This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gCe95DsmEINygDhROPrr_6CBFGg.cer
File:                     gCe95DsmEINygDhROPrr_6CBFGg.cer (raw, json)
Hash identifier:          QTAzZXL0Sie2bQkRHPpeXgHUHVI9KKRUg9not8DYlq0=
Subject key identifier:   80:27:BD:E4:3B:26:10:83:72:80:38:51:38:FA:EB:FF:A0:81:14:68
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E805
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sun 18 Jan 2026 19:58:10 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 103.131.224.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59397 (0xe805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan 18 19:58:10 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=8027BDE43B2610837280385138FAEBFFA0811468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:5f:3b:64:3b:83:32:87:94:dd:2d:09:bc:
                    d7:fc:78:60:53:1c:d5:19:83:6f:54:3a:aa:ba:01:
                    54:22:ca:fd:50:9f:95:56:76:f9:71:78:4f:a7:88:
                    01:1c:c7:12:7f:1d:ec:0e:58:51:2e:55:e1:5f:6b:
                    cf:63:ce:32:1a:93:78:35:4b:f7:ba:f2:c1:c0:d1:
                    14:ad:58:f5:6a:aa:99:79:61:ba:22:f3:80:82:63:
                    a4:9e:af:c6:f3:2a:2b:5b:7d:c5:cb:cc:bb:35:38:
                    0a:3c:62:6e:ae:df:d5:81:12:77:e8:0e:6b:78:e1:
                    45:c4:64:51:38:1f:81:4a:20:90:a0:95:22:68:5e:
                    7c:50:91:ad:7b:f4:b5:62:c9:b4:db:6a:e4:85:c0:
                    47:ff:1e:f7:cd:30:5e:aa:a3:eb:6e:f9:95:08:ee:
                    bb:4b:02:75:50:9a:a2:7a:75:c0:82:5f:98:79:77:
                    d3:01:be:bb:6a:f6:f7:44:b5:95:c6:8e:47:af:0b:
                    d0:17:dc:89:c0:9e:7e:4d:7f:fd:ae:cd:6b:0f:b0:
                    39:9a:d2:78:8b:04:2c:20:d4:1d:f5:7c:98:a2:68:
                    62:ce:00:1a:ce:05:bc:7e:77:f5:1a:cc:fc:6a:be:
                    2e:94:2d:d7:d9:a7:3e:81:ed:7e:70:9e:83:b7:a7:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:BD:E4:3B:26:10:83:72:80:38:51:38:FA:EB:FF:A0:81:14:68
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/gCe95DsmEINygDhROPrr_6CBFGg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:fe:a4:37:71:0d:9e:95:2a:43:50:bd:e4:85:89:23:3a:13:
         54:db:77:a9:d2:75:29:2d:ca:89:86:e7:92:ef:ae:72:96:e1:
         33:d6:b9:86:44:f2:82:50:cb:b2:6c:86:3d:4d:e6:5d:b9:fd:
         df:99:1c:8e:bc:36:31:36:81:b2:0b:36:91:b4:14:3e:5c:59:
         0e:4b:49:bb:6c:62:a5:fa:ae:f4:8b:d8:b5:39:b7:6c:fe:62:
         8d:27:7c:f6:88:00:a9:51:d3:13:f4:3a:d6:1b:12:26:10:7f:
         79:66:7a:52:53:cd:8c:90:37:aa:fa:52:31:0b:64:05:11:23:
         53:b4:bd:f6:69:33:8c:13:b9:f3:2a:a6:e8:97:cb:2f:1f:ae:
         53:d6:11:39:60:ba:52:73:2b:fa:25:1e:fe:73:70:c7:c3:59:
         15:3d:4c:17:13:b4:44:1e:c2:d7:7d:62:c5:3d:0b:c2:61:c9:
         79:ce:d3:61:85:b5:fe:ae:80:56:d1:5a:da:0c:f8:32:02:f4:
         e4:ee:62:31:f0:bf:1f:cf:b2:06:3f:60:b6:1c:eb:13:22:df:
         06:f6:3e:b2:8c:23:b2:13:4a:3b:0e:46:f1:58:e6:b6:2a:ab:
         1e:e2:65:f6:59:3e:31:86:c6:eb:fe:67:91:14:44:04:76:49:
         28:1b:98:1e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDAOgFMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMTgxOTU4MTBaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDgwMjdCREU0M0IyNjEwODM3MjgwMzg1MTM4RkFFQkZGQTA4MTE0
NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDec187ZDuDMoeU3S0J
vNf8eGBTHNUZg29UOqq6AVQiyv1Qn5VWdvlxeE+niAEcxxJ/HewOWFEuVeFfa89j
zjIak3g1S/e68sHA0RStWPVqqpl5Yboi84CCY6Ser8bzKitbfcXLzLs1OAo8Ym6u
39WBEnfoDmt44UXEZFE4H4FKIJCglSJoXnxQka179LViybTbauSFwEf/HvfNMF6q
o+tu+ZUI7rtLAnVQmqJ6dcCCX5h5d9MBvrtq9vdEtZXGjkevC9AX3InAnn5Nf/2u
zWsPsDma0niLBCwg1B31fJiiaGLOABrOBbx+d/UazPxqvi6ULdfZpz6B7X5wnoO3
p06HAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUgCe95DsmEINygDhROPrr/6CBFGgw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4
MTkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjgxOS9nQ2U5NURzbUVJTnlnRGhST1Bycl82Q0JGR2cubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4PgMA0GCSqGSIb3DQEBCwUA
A4IBAQBo/qQ3cQ2elSpDUL3khYkjOhNU23ep0nUpLcqJhueS765yluEz1rmGRPKC
UMuybIY9TeZduf3fmRyOvDYxNoGyCzaRtBQ+XFkOS0m7bGKl+q70i9i1Obds/mKN
J3z2iACpUdMT9DrWGxImEH95ZnpSU82MkDeq+lIxC2QFESNTtL32aTOME7nzKqbo
l8svH65T1hE5YLpScyv6JR7+c3DHw1kVPUwXE7REHsLXfWLFPQvCYcl5ztNhhbX+
roBW0VraDPgyAvTk7mIx8L8fz7IGP2C2HOsTIt8G9j6yjCOyE0o7DkbxWOa2Kqse
4mX2WT4xhsbr/meRFEQEdkkoG5ge
-----END CERTIFICATE-----