This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jBp_tNDRawix7CtJn6KrIwEhaB8.cer
File:                     jBp_tNDRawix7CtJn6KrIwEhaB8.cer (raw, json)
Hash identifier:          lFcefPWDQ0gOHWSy2VqtU90z5qTf8IGVOobFFdX2AA4=
Subject key identifier:   8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:27:32 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 163.223.222.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59052 (0xe6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:27:32 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=8C1A7FB4D0D16B08B1EC2B499FA2AB230121681F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:0d:c3:fe:fe:cc:83:61:1b:51:98:ca:32:
                    a1:42:2c:2a:40:c6:03:1f:17:e4:f2:dc:83:6b:22:
                    48:4b:c2:b0:59:8b:56:90:d6:ae:33:a9:a0:f5:12:
                    c7:1f:d4:20:1e:66:f2:a8:38:6c:ae:0d:91:e2:be:
                    10:b7:1f:dc:1f:cb:c3:77:bd:0d:1b:24:4e:b7:7b:
                    7f:c9:2d:01:27:1e:62:71:89:5b:99:56:e4:93:49:
                    e2:87:cd:22:47:94:08:79:6b:e1:4b:51:74:07:ff:
                    5b:93:41:a1:6f:cd:a1:c3:7d:ea:82:a9:58:8b:66:
                    0e:ec:15:75:8e:15:2a:b9:e0:27:fa:d2:e3:e7:81:
                    a7:6c:3d:1d:55:20:c4:a0:f7:62:d6:76:58:35:71:
                    01:dd:67:ac:b2:c8:0c:75:b7:1f:eb:57:7c:4d:cf:
                    33:90:51:7c:0a:44:76:9b:ee:83:87:87:95:66:6c:
                    3d:7d:08:ee:45:5e:6f:70:c5:22:74:c3:c8:25:87:
                    5b:1d:87:e1:84:ac:f2:7b:7e:85:b6:94:91:96:cd:
                    ba:8f:47:7b:fa:cc:4f:8a:d0:b6:8a:59:0f:b2:2d:
                    86:9d:f6:46:86:97:df:46:51:14:dd:b9:ee:be:83:
                    d6:34:2e:b9:6e:bb:da:a0:07:7e:65:da:5e:6a:1b:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1A:7F:B4:D0:D1:6B:08:B1:EC:2B:49:9F:A2:AB:23:01:21:68:1F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3358/jBp_tNDRawix7CtJn6KrIwEhaB8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:92:25:60:c0:8d:ef:3b:9c:74:f5:6b:79:65:e2:d4:7f:
         a7:7b:75:8f:22:6f:9e:03:35:40:d9:35:9e:72:4b:54:2a:cc:
         f0:52:7f:7b:c3:3a:79:cd:76:7e:54:e8:e2:c8:68:5f:3f:f2:
         c7:79:5a:4f:c3:f6:64:44:a2:95:ba:d4:7f:ff:d2:55:b0:69:
         d0:a4:c4:66:26:a4:2c:67:f4:23:de:33:aa:96:64:ea:68:80:
         8d:80:e7:f9:70:d7:89:8d:37:48:14:a8:dd:6f:f5:a4:1b:5d:
         d8:1d:f3:05:0d:91:f7:2e:23:cc:4b:a2:66:e7:f9:3d:14:8b:
         c9:bf:65:49:19:4b:38:eb:eb:f5:49:e1:8f:c0:2e:61:bb:be:
         56:5c:2a:7f:d9:0a:8a:18:9e:43:d9:53:cf:b4:49:ee:06:a9:
         82:a2:a1:ac:20:31:6a:c9:dc:11:ab:7a:8e:c5:53:ce:ee:37:
         63:32:da:bf:71:22:d7:e8:a2:40:e7:9c:4f:ba:b9:e1:af:2d:
         5d:6c:36:8a:b8:22:c2:1c:a8:de:4e:d2:dc:46:13:d6:f1:5c:
         85:18:37:89:93:bd:d3:d8:3d:66:88:7a:72:7f:61:28:96:d3:
         57:3a:ea:d8:ab:62:5f:ae:e8:32:ba:a2:8a:a3:35:41:a1:35:
         4a:59:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----