This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer
File:                     r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer (raw, json)
Hash identifier:          j1sF5alKOMVfJFxIrpE9RD8KS6jwLdrrknJBGjMYdOU=
Subject key identifier:   AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:03 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 2401:a720::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59102 (0xe6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:03 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:ac:7b:83:c2:5c:5a:cd:e2:76:64:31:01:
                    b6:81:2b:77:7b:7f:96:68:39:07:f3:31:75:86:f4:
                    95:ec:77:a2:6d:19:8d:8c:29:49:21:04:39:98:43:
                    2d:3c:6d:8d:eb:b3:08:c5:2a:7d:79:4e:63:22:38:
                    fc:0a:8e:5a:e5:de:8a:8c:e9:61:d3:53:1b:76:38:
                    f4:b9:18:98:b2:a1:8a:02:ba:fb:39:c8:3a:f4:ac:
                    ed:73:e5:73:9a:35:45:10:26:b6:09:49:52:ec:29:
                    2a:ab:e8:cc:d4:df:6a:2a:d2:e3:56:61:76:69:26:
                    b9:1a:0c:b9:b2:36:06:12:d3:40:d6:72:11:61:f7:
                    ec:59:7e:dc:5b:9a:3d:0e:da:14:8e:40:da:68:37:
                    a7:43:08:3f:d3:eb:7b:f2:7d:90:98:a4:c2:23:9a:
                    a7:b1:d0:49:50:29:83:90:15:25:11:7d:20:90:72:
                    42:cf:cf:38:3d:76:a3:49:39:c1:f2:72:aa:39:ba:
                    f3:cb:53:ed:ca:28:b3:74:6e:25:78:d6:02:e6:64:
                    d8:24:92:82:34:f2:38:74:78:28:91:cf:f0:91:a7:
                    d4:57:35:89:99:b8:83:e0:ed:a6:aa:64:30:18:36:
                    25:ac:36:65:dd:e4:ad:99:18:a0:fa:65:cb:81:a4:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a720::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:25:10:d0:19:65:03:bb:02:4d:3b:ca:69:e9:3a:96:cf:e1:
         1d:4a:db:ac:07:68:2e:eb:f9:c1:9e:3f:76:3c:49:42:7d:02:
         1d:1b:1e:ca:ae:00:db:0a:40:60:31:d8:ae:de:2f:4a:bc:34:
         6b:83:b5:5c:b9:16:cd:25:4e:95:2a:c1:e8:b8:d2:0b:32:8f:
         99:0c:08:24:b8:f6:73:f3:64:cf:bd:ba:e0:45:ac:a8:c5:08:
         7b:87:dc:8a:d7:36:e6:54:14:96:ea:05:ca:2d:e6:4a:74:cf:
         b7:68:73:cf:31:46:22:d2:8f:06:70:5f:d9:de:89:be:53:5c:
         7d:68:36:1b:56:b6:4f:eb:22:8b:86:f7:89:df:d7:8f:17:87:
         dd:35:9b:3d:dc:05:2f:60:b6:d2:7b:bb:1a:d0:ad:de:a2:ed:
         f8:d3:bb:70:5d:e2:43:b9:38:af:f1:5f:e1:a5:7f:cf:6b:bc:
         92:df:17:f4:a6:2f:0b:64:6c:30:6c:e6:f6:04:1b:a8:b3:06:
         aa:53:7c:74:09:6a:2f:ae:aa:d5:68:bc:b7:20:48:c1:28:a9:
         ab:fd:8a:36:0d:fe:a7:d6:93:44:10:c6:29:81:db:e7:29:b9:
         37:c6:95:f7:e5:4d:f5:17:9c:bb:5c:81:16:9c:27:cd:eb:36:
         86:46:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----