This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jADfzi10-W1xE_7xW2z4zSGqJm4.cer
File:                     jADfzi10-W1xE_7xW2z4zSGqJm4.cer (raw, json)
Hash identifier:          FZf6dK+z2nU2cikBfo+5vs6bCyZp74l00WHR7hr3YKI=
Subject key identifier:   8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:27:27 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 103.49.176.0/22
                          IP: 103.131.152.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59046 (0xe6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:27:27 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=8C00DFCE2D74F96D7113FEF15B6CF8CD21AA266E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:19:c4:9d:8e:d4:8f:67:fb:de:a1:43:9e:
                    87:56:6a:5d:43:c5:3c:87:9c:97:ba:41:90:54:8d:
                    01:e2:45:b1:78:3c:44:6e:fc:47:8e:92:da:4c:6f:
                    7d:6d:e4:36:87:1f:b0:fa:43:54:80:3c:bf:a7:8d:
                    66:f2:14:ed:36:4a:63:67:79:78:73:38:d9:e2:9e:
                    29:69:df:df:2e:16:56:de:39:8e:a1:3b:b3:75:3a:
                    4c:db:83:c6:bd:14:58:ae:02:0b:d5:74:44:92:c0:
                    08:04:38:53:d9:36:a7:76:c9:fa:94:34:f8:22:21:
                    87:3a:26:d4:cf:e4:f7:28:42:03:90:37:a2:36:37:
                    4c:c4:59:3d:16:9e:1b:29:1f:5c:eb:27:58:14:3b:
                    0a:a0:c3:21:8f:31:e9:96:ba:a6:3b:ec:d7:27:0d:
                    b9:7b:a8:36:c3:1f:2c:d8:7f:11:8f:72:96:1b:fb:
                    31:33:79:86:38:24:45:49:44:ef:80:4e:8f:94:5a:
                    c6:06:fa:b3:70:cb:e2:9d:31:30:8c:8f:49:e8:b0:
                    4f:6a:1a:74:79:7a:ac:24:c1:f8:81:7e:40:c9:a3:
                    f3:dd:0f:ee:38:a2:8b:3f:2a:ec:e0:e4:05:e8:a5:
                    a2:62:2c:1c:dd:c4:13:06:49:1e:f8:91:d4:7c:4d:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:DF:CE:2D:74:F9:6D:71:13:FE:F1:5B:6C:F8:CD:21:AA:26:6E
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/jADfzi10-W1xE_7xW2z4zSGqJm4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.176.0/22
                  103.131.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:68:8f:d4:d0:92:09:d5:2a:02:01:77:6a:30:a8:fe:40:33:
         a4:e3:86:c5:c9:73:e6:c8:2a:0d:2e:61:0e:43:23:92:82:52:
         5a:d2:ce:85:b1:88:d0:d5:cf:ab:ee:45:f8:5e:48:2d:2b:84:
         b9:85:d5:f4:2e:f1:b4:7c:92:4a:e6:e0:ef:de:9a:e5:45:4e:
         f7:3e:b7:da:64:55:6b:41:dc:91:15:49:6b:ac:15:a0:6b:cf:
         56:f0:c7:48:2c:39:3b:aa:bb:f0:a9:16:3f:51:c3:33:7d:b7:
         71:53:2e:6b:0e:2d:aa:56:d6:82:1f:6d:ec:f9:1b:05:e5:62:
         e6:0e:1d:ae:3a:c0:67:87:9d:6b:a7:1e:41:ae:d0:35:1e:93:
         31:ab:3b:ab:f1:10:3f:dd:11:e2:28:d5:3d:97:d6:55:64:cd:
         16:76:9e:0f:df:1e:20:22:0b:3f:e6:a3:bf:03:45:b3:f1:c3:
         c5:27:be:db:ad:0a:d6:84:cc:b6:38:5b:73:d0:46:f8:ef:dd:
         6d:f7:05:b8:ca:7a:eb:a2:ce:52:c6:c7:02:bf:4c:e5:c8:02:
         46:0d:bf:9a:2a:ff:58:fc:2e:82:45:4c:78:85:85:0f:54:32:
         55:8b:94:cd:90:c1:6a:8e:63:bf:1f:96:79:44:c3:0a:40:a3:
         e0:b2:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----