This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/lSqtrTxu0krJJnnelLaRzxfF67A.cer
File:                     lSqtrTxu0krJJnnelLaRzxfF67A.cer (raw, json)
Hash identifier:          TGQ3e1c+IiIYC02J0o0Q/W2ayzZIzKtDjAx9rMCJTpQ=
Subject key identifier:   95:2A:AD:AD:3C:6E:D2:4A:C9:26:79:DE:94:B6:91:CF:17:C5:EB:B0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:28:37 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 38367
                          IP: 119.38.192.0/20
                          IP: 2400:ae00::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59080 (0xe6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:28:37 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=952AADAD3C6ED24AC92679DE94B691CF17C5EBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:50:7a:bb:ae:d5:ac:92:d6:76:63:0c:c9:
                    df:90:0c:dc:0a:74:9b:16:f7:fe:69:4c:46:2b:eb:
                    3b:2b:a4:ed:4d:d6:8d:d5:f4:c8:59:0e:41:dc:c5:
                    7e:e2:4c:8f:cf:fb:72:89:94:c9:db:73:52:c3:a6:
                    90:ef:4e:db:34:a5:b3:e0:de:a7:fd:bc:41:94:66:
                    90:00:cc:f7:ab:16:b3:34:e9:4d:ff:90:e2:e3:34:
                    57:f2:0d:e7:be:8c:a4:b2:fc:cf:0f:3d:f3:2a:77:
                    08:f6:d0:8b:91:f5:46:54:ac:26:49:d7:b2:36:30:
                    21:d0:db:63:bd:74:f9:2c:0d:b6:44:68:85:e0:a0:
                    e1:3a:0f:c3:d1:be:86:96:0a:a6:a3:09:ff:0c:59:
                    83:b2:8d:c3:33:f2:6e:af:ca:3d:82:a4:a6:74:77:
                    05:8a:86:90:59:70:f0:d3:64:82:4a:6a:0d:0e:9f:
                    43:6f:d7:31:2c:e0:70:13:06:06:b6:e7:83:28:91:
                    a6:52:ce:1d:aa:e8:4a:86:19:84:55:6e:00:be:07:
                    e5:3d:cf:e0:62:41:0c:a3:95:cf:3f:dd:8f:25:0c:
                    6f:1c:d1:2b:38:54:75:a5:48:43:e3:5c:8f:33:34:
                    0c:b1:24:b7:bf:31:8c:f9:6b:11:41:3a:8c:0c:52:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2A:AD:AD:3C:6E:D2:4A:C9:26:79:DE:94:B6:91:CF:17:C5:EB:B0
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/314/lSqtrTxu0krJJnnelLaRzxfF67A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38367

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.38.192.0/20
                IPv6:
                  2400:ae00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:5e:88:6e:c8:ec:48:46:66:c7:ca:2f:b4:8d:73:ae:e4:2d:
         ac:08:3b:61:57:9e:44:1e:b1:4f:d8:55:c8:29:11:6c:d1:2d:
         cf:61:d0:8f:1a:54:9f:08:01:53:22:e2:25:fc:8d:05:a2:0a:
         41:3f:bb:c6:e7:9f:0b:68:99:84:90:39:63:fd:f5:0a:b8:50:
         d7:9f:9f:00:06:39:58:09:88:8c:d4:2e:f9:ea:2b:07:c9:c5:
         55:dd:5b:ab:51:72:61:fb:93:6b:3f:30:4b:7c:b8:3f:e9:56:
         73:53:89:09:36:30:9d:16:5f:5c:66:07:cb:50:5c:8b:70:5f:
         5a:86:aa:2f:5c:38:84:d4:ce:15:7e:ee:44:0e:cb:27:8d:be:
         00:02:f5:ff:62:be:4d:5b:96:5c:3b:64:12:68:03:f5:5f:67:
         af:e9:2b:af:4f:34:fe:26:a6:d0:20:45:4d:a0:09:70:78:65:
         d7:9c:85:97:7f:7a:9d:81:3c:76:84:a0:c0:04:bc:10:b9:cb:
         95:a6:c8:8d:d3:a9:b3:b3:f7:af:31:bc:12:02:d3:4a:96:17:
         cd:d7:67:24:05:c1:fa:7e:fc:a6:b8:f7:96:f3:76:7a:93:af:
         06:d8:aa:df:17:fd:d7:ff:e6:55:3b:f6:72:db:21:3b:f4:84:
         61:1b:cd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----