This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
File:                     nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer (raw, json)
Hash identifier:          63S7GnJQ3jvuD20/Mmk5pMVUGnoKyQQEYUf0A7ZK238=
Subject key identifier:   9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:31:05 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 36.206.0.0/16
                          IP: 36.212.0.0 -- 36.221.255.255
                          IP: 110.100.0.0/16
                          IP: 110.116.0.0/16
                          IP: 110.199.0.0/16
                          IP: 110.218.0.0/15
                          IP: 122.94.0.0/16
                          IP: 123.77.0.0/16
                          IP: 222.45.0.0/16
                          IP: 222.49.128.0/17
                          IP: 222.59.128.0/17
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59236 (0xe764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:31:05 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:ad:1b:43:76:5d:77:9d:6c:3c:27:96:d9:
                    fb:42:1d:91:c9:d2:bc:ee:73:8e:09:97:59:99:b3:
                    20:75:1f:bb:19:ff:a8:22:12:f8:92:1b:37:f6:c6:
                    07:2f:f0:83:52:81:88:0e:ad:9c:7e:a1:60:0e:e9:
                    2f:1f:2f:6e:48:69:52:6f:a2:67:4f:3d:58:37:1f:
                    4f:59:4c:82:6d:74:4e:34:8e:c2:50:84:a9:2a:a7:
                    83:00:61:3d:e5:03:f9:b1:86:3f:04:4c:ce:69:33:
                    1d:31:6e:27:e1:01:be:88:c4:60:e6:00:2b:a3:b7:
                    09:f1:5e:9a:e5:87:ee:13:e6:b2:7b:b6:4c:9c:6c:
                    67:ee:9f:18:26:b8:05:9e:cc:b2:ff:ad:4f:9d:88:
                    78:8e:b7:bb:ef:9f:31:a5:88:96:3e:06:6c:34:46:
                    35:a4:e7:ca:eb:44:b3:51:10:57:32:6a:73:79:4e:
                    a7:ed:1e:7a:0c:b3:59:9b:c5:f8:1e:0d:dc:14:c3:
                    a3:87:63:5b:a9:8e:e8:c1:48:6a:a1:00:7d:82:67:
                    14:21:1d:01:d9:6c:47:a5:08:e4:6c:60:37:3e:cf:
                    01:0d:97:38:d8:37:af:98:9c:68:c9:e3:af:f2:7d:
                    9a:65:6a:21:61:40:a1:94:3a:c3:12:62:14:93:57:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.206.0.0/16
                  36.212.0.0-36.221.255.255
                  110.100.0.0/16
                  110.116.0.0/16
                  110.199.0.0/16
                  110.218.0.0/15
                  122.94.0.0/16
                  123.77.0.0/16
                  222.45.0.0/16
                  222.49.128.0/17
                  222.59.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:d5:41:5e:81:d6:d6:da:e9:be:06:37:6f:bc:b0:bf:64:
         24:5f:84:d8:4e:54:12:3f:72:7b:eb:b2:c1:f7:30:2a:e3:95:
         c0:81:7a:70:61:32:5f:a7:cf:e8:5d:7d:28:af:d6:1a:e0:33:
         67:4b:a2:20:f0:bb:c7:62:84:6d:1a:ba:e1:47:e3:3c:57:df:
         fd:ae:9f:bf:38:0e:1c:fe:c2:82:02:01:57:50:8f:03:09:23:
         9c:fa:49:eb:5f:d1:9f:0d:35:22:df:35:37:09:92:9f:62:57:
         63:23:3d:b5:1a:25:be:3f:cd:81:09:22:f3:2a:ae:26:d8:c6:
         5c:4e:2a:94:de:04:61:e8:d1:98:d2:55:a1:38:d7:c5:f2:ea:
         c6:3d:ce:f0:3e:07:79:ca:76:fa:8b:04:44:87:9b:86:8d:24:
         e6:a6:9a:79:50:43:5a:6f:1d:21:e2:5a:68:a1:e7:1d:0d:29:
         f5:6e:ee:0e:9c:4e:e0:45:f6:2c:43:97:ef:48:e8:15:15:ab:
         10:91:17:2a:a5:0f:ae:51:0b:b5:77:59:f7:75:de:61:18:6d:
         83:56:9e:f0:d2:5b:6c:07:2c:f3:be:77:c1:cc:42:11:a7:5e:
         ed:b3:59:04:6f:ca:2f:bd:45:9c:9e:18:6a:85:32:30:47:fb:
         4d:a3:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----