This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
File:                     sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer (raw, json)
Hash identifier:          HaSh7FfGsLtm/cpbnR/YbvwuDFEsr2Mm/EzmkKHBQ4M=
Subject key identifier:   B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:20 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 103.96.212.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59122 (0xe6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:20 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:f1:a3:90:68:fd:1b:72:16:01:0c:d8:69:
                    ab:da:fb:05:fb:b2:3d:a9:87:19:0c:6a:36:c3:c1:
                    bd:19:4e:80:c1:c3:1d:a2:52:54:2d:9f:a7:e0:85:
                    b7:e6:92:bb:76:97:fd:ee:d0:c1:d7:7c:42:7b:97:
                    c1:e6:d6:2a:b1:db:bb:91:d7:a8:3b:f7:74:c7:49:
                    6b:6a:66:54:7e:a8:c9:0d:f5:9e:47:f0:85:df:23:
                    e3:72:08:6f:91:d6:ba:a0:ed:29:bb:5c:a5:2e:20:
                    2d:f7:4b:b2:b2:7e:a1:12:47:c1:9b:c0:6c:6d:a0:
                    1b:ed:4a:ce:6e:33:9d:db:a6:11:e6:87:f8:1e:81:
                    83:12:31:7c:8b:a2:0a:6f:3b:34:93:b9:a5:5c:ac:
                    8d:0e:86:45:70:c1:0f:7a:ee:84:2f:89:61:0a:0e:
                    2a:83:a0:67:0d:fd:59:20:3b:2e:42:84:78:94:99:
                    9f:fe:b7:0b:20:01:42:e8:87:59:ee:05:ba:f1:b4:
                    eb:6d:e0:7e:cb:77:7a:82:fb:12:fc:21:74:6d:76:
                    33:18:a7:24:fd:d9:29:52:4f:cc:e2:df:b2:5f:8b:
                    84:c4:68:d7:0b:7a:7f:08:95:95:29:ef:aa:9c:00:
                    44:1b:85:8d:91:56:20:42:9f:f3:f0:1c:2e:5e:ad:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:6f:09:34:15:81:48:d2:6c:44:a5:7e:f5:86:06:49:d6:11:
         fc:2b:6b:bf:b8:d3:43:e2:25:92:be:ba:94:79:e0:13:86:fa:
         15:43:a2:7e:76:2e:8c:7e:39:40:76:ab:a4:62:0a:37:a3:f6:
         4f:e5:f3:9e:d3:e6:55:7a:fc:c5:1c:d0:53:aa:8a:7d:f0:53:
         d0:a3:05:a1:be:7a:69:01:00:de:b8:9b:42:03:ad:64:9b:de:
         75:53:1d:e2:c9:3a:be:ac:e3:72:3e:ce:c3:98:ea:0a:67:5d:
         d9:cc:5d:4f:dd:54:fa:dc:40:98:18:1c:c3:dd:2d:7a:c8:2d:
         43:14:96:35:f6:90:96:94:30:17:c3:ad:53:ac:02:b1:de:e1:
         55:85:ac:59:4f:80:30:aa:bd:bf:56:9b:b1:23:24:8b:70:4f:
         15:51:fb:fe:f4:e5:7c:67:bf:ac:79:cb:c8:3c:2e:25:0e:19:
         7e:51:98:4f:3c:14:53:d8:39:2f:35:9b:9d:e4:0f:e8:ba:0c:
         34:59:eb:25:5d:08:f8:24:e4:a9:d0:1f:70:36:8d:3b:75:88:
         b4:cc:ba:17:f5:78:3d:b3:b9:0c:45:14:99:5e:5e:b0:15:32:
         21:6e:29:e4:10:49:f6:ac:48:a7:92:bb:d8:3e:83:3a:d1:cb:
         01:71:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----