This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qZvZ5t79lpSrRdfzLK3QHlKz348.cer
File:                     qZvZ5t79lpSrRdfzLK3QHlKz348.cer (raw, json)
Hash identifier:          dZrJRqH9cWnn8Ra9k6eQKl0IJk/NTtTDDG0rOaUUT0c=
Subject key identifier:   A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:28:39 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 63580
                          IP: 103.61.104.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59082 (0xe6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:28:39 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=A99BD9E6DEFD9694AB45D7F32CADD01E52B3DF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:95:42:c1:f9:5c:78:d0:32:62:0f:42:cf:
                    b1:6f:97:a1:91:4b:a2:dc:aa:7c:50:a5:5e:7d:f9:
                    5d:bc:74:18:3f:8e:af:f2:0a:a1:c0:5e:ad:42:42:
                    65:a4:76:fa:95:58:65:c0:4a:a7:9c:33:a6:ba:01:
                    0c:35:6e:74:82:ad:c1:b4:01:57:7b:c0:31:00:05:
                    c5:e0:da:19:6b:54:80:f7:3b:c7:18:9a:c3:cb:b9:
                    b7:04:27:7f:7f:2c:2f:f5:25:ab:8f:13:41:ca:6e:
                    b9:d7:7e:0c:46:e3:ed:cb:45:f6:22:25:f2:fd:ce:
                    fb:c9:c1:1e:f2:40:96:cc:df:3c:17:d9:00:d8:76:
                    03:82:b1:5f:c2:12:07:f0:a0:69:26:4a:c0:cc:21:
                    6e:fb:0c:8f:a3:de:cb:78:4a:0a:14:4f:db:33:6d:
                    ef:9f:32:95:bc:5c:41:bf:ac:30:bb:be:01:13:99:
                    e0:21:35:f2:5b:e0:cd:a2:47:cc:ac:8c:60:8e:79:
                    cd:cc:07:e0:88:2f:6a:59:c6:22:3c:7e:b4:9f:f0:
                    bd:85:89:30:d4:52:b9:db:06:1c:45:a6:ec:cf:6b:
                    1b:11:af:92:47:2c:da:98:c1:a6:19:30:30:ab:dc:
                    49:8e:18:54:67:b4:03:e8:d0:21:6d:d6:34:a4:c5:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9B:D9:E6:DE:FD:96:94:AB:45:D7:F3:2C:AD:D0:1E:52:B3:DF:8F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2363/qZvZ5t79lpSrRdfzLK3QHlKz348.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63580

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:07:5e:a9:48:45:97:ed:e2:ea:e9:cc:02:7f:62:bf:cd:
         c8:5a:2d:1c:d1:92:9b:55:e5:dd:f5:62:c7:63:8a:5c:b8:91:
         bd:15:1d:2d:8c:a5:1c:e9:cb:cb:64:1c:b9:23:c6:8e:87:b5:
         ef:a8:68:21:5d:73:9b:71:f9:b4:e9:47:35:57:b1:98:9d:b3:
         da:6e:20:2d:01:80:e0:79:04:80:65:25:19:20:ef:4b:21:58:
         df:32:01:c0:2f:35:0a:f0:10:6e:9b:38:59:82:6e:db:a0:3d:
         82:d2:80:37:c4:e7:b5:64:30:34:96:9b:02:f3:c3:f7:26:65:
         5b:f4:56:1a:30:ea:8b:9a:65:4c:bb:a2:06:87:ce:7b:ec:31:
         89:b7:21:e1:39:3f:3f:b5:d6:a1:b7:6d:ec:af:25:04:c2:35:
         18:e2:2d:89:05:6f:87:e3:de:15:75:9c:bf:fd:21:c0:6d:5d:
         1e:ec:d0:8e:ea:69:4c:2d:b2:a7:fa:1c:ce:d7:c2:0d:56:e7:
         ca:e0:52:74:39:8c:fc:b2:af:51:91:7c:c1:71:00:b4:c3:49:
         fe:d0:2f:0e:af:40:fc:fc:39:48:35:34:6f:15:ab:44:b1:06:
         64:d3:65:55:b2:25:bf:43:57:ba:8e:ed:2a:05:3c:33:fb:95:
         ec:35:9b:52
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIDAObKMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI4MzlaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKEE5OUJEOUU2REVGRDk2OTRBQjQ1RDdGMzJDQUREMDFFNTJCM0RG
OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrpVCwflceNAyYg9C
z7Fvl6GRS6LcqnxQpV59+V28dBg/jq/yCqHAXq1CQmWkdvqVWGXASqecM6a6AQw1
bnSCrcG0AVd7wDEABcXg2hlrVID3O8cYmsPLubcEJ39/LC/1JauPE0HKbrnXfgxG
4+3LRfYiJfL9zvvJwR7yQJbM3zwX2QDYdgOCsV/CEgfwoGkmSsDMIW77DI+j3st4
SgoUT9szbe+fMpW8XEG/rDC7vgETmeAhNfJb4M2iR8ysjGCOec3MB+CIL2pZxiI8
frSf8L2FiTDUUrnbBhxFpuzPaxsRr5JHLNqYwaYZMDCr3EmOGFRntAPo0CFt1jSk
xQcnAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUqZvZ5t79lpSrRdfzLK3QHlKz348w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIz
NjMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjM2My9xWnZaNXQ3OWxwU3JSZGZ6TEszUUhsS3ozNDgubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4XDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmc9aDANBgkqhkiG9w0BAQsFAAOCAQEAXmEHXqlIRZft4urpzAJ/
Yr/NyFotHNGSm1Xl3fVix2OKXLiRvRUdLYylHOnLy2QcuSPGjoe176hoIV1zm3H5
tOlHNVexmJ2z2m4gLQGA4HkEgGUlGSDvSyFY3zIBwC81CvAQbps4WYJu26A9gtKA
N8TntWQwNJabAvPD9yZlW/RWGjDqi5plTLuiBofOe+wxibch4Tk/P7XWobdt7K8l
BMI1GOItiQVvh+PeFXWcv/0hwG1dHuzQjuppTC2yp/ocztfCDVbnyuBSdDmM/LKv
UZF8wXEAtMNJ/tAvDq9A/Pw5SDU0bxWrRLEGZNNlVbIlv0NXuo7tKgU8M/uV7DWb
Ug==
-----END CERTIFICATE-----