This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jJMxBDzLH-EZ8cLr4BxWx982ErY.cer
File:                     jJMxBDzLH-EZ8cLr4BxWx982ErY.cer (raw, json)
Hash identifier:          k1x/KY9+peeoz/HvQ/3OJsauwVuZAWLfykEz6dk6Lyg=
Subject key identifier:   8C:93:31:04:3C:CB:1F:E1:19:F1:C2:EB:E0:1C:56:C7:DF:36:12:B6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/jJMxBDzLH-EZ8cLr4BxWx982ErY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:07 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 110.173.96.0/19
                          IP: 202.173.224.0/19
                          IP: 211.148.128.0/19
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59106 (0xe6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:07 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=8C9331043CCB1FE119F1C2EBE01C56C7DF3612B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:8b:ea:85:4d:aa:e4:c7:13:27:38:a2:60:
                    25:f6:31:79:b5:03:71:85:15:6f:4e:7e:95:b2:96:
                    56:fb:6a:41:65:6f:07:d2:2c:80:04:67:e5:2a:61:
                    e0:77:a3:3d:01:54:df:6c:7d:05:18:91:1e:43:7a:
                    23:cd:87:a0:b8:53:0c:c5:88:cd:61:20:34:40:f8:
                    a0:1e:36:08:94:60:6c:00:13:49:f6:f7:a4:84:c8:
                    ac:03:f2:fe:0f:27:16:d5:52:3b:a2:4e:49:8e:01:
                    e6:ae:35:4d:b2:73:52:b6:4c:39:df:18:a8:21:22:
                    b7:7e:60:dc:49:9d:c2:85:c8:10:37:5a:13:e5:22:
                    8d:57:dd:a7:80:c3:98:49:d3:82:c2:6e:58:7a:1d:
                    7c:0a:1d:ef:75:93:94:dd:23:6d:77:82:ec:88:66:
                    a7:56:5a:18:c8:28:8c:84:23:9a:11:df:a1:7c:44:
                    5f:0b:f1:f4:ff:d6:9b:4f:8e:98:b4:90:97:2f:61:
                    4b:96:3a:ec:0e:ab:12:92:4a:5a:94:e9:b6:02:05:
                    63:62:9c:90:41:24:82:f8:83:b9:95:4a:35:1d:07:
                    93:06:c6:44:f7:98:69:fe:0c:d4:e8:85:3e:0b:df:
                    55:ae:7f:3a:4d:dd:77:dc:d3:68:43:d9:63:83:bf:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:93:31:04:3C:CB:1F:E1:19:F1:C2:EB:E0:1C:56:C7:DF:36:12:B6
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3354/jJMxBDzLH-EZ8cLr4BxWx982ErY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.96.0/19
                  202.173.224.0/19
                  211.148.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:76:bf:bd:83:56:f5:a1:69:bd:da:ac:f6:fd:78:37:22:9c:
         bd:6e:6b:4e:a1:cd:49:f8:33:5c:42:36:73:26:22:f8:85:46:
         13:73:c6:38:ae:6b:87:f6:9c:a4:2e:35:26:f1:7f:c8:fc:41:
         d3:44:02:bf:1a:82:4c:e7:8f:ae:dd:7d:1f:0a:ed:00:79:7c:
         e6:79:85:b5:c8:90:ff:29:57:4f:32:84:81:08:6b:e7:e2:3a:
         4f:43:8e:e5:1b:34:06:33:9a:68:6a:7f:cf:eb:8c:15:40:a1:
         fa:d6:1b:b0:05:ae:0e:72:56:2e:20:d1:79:84:cf:b8:a7:d0:
         75:d2:60:89:d2:23:5c:72:74:19:af:cc:09:86:41:ad:b0:42:
         e1:7a:ed:30:78:b3:05:9c:c8:9d:7d:4f:1b:e9:a2:18:1a:87:
         04:3e:99:5c:e3:c1:4a:7b:4b:bb:0f:91:e9:6c:91:4c:ca:ac:
         a0:59:46:88:70:8f:39:49:e5:ba:7a:77:9f:11:86:cb:70:f3:
         16:96:d7:a3:11:0f:84:fe:9c:63:66:2b:6a:d3:c9:75:da:30:
         df:11:56:a8:d6:c7:b7:fc:ee:a2:71:19:4b:ec:41:28:b0:e6:
         d0:ea:ed:b2:1a:74:ea:36:f9:d1:30:e0:88:40:26:5f:38:95:
         2b:5c:15:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----