This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
File:                     tRlLGMyNlt0mESh8YqnqgiDbOm4.cer (raw, json)
Hash identifier:          0nuz0AeQIh852R3/9rnJy0NpFHtwDOYaOkc1dTfnUDA=
Subject key identifier:   B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E7B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 12 Jan 2026 19:58:51 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 59002
                          IP: 103.229.20.0/22
                          IP: 121.100.128.0/18
                          IP: 2400:d780::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59319 (0xe7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan 12 19:58:51 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:09:bf:a3:d7:1e:61:de:58:da:50:87:9b:
                    f1:67:07:01:94:bc:e4:f8:a3:b8:12:2c:80:c7:89:
                    ce:9e:3a:e6:97:33:3e:2d:e6:bf:d6:40:b6:6a:98:
                    15:5b:55:52:33:cf:59:51:21:10:72:34:6f:70:86:
                    1e:de:2a:a7:8b:a1:50:47:e8:95:ac:9b:13:e5:fa:
                    d9:c1:1b:13:21:29:0e:21:c3:31:14:e1:74:c2:6b:
                    b1:f3:2e:8d:14:86:20:a2:0c:90:4e:24:cc:16:10:
                    f7:c2:51:0c:23:eb:96:b2:67:a9:0d:92:25:ed:52:
                    a3:dc:14:ce:b1:2a:7d:ca:8f:dd:5c:4e:be:ff:2f:
                    a8:03:4a:b1:e5:5f:78:aa:bc:3a:80:78:5a:ca:aa:
                    91:4e:db:7a:01:ce:97:d7:6e:cf:bd:88:c3:20:6b:
                    1e:09:6e:c0:38:98:0f:19:d8:a6:f2:34:8c:83:85:
                    53:d6:5d:f1:91:16:4b:c9:d6:fa:e7:a2:74:d0:10:
                    47:bf:fd:d3:76:b9:98:a5:1a:5d:16:99:e9:f9:4e:
                    38:dc:0c:59:9f:c4:46:ed:61:9b:87:50:c9:52:51:
                    95:47:0b:49:d2:8d:8c:19:12:51:56:36:9b:31:b3:
                    5c:26:d8:1d:77:b2:86:c6:8c:79:2a:95:7e:80:3a:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59002

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.20.0/22
                  121.100.128.0/18
                IPv6:
                  2400:d780::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:25:59:fb:ee:9e:54:ed:ac:bc:23:ea:b1:12:ee:e9:22:
         8c:82:18:c1:d2:b4:6a:94:ad:b5:c1:d3:29:86:7f:7c:c9:45:
         84:cf:50:03:a7:8c:a2:e9:ed:e6:af:72:d6:9f:fb:dc:56:e7:
         5c:16:bd:c2:03:4c:80:25:72:ec:22:91:6c:27:17:96:8d:22:
         d1:7a:9f:ac:82:93:6d:0c:9a:c0:b1:1e:68:82:c3:aa:71:2e:
         26:75:5c:6f:27:9b:4a:61:45:a4:04:19:16:82:a6:b9:d7:43:
         34:1d:6d:c1:97:3c:c7:11:12:ff:d5:bc:a9:03:dd:f6:a8:57:
         50:1b:59:91:84:39:d0:d4:d1:65:eb:bc:55:7b:d5:e2:8b:15:
         b3:57:dc:19:b2:06:48:f1:2d:e7:23:48:22:d3:d1:a8:e1:27:
         17:88:47:86:45:2d:a1:09:16:0b:13:31:c9:9d:45:49:a7:c9:
         9c:b9:39:6e:b6:26:fe:a6:12:da:49:a5:8d:ab:be:c6:01:d0:
         b1:85:6f:69:f5:72:0f:b7:88:b0:6b:f6:38:2d:e3:e6:67:09:
         9a:bc:11:61:06:6f:a1:a7:29:0b:35:f2:92:77:05:8c:fc:80:
         b4:0b:c0:62:43:60:23:9f:45:90:b9:fe:e5:fa:32:5b:08:fd:
         d5:90:98:e5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAOe3MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNjAxMTIxOTU4NTFaFw0yNzAxMDkwODIzMThaMDMx
MTAvBgNVBAMTKEI1MTk0QjE4Q0M4RDk2REQyNjExMjg3QzYyQTlFQTgyMjBEQjNB
NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZgm/o9ceYd5Y2lCH
m/FnBwGUvOT4o7gSLIDHic6eOuaXMz4t5r/WQLZqmBVbVVIzz1lRIRByNG9whh7e
KqeLoVBH6JWsmxPl+tnBGxMhKQ4hwzEU4XTCa7HzLo0UhiCiDJBOJMwWEPfCUQwj
65ayZ6kNkiXtUqPcFM6xKn3Kj91cTr7/L6gDSrHlX3iqvDqAeFrKqpFO23oBzpfX
bs+9iMMgax4JbsA4mA8Z2KbyNIyDhVPWXfGRFkvJ1vrnonTQEEe//dN2uZilGl0W
men5TjjcDFmfxEbtYZuHUMlSUZVHC0nSjYwZElFWNpsxs1wm2B13sobGjHkqlX6A
Oso3AgMBAAGjggKEMIICgDAdBgNVHQ4EFgQUtRlLGMyNlt0mESh8YqnqgiDbOm4w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzcy
Ny8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC83MjcvdFJsTEdNeU5sdDBtRVNoOFlxbnFnaURiT200Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5nowNAYIKwYBBQUHAQcBAf8EJTAjMBIE
AgABMAwDBAJn5RQDBAZ5ZIAwDQQCAAIwBwMFACQA14AwDQYJKoZIhvcNAQELBQAD
ggEBAAlcJVn77p5U7ay8I+qxEu7pIoyCGMHStGqUrbXB0ymGf3zJRYTPUAOnjKLp
7eavctaf+9xW51wWvcIDTIAlcuwikWwnF5aNItF6n6yCk20MmsCxHmiCw6pxLiZ1
XG8nm0phRaQEGRaCprnXQzQdbcGXPMcREv/VvKkD3faoV1AbWZGEOdDU0WXrvFV7
1eKLFbNX3BmyBkjxLecjSCLT0ajhJxeIR4ZFLaEJFgsTMcmdRUmnyZy5OW62Jv6m
EtpJpY2rvsYB0LGFb2n1cg+3iLBr9jgt4+ZnCZq8EWEGb6GnKQs18pJ3BYz8gLQL
wGJDYCOfRZC5/uX6MlsI/dWQmOU=
-----END CERTIFICATE-----