0e:36:2f:f9:3b:a1:a5:d4:32:
         bc:21:16:8f:5e:66:39:6c:68:4e:cb:da:db:c2:83:01:64:21:
         43:f6:bf:a8:d1:29:b8:f8:1e:5f:b0:75:d4:2d:55:04:7e:40:
         08:d9:de:8f:36:c4:50:76:bd:2d:8c:e3:79:95:83:13:ea:f7:
         3d:85:2e:5f:0a:67:45:78:bd:ad:2e:92:4f:4d:9a:db:88:de:
         9f:61:d3:ec:2c:19:d4:c4:c8:89:25:85:a8:17:ca:0c:de:f2:
         42:7a:42:58:5c:29:66:8a:df:6c:94:18:7b:14:97:dd:57:7d:
         6d:f7:30:cd
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDAOdQMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMwNTFaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDgzNTUxOEIzNTQwRTg5QTJDMzk4MzIxM0UwMkZFQUFCNzdCREE1
NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUYkPGR+5MPielsqq
7c1mc1Bn2XJYjZbNIA9KRnDbZfoABAtemzesxPG5/Pw2tH3ZoR/k36ePAcB6pRx2
ui3GhG1bY1ydPOvfWX9Bpqo/7zbeDjMTOTD48RlFN4/4Y3dp+goc5g05+7xzDWOf
iy1wxXIziwwnY69GkZddzO+MutJTcMdAnaTKFnIYAIm5wXx5BDnFCX2c6ZmEcHLW
F7jBt4t8vzznxLOYze0HKmXRMvKff4udZs/xGjSIkolZtdvd7eYhDEtPCoXg8/tY
RjMq+ggdWpaYEmS4aV2YHucUy/xp+vNMdeNqzQ4Z5urF9RfYUpQf+Z5x8HyX/8x+
TSFLAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUg1UYs1QOiaLDmDIT4C/qq3e9pUQw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy
MjkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzIyOS9nMVVZczFRT2lhTERtRElUNENfcXEzZTlwVVEubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQByiawAwQByn/AMA0GCSqGSIb3
DQEBCwUAA4IBAQAoguTwc0noRi12pR7HVPm2C0cWPLabtca2pIa4wQfM6hGzgcsM
BRW4VjxnKyxF2vvc0ywDJH3yleYOlnq7S3GU9bEjh5xc00BiGrsJQMMDgEUYiJPC
2iCBeMdFVtEp1lS507TKryAIWnKWRjZId/MwoQ2DCAxCfWkWyH3MBj7hAATkIG68
W98ONi/5O6Gl1DK8IRaPXmY5bGhOy9rbwoMBZCFD9r+o0Sm4+B5fsHXULVUEfkAI
2d6PNsRQdr0tjON5lYMT6vc9hS5fCmdFeL2tLpJPTZrbiN6fYdPsLBnUxMiJJYWo
F8oM3vJCekJYXClmit9slBh7FJfdV31t9zDN
-----END CERTIFICATE-----