This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qaFpos8CL7oK84PKmXtFZP7V-Js.cer
File:                     qaFpos8CL7oK84PKmXtFZP7V-Js.cer (raw, json)
Hash identifier:          JowGsi42scnLPteNex3bQ2bXOTOPsvvBWT+vHkFWinE=
Subject key identifier:   A9:A1:69:A2:CF:02:2F:BA:0A:F3:83:CA:99:7B:45:64:FE:D5:F8:9B
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       446C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/qaFpos8CL7oK84PKmXtFZP7V-Js.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:28:14 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 138.252.72.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17516 (0x446c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Jan  9 08:28:14 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=A9A169A2CF022FBA0AF383CA997B4564FED5F89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:77:83:0d:3e:1d:ff:1d:8d:fb:f4:46:b2:
                    4f:fe:35:f9:19:44:4c:f9:1f:a4:29:60:1d:22:be:
                    83:ed:6f:08:47:d8:49:af:ac:b5:0c:9f:24:4e:79:
                    bf:b9:94:0a:99:1f:e9:f2:56:2b:8b:2a:e8:75:dc:
                    aa:a6:9f:7e:e6:81:d4:21:73:f5:6d:88:1f:d3:8c:
                    9d:5c:e0:2d:60:74:2d:3b:0e:cb:67:9c:58:08:94:
                    d2:ba:d5:46:c1:40:3f:97:6d:1c:c3:61:f6:34:b0:
                    dc:db:49:11:eb:9d:9a:48:3d:03:fd:a0:f9:6e:45:
                    88:92:2e:75:46:93:2a:a3:b8:96:70:60:1c:90:7f:
                    69:d9:f0:22:69:2f:d0:e5:27:21:91:c3:47:14:54:
                    8d:01:22:99:f3:52:bd:7c:f0:c9:e7:31:8a:fa:2a:
                    2f:e5:bf:72:96:0a:b2:8c:1f:8b:98:db:7b:2f:1b:
                    48:42:8d:d6:49:2c:f8:b3:1d:3d:5c:0c:27:38:35:
                    cc:20:04:e5:84:ea:e3:26:bf:95:e2:bd:1f:46:50:
                    88:a9:4c:4d:6f:79:18:9e:a6:51:c9:32:46:fb:a7:
                    e6:c6:90:50:c5:51:15:05:b1:0d:ea:81:20:89:4c:
                    78:17:96:d9:df:f0:a9:14:44:e6:33:18:80:83:e1:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A1:69:A2:CF:02:2F:BA:0A:F3:83:CA:99:7B:45:64:FE:D5:F8:9B
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3399/qaFpos8CL7oK84PKmXtFZP7V-Js.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:cf:b5:36:0b:eb:9d:af:59:84:86:76:22:b2:92:39:2f:
         d1:95:ae:38:6e:92:ce:24:cd:f2:48:07:a4:31:d9:d8:30:c3:
         38:d5:76:6d:40:c0:53:16:c8:db:18:89:2c:ec:3b:e7:18:4f:
         03:7a:3b:2c:21:7c:8a:9b:7f:46:bf:de:7f:02:74:e7:04:48:
         f1:80:47:63:5f:b3:01:00:72:7a:de:32:1c:c7:fb:6c:78:d3:
         de:9d:ac:c2:f1:9b:e2:da:7c:90:17:1d:a4:ae:82:33:b9:fe:
         54:4e:60:c9:a7:b8:58:60:99:b1:c9:41:a9:4c:b2:27:2d:f4:
         57:7f:94:1b:9b:21:76:43:56:a8:b8:49:f5:b5:8d:27:76:b5:
         b8:b9:44:8c:74:1f:87:cf:e7:09:3a:1f:68:5b:79:7a:12:95:
         2d:14:52:d2:87:c3:86:17:d0:b3:7b:f4:8a:ac:8c:53:3c:c0:
         7e:d3:63:ad:0f:31:c8:65:cf:b4:4b:e7:54:70:83:8d:ce:67:
         a5:cb:71:31:8e:a0:97:5c:82:ee:41:7e:f3:5f:71:c4:08:e3:
         46:65:41:42:2d:65:fd:9e:ff:d2:5f:e0:41:ce:00:bb:2d:c9:
         93:72:03:54:57:f0:e3:af:4e:b3:f6:9b:a5:aa:6e:48:80:19:
         2c:eb:a3:06
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICRGwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw
QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjgxNFoXDTI3MDEwOTA4MjMxOFowMzEx
MC8GA1UEAxMoQTlBMTY5QTJDRjAyMkZCQTBBRjM4M0NBOTk3QjQ1NjRGRUQ1Rjg5
QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVLd4MNPh3/HY379Eay
T/41+RlETPkfpClgHSK+g+1vCEfYSa+stQyfJE55v7mUCpkf6fJWK4sq6HXcqqaf
fuaB1CFz9W2IH9OMnVzgLWB0LTsOy2ecWAiU0rrVRsFAP5dtHMNh9jSw3NtJEeud
mkg9A/2g+W5FiJIudUaTKqO4lnBgHJB/adnwImkv0OUnIZHDRxRUjQEimfNSvXzw
yecxivoqL+W/cpYKsowfi5jbey8bSEKN1kks+LMdPVwMJzg1zCAE5YTq4ya/leK9
H0ZQiKlMTW95GJ6mUckyRvun5saQUMVRFQWxDeqBIIlMeBeW2d/wqRRE5jMYgIPh
vN8CAwEAAaOCAlUwggJRMB0GA1UdDgQWBBSpoWmizwIvugrzg8qZe0Vk/tX4mzAf
BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx
RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5
OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zMzk5L3FhRnBvczhDTDdvSzg0UEttWHRGWlA3Vi1Kcy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/EgwDQYJKoZIhvcNAQELBQAD
ggEBAKGSz7U2C+udr1mEhnYispI5L9GVrjhuks4kzfJIB6Qx2dgwwzjVdm1AwFMW
yNsYiSzsO+cYTwN6OywhfIqbf0a/3n8CdOcESPGAR2NfswEAcnreMhzH+2x4096d
rMLxm+LafJAXHaSugjO5/lROYMmnuFhgmbHJQalMsict9Fd/lBubIXZDVqi4SfW1
jSd2tbi5RIx0H4fP5wk6H2hbeXoSlS0UUtKHw4YX0LN79IqsjFM8wH7TY60PMchl
z7RL51Rwg43OZ6XLcTGOoJdcgu5BfvNfccQI40ZlQUItZf2e/9Jf4EHOALstyZNy
A1RX8OOvTrP2m6WqbkiAGSzrowY=
-----END CERTIFICATE-----