This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer
File:                     iKQI7rXTpv4suSjFDJ-2gC-QJn8.cer (raw, json)
Hash identifier:          j5zAr5QfowT2DML5oerWA9HlewfFBUf7PSL3jUn8nDk=
Subject key identifier:   88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:28:19 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 59073
                          IP: 103.238.96.0/22
                          IP: 202.173.112.0/22
                          IP: 2402:93c0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59064 (0xe6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:28:19 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=88A408EEB5D3A6FE2CB928C50C9FB6802F90267F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:0f:d6:8e:2e:3a:aa:d1:09:95:30:9f:4f:
                    8c:92:0a:7d:fa:a6:61:65:c8:11:04:f0:c5:f7:3a:
                    5c:78:98:b5:b4:63:03:64:1a:b3:dd:db:85:22:9e:
                    fc:cf:29:b3:85:28:e4:4b:2a:60:b2:ac:a2:03:0c:
                    32:df:68:07:f6:87:6b:cd:1f:ad:19:58:65:4c:f3:
                    4e:16:25:ec:53:90:85:e7:4c:36:4c:a0:a8:05:d3:
                    53:06:5e:2c:1f:c4:2d:82:15:31:9b:66:e0:22:d0:
                    9c:8c:dc:98:f3:16:c3:fb:bb:19:dd:ad:db:e9:72:
                    02:c0:7a:9b:8d:8c:ba:c8:9e:0f:25:7a:e7:f3:e2:
                    b3:c1:ca:07:d0:30:15:82:06:2e:f4:31:18:ef:c0:
                    0f:3d:70:88:cc:b6:84:f8:dc:98:3d:3e:25:89:9f:
                    99:e6:02:ea:0e:c1:02:5b:d0:6a:a2:ec:fb:5a:d3:
                    8d:2d:d4:32:c3:cc:26:bc:6c:5b:a2:9c:f4:c3:fb:
                    8f:ad:0f:90:2b:bb:25:3c:a4:81:79:b4:a6:4a:f9:
                    e4:3c:31:0d:c6:93:7c:45:c5:4a:9e:c0:19:67:9c:
                    cd:95:c9:0d:3c:da:78:55:0e:f6:17:9b:9b:fe:67:
                    c7:3d:4b:ae:69:68:d5:df:25:b0:47:5c:62:93:57:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A4:08:EE:B5:D3:A6:FE:2C:B9:28:C5:0C:9F:B6:80:2F:90:26:7F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/846/iKQI7rXTpv4suSjFDJ-2gC-QJn8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59073

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.96.0/22
                  202.173.112.0/22
                IPv6:
                  2402:93c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:28:89:10:b5:33:d6:38:e7:12:a6:c9:2d:a6:d2:5c:b5:
         a7:ff:c6:3d:ce:52:18:c7:a8:26:05:1e:46:2c:12:00:05:6f:
         05:e5:fb:ea:31:6b:a4:ce:47:7a:1d:8e:9d:1c:48:c3:91:e9:
         18:9f:0e:a0:93:1f:c3:ef:5a:fd:74:56:73:1e:8b:a2:40:7e:
         b5:47:5c:48:14:09:5c:e5:84:5e:8a:99:d0:42:15:3b:03:60:
         e9:44:1a:c1:1b:64:bb:64:df:83:b1:0e:e5:49:d8:73:9c:01:
         c3:6e:46:ff:96:52:ad:05:90:7d:ba:17:17:a0:6c:66:8d:ff:
         d9:a7:8d:dc:15:13:73:a2:8f:49:8d:dd:29:3d:46:f8:89:67:
         a5:31:07:81:e1:70:1f:45:b7:69:5a:0b:9b:13:2f:7a:90:57:
         0a:ab:10:16:39:f6:75:60:e5:41:c3:64:73:ce:a7:56:48:92:
         d2:eb:7d:34:d2:19:d2:ee:7a:97:57:52:85:f2:a1:5b:3e:b4:
         69:12:a5:1b:74:f1:a4:8e:c9:65:b6:c4:92:36:78:ec:c0:03:
         02:35:15:9f:00:73:f2:3a:13:9e:2d:37:01:a4:d2:df:f2:44:
         20:16:ac:44:38:52:d8:2c:3e:87:54:47:a1:83:bc:41:3f:4a:
         2c:cd:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----