This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer
File:                     kbPPvwbQ9PBhDSFyCrjHafp_AoU.cer (raw, json)
Hash identifier:          qIjkZql2gmR/uDstqDdKb/6E0+ty0KhT1WUcyXtA2Bw=
Subject key identifier:   91:B3:CF:BF:06:D0:F4:F0:61:0D:21:72:0A:B8:C7:69:FA:7F:02:85
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E688
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:27:01 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151241
                          IP: 2402:16e0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59016 (0xe688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:27:01 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=91B3CFBF06D0F4F0610D21720AB8C769FA7F0285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:d4:1c:e3:ab:c3:c0:96:6c:f1:34:b0:40:
                    80:72:18:73:ec:5f:ef:a9:9f:62:41:e3:83:87:8a:
                    79:7e:33:5b:85:a1:84:01:6e:21:5f:ea:9d:cc:19:
                    f3:8e:d3:99:82:31:ca:07:d2:ea:bb:54:19:5d:47:
                    94:65:91:78:58:d7:63:17:4e:3b:0b:dd:77:e5:4b:
                    fe:40:45:e4:0c:dd:df:c9:e4:8a:11:cf:bd:66:0b:
                    ed:09:71:f2:67:f1:ca:2e:68:bb:75:9e:5f:41:ab:
                    e7:92:19:4c:ce:33:fb:06:6d:bb:fa:1b:80:7b:91:
                    e5:b0:53:e4:1c:c0:75:97:6f:2b:7f:8b:38:c5:80:
                    3c:e5:dc:f4:b3:47:24:9c:16:e3:c0:0a:97:ac:f2:
                    0b:33:cd:98:53:33:07:25:b9:fd:20:86:d8:31:43:
                    77:a1:bd:5d:e2:0e:df:03:d8:dc:4f:79:bd:a0:88:
                    10:ba:ff:08:b6:07:ff:84:f9:8a:51:d6:b4:57:07:
                    01:4b:92:fb:61:46:78:80:d0:f4:c1:9c:9b:3d:0c:
                    57:42:79:bc:2e:85:4f:8b:0c:cd:00:c2:bf:b0:a7:
                    07:e3:2a:91:3a:58:8e:d2:dc:ac:d6:75:bb:35:a9:
                    8e:52:12:4f:73:f8:15:51:dc:7d:9c:fe:a2:69:77:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:CF:BF:06:D0:F4:F0:61:0D:21:72:0A:B8:C7:69:FA:7F:02:85
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3382/kbPPvwbQ9PBhDSFyCrjHafp_AoU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151241

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:16e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:66:5a:8d:b1:dd:a9:6a:e4:ef:39:e0:47:ba:93:50:8a:
         9b:c7:d7:19:9e:b3:82:5f:bb:ce:3b:58:2a:0b:cb:c1:d4:4e:
         b9:20:0d:d9:64:70:73:80:2a:1d:67:66:de:19:9c:ac:02:6c:
         3c:80:b5:8f:90:71:ca:a0:47:bb:8b:8c:56:20:ad:e4:7f:97:
         e3:99:5d:84:8d:7e:ea:04:3c:a1:ca:a9:50:e3:fb:ad:55:30:
         45:fb:12:9a:0b:90:0f:06:d7:91:48:bf:1f:3a:3b:cb:af:d0:
         26:5d:5d:1d:25:d2:cb:7c:03:8b:53:d7:14:0c:62:74:92:ef:
         92:d4:49:06:6e:51:d9:02:2b:f8:f3:a1:9d:d4:df:e9:74:8b:
         38:56:06:31:b4:06:82:f9:c6:e9:08:0d:a1:bd:7b:f6:1d:db:
         59:0f:b2:4f:1f:88:cf:47:13:f7:80:c7:9a:3b:ea:07:79:7c:
         ac:b2:03:5f:58:61:58:85:89:26:f7:26:f0:17:ce:68:af:c3:
         f3:0f:c0:22:b1:02:55:5c:7f:9b:2d:8d:c4:01:0c:9f:25:98:
         4a:fa:43:18:f8:bd:ba:90:e5:52:1e:10:51:04:f7:1d:a0:73:
         67:a6:66:39:5e:d0:59:9d:c4:fd:c1:63:f0:a8:3a:71:4b:ec:
         58:a9:2e:84
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIDAOaIMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI3MDFaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKDkxQjNDRkJGMDZEMEY0RjA2MTBEMjE3MjBBQjhDNzY5RkE3RjAy
ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJtQc46vDwJZs8TSw
QIByGHPsX++pn2JB44OHinl+M1uFoYQBbiFf6p3MGfOO05mCMcoH0uq7VBldR5Rl
kXhY12MXTjsL3XflS/5AReQM3d/J5IoRz71mC+0JcfJn8couaLt1nl9Bq+eSGUzO
M/sGbbv6G4B7keWwU+QcwHWXbyt/izjFgDzl3PSzRyScFuPACpes8gszzZhTMwcl
uf0ghtgxQ3ehvV3iDt8D2NxPeb2giBC6/wi2B/+E+YpR1rRXBwFLkvthRniA0PTB
nJs9DFdCebwuhU+LDM0Awr+wpwfjKpE6WI7S3KzWdbs1qY5SEk9z+BVR3H2c/qJp
d8RvAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUkbPPvwbQ9PBhDSFyCrjHafp/AoUw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
ODIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM4Mi9rYlBQdndiUTlQQmhEU0Z5Q3JqSGFmcF9Bb1UubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOyTAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQCFuAwDQYJKoZIhvcNAQELBQADggEBAKeXZlqNsd2pauTvOeBH
upNQipvH1xmes4Jfu847WCoLy8HUTrkgDdlkcHOAKh1nZt4ZnKwCbDyAtY+Qccqg
R7uLjFYgreR/l+OZXYSNfuoEPKHKqVDj+61VMEX7EpoLkA8G15FIvx86O8uv0CZd
XR0l0st8A4tT1xQMYnSS75LUSQZuUdkCK/jzoZ3U3+l0izhWBjG0BoL5xukIDaG9
e/Yd21kPsk8fiM9HE/eAx5o76gd5fKyyA19YYViFiSb3JvAXzmivw/MPwCKxAlVc
f5stjcQBDJ8lmEr6Qxj4vbqQ5VIeEFEE9x2gc2emZjle0FmdxP3BY/CoOnFL7Fip
LoQ=
-----END CERTIFICATE-----