This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer
File:                     nD9ngtSgjANGiVsLJHxcVBfpjgs.cer (raw, json)
Hash identifier:          vc4nNDJjDYV0/Xz/ua0fqvcLc5FJhFr1gm8QciPxRrM=
Subject key identifier:   9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E696
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:27:12 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 9803
                          AS: 17963
                          AS: 23849
                          IP: 2402:b200::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59030 (0xe696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:27:12 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9C3F6782D4A08C0346895B0B247C5C5417E98E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b3:b1:38:e8:36:df:5e:e2:51:69:27:c2:43:
                    57:df:78:9e:2b:4a:68:9f:af:ce:90:4b:d9:69:7c:
                    2c:5c:ea:67:0d:96:cb:2a:86:20:3e:5c:20:76:fd:
                    04:00:40:c7:68:b9:7e:24:c3:c7:1e:f8:55:2e:a8:
                    12:68:16:8d:dd:50:0d:b0:9f:b8:09:af:81:b7:8f:
                    19:88:9a:19:27:05:5c:41:53:81:95:db:9e:2b:93:
                    48:0a:64:c4:a2:3f:bf:03:cb:5b:58:24:ff:27:cf:
                    44:9d:40:23:c3:5a:d9:3a:ab:81:1e:f1:34:6c:c6:
                    14:c0:d1:27:32:8b:4e:49:25:d0:bf:89:36:3e:4f:
                    8c:73:8a:e0:2a:ed:3d:22:26:33:b2:0e:d8:80:4b:
                    6f:b4:21:c9:81:49:2a:1a:72:f6:22:9b:c4:01:3d:
                    a9:37:84:72:01:49:98:f0:fd:92:c1:37:c7:5c:15:
                    1f:05:41:98:56:75:49:f4:15:74:d1:5f:4f:8d:5c:
                    69:bd:d4:b6:4c:2d:f8:b8:85:0a:bc:b2:c0:87:3f:
                    49:cf:ed:4f:f7:05:9d:af:d0:0f:83:d3:c5:6f:3b:
                    90:31:76:24:2a:79:b1:e8:cc:ea:d0:e5:05:9b:c5:
                    07:b6:55:0d:04:9b:99:d4:88:6a:16:14:3a:dd:ea:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9803
                  17963
                  23849

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:b200::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:42:b3:70:ef:b3:97:47:0f:4e:57:a3:bb:21:8a:4c:db:
         52:ea:84:36:1a:17:77:39:f3:fb:40:7f:e1:28:bb:16:91:7d:
         0c:7f:46:1f:7a:fc:08:14:f5:ab:3b:57:1e:c1:6c:b7:66:9b:
         3a:16:5a:df:a2:f9:c1:0e:1d:f9:84:8d:be:89:a3:d0:d1:99:
         db:b9:a4:e1:1a:9f:f9:cb:43:09:4c:b6:f9:65:65:c2:27:f4:
         92:7d:69:1b:21:a4:27:f4:1e:45:b9:61:b6:e9:ae:87:6e:6c:
         66:fa:9a:6d:cc:a3:1f:6d:19:ac:d2:3f:9a:3f:4c:35:0f:e7:
         02:bb:98:ff:2f:a5:07:d4:97:f0:89:ad:c1:5e:0c:b1:71:a4:
         43:58:af:29:8b:8e:85:82:b3:a7:32:d4:f9:8e:42:e5:3a:b9:
         29:0d:25:63:fe:0f:2b:24:cc:43:18:3a:2a:e9:12:80:50:b2:
         2a:3c:44:dc:9e:3a:ef:50:87:49:7d:d3:53:f9:9a:29:de:19:
         b2:3f:7b:9d:9c:22:4f:f0:cb:65:6f:15:17:79:66:77:9c:fe:
         6a:a4:d1:82:75:c9:4d:40:06:fe:d2:6a:fe:c2:47:2b:14:5b:
         84:33:7f:a4:cf:8e:6e:e8:77:54:cd:95:ed:ef:40:2f:e7:37:
         05:93:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----