This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/h2aIiphaWvBfbvEvvU9k8h9SYYg.cer
File:                     h2aIiphaWvBfbvEvvU9k8h9SYYg.cer (raw, json)
Hash identifier:          RsTrY2+yDXzJg0dBTNLN3zb5iUQ8tRLScuUQmD57RLk=
Subject key identifier:   87:66:88:8A:98:5A:5A:F0:5F:6E:F1:2F:BD:4F:64:F2:1F:52:61:88
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1817/h2aIiphaWvBfbvEvvU9k8h9SYYg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1817/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:25:52 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 63607
                          IP: 45.251.120.0/22
                          IP: 103.220.92.0/22
                          IP: 2405:8280::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58936 (0xe638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:25:52 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=8766888A985A5AF05F6EF12FBD4F64F21F526188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:33:bd:99:31:89:7a:95:24:2b:4b:f4:1f:
                    96:bb:29:a8:e8:2e:18:80:b6:62:3f:e6:a1:b2:24:
                    a0:70:54:c6:f6:df:b4:4b:3c:c3:8f:46:34:23:4a:
                    b3:65:bf:29:4a:df:ba:e8:19:cd:13:28:0f:6c:6d:
                    44:f0:bd:3d:12:f2:c6:9d:9f:53:c7:52:ec:2b:76:
                    c8:89:3e:a5:45:94:02:59:1a:66:85:04:84:39:b7:
                    8a:c5:25:f4:69:48:29:0f:93:df:0c:38:bf:55:3b:
                    f2:19:0a:67:8f:5e:d5:8c:3a:9f:ff:a5:5b:8e:a7:
                    09:18:e4:6c:62:e1:b9:fe:09:4c:81:40:84:b7:c2:
                    6e:cb:96:9e:3a:46:f4:0c:4d:4a:93:7c:fe:82:d4:
                    d8:cb:7d:df:42:27:fe:d1:27:31:77:ac:05:e8:a3:
                    73:c8:df:93:61:9f:61:6d:1e:4d:0c:3c:f8:54:c1:
                    ed:45:6d:be:b5:2e:7c:3e:3b:c3:79:a5:e4:46:bf:
                    9f:a7:42:58:a9:1d:e9:88:52:53:58:65:a1:fb:fd:
                    77:6c:d8:f6:ae:47:e8:9f:35:31:a6:ad:e9:bf:32:
                    24:de:93:54:f6:44:06:24:79:80:53:29:44:af:16:
                    7e:e5:49:9c:e7:f3:c8:c8:d2:2e:61:2e:f6:20:c9:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:66:88:8A:98:5A:5A:F0:5F:6E:F1:2F:BD:4F:64:F2:1F:52:61:88
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1817/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1817/h2aIiphaWvBfbvEvvU9k8h9SYYg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63607

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.120.0/22
                  103.220.92.0/22
                IPv6:
                  2405:8280::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:81:ef:80:e4:37:fa:2e:f9:b9:c3:e4:25:12:f6:ac:39:18:
         ae:8f:fb:81:9c:2f:39:2e:c6:e2:c2:ed:7b:92:52:42:c2:ef:
         1f:31:67:04:c6:82:58:a6:d5:cc:d7:35:ea:88:eb:7a:01:3b:
         9b:4f:1f:eb:0a:6c:12:6e:65:3c:ca:b9:14:38:4d:e9:8b:f5:
         13:5e:ab:38:fa:68:61:a6:75:89:cc:6f:84:dc:66:1f:75:da:
         86:67:0a:f2:94:25:d5:3a:d2:b9:9e:99:c1:49:d4:22:d4:95:
         39:fa:20:52:21:2a:ff:6f:68:2d:88:c6:f5:25:8a:a6:40:7e:
         e5:81:ac:57:1b:c0:c8:82:87:8e:0c:24:be:da:1c:5e:48:e3:
         c7:00:fd:49:8c:df:b6:06:69:b0:bd:12:15:28:ae:b3:f3:18:
         79:41:2e:b9:3d:9c:32:23:4d:52:aa:39:0d:19:fa:34:65:fe:
         57:76:31:4d:2e:18:b1:d9:71:b1:3c:45:68:6f:45:6f:26:1b:
         f2:7e:9b:fe:0a:0b:e0:6c:df:bc:ff:1b:c0:d1:48:a0:e2:91:
         00:da:40:67:6d:f2:2d:65:4a:85:3a:35:8d:07:b2:37:68:bb:
         1f:84:d6:37:51:4f:3c:6d:4b:f7:ad:b8:5e:7e:4e:b3:6c:8c:
         1a:b9:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----