This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer
File:                     jSonQ0MWY2ok_Gfrttz4kwSt8CI.cer (raw, json)
Hash identifier:          eG3OVWNz+TNf1H4H00YrH7pDYeSEZmWL4Xc1KbBYSsc=
Subject key identifier:   8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E698
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:27:15 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 137771
                          IP: 2402:4060::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59032 (0xe698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:27:15 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=8D2A27434316636A24FC67EBB6DCF89304ADF022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:60:a2:7d:b0:7a:09:b0:bc:5e:dc:ff:d2:
                    83:1b:e4:89:a1:30:39:05:31:b8:0b:0e:38:54:0a:
                    dd:79:1b:96:89:06:a7:eb:6e:fa:2a:25:64:65:48:
                    ef:a4:bd:2a:24:5b:03:9c:1f:c7:80:c0:27:db:73:
                    3e:f9:b4:eb:f2:14:3f:53:a8:96:a2:fa:e4:3a:8d:
                    d3:df:3f:cb:27:a9:fe:34:4f:e5:a8:73:be:94:1d:
                    27:0b:eb:da:6a:df:47:a7:02:b1:ed:ea:2b:79:c8:
                    8a:51:69:01:bb:38:42:27:15:05:81:06:ea:77:81:
                    0a:bb:9b:07:72:83:b9:e7:0f:7b:07:7b:fc:d3:0c:
                    3e:3e:fc:45:94:2a:cf:34:78:8c:e1:34:8b:e4:fe:
                    a6:98:60:47:1c:4c:81:55:3d:bc:90:d2:97:6f:cf:
                    9d:ce:10:ef:06:46:60:a5:49:94:6d:7c:a8:b9:79:
                    7a:d9:0f:e2:d9:fa:88:01:01:aa:81:bc:a3:dd:9e:
                    d2:25:62:69:e0:58:05:e3:6c:43:02:48:1c:14:ef:
                    b5:57:2e:15:3c:75:ed:af:9b:35:9f:fb:bc:1f:a1:
                    ed:1d:37:d6:01:0d:a9:70:e4:57:27:cc:a2:0e:a2:
                    43:12:b0:11:d5:66:90:d8:30:57:80:86:13:f4:90:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:27:43:43:16:63:6A:24:FC:67:EB:B6:DC:F8:93:04:AD:F0:22
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/jSonQ0MWY2ok_Gfrttz4kwSt8CI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137771

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4060::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:66:9e:bd:95:58:64:ad:5b:a5:8f:81:22:91:33:a1:eb:21:
         1d:d4:80:a3:89:2b:10:0c:e4:43:72:a5:5a:6b:8c:c8:28:e4:
         d8:0d:7b:98:01:62:32:45:52:6c:80:d1:aa:61:89:33:7a:e7:
         05:ea:92:01:19:df:bd:7a:df:26:50:23:ad:90:88:9f:c0:76:
         16:df:18:91:25:a7:d5:3b:ce:6a:1e:ac:ce:b5:6f:20:52:c7:
         b0:05:46:8a:87:05:7b:06:73:84:99:8e:1a:63:78:a2:f0:d0:
         e1:7e:8d:bf:f7:0a:24:53:7f:c2:27:2a:05:b6:2a:b1:f4:cc:
         db:d5:34:d1:46:09:07:3d:23:1d:8c:77:da:4f:2f:ae:ab:8f:
         c5:fa:df:1d:24:f3:d8:0b:e2:f7:1b:2d:0e:9f:f3:4c:7e:3a:
         8c:59:b2:c2:3b:65:96:7e:db:30:cf:1f:14:12:cb:2f:63:3c:
         6d:a2:e8:ee:58:57:3f:51:ac:69:ca:de:ce:48:2f:fb:8b:f4:
         75:04:25:15:a4:e0:d6:f5:1c:89:9e:5d:c3:54:38:bd:01:69:
         24:68:37:0f:2c:39:7b:b5:0e:bd:c0:fa:f1:ba:0c:da:3f:59:
         14:90:51:e8:d9:f2:7d:f8:a7:66:41:24:65:e6:10:13:c4:e0:
         8f:31:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----