This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vMAGgVZFL5mzQ1jfeKpFJEqmayE.cer
File:                     vMAGgVZFL5mzQ1jfeKpFJEqmayE.cer (raw, json)
Hash identifier:          50rGe8RJQPUGg25HV06unwPVmJSsoBvaJ0xDI7ukOG0=
Subject key identifier:   BC:C0:06:81:56:45:2F:99:B3:43:58:DF:78:AA:45:24:4A:A6:6B:21
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       44B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/vMAGgVZFL5mzQ1jfeKpFJEqmayE.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 12 Jan 2026 19:59:16 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 157.66.70.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17593 (0x44b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Jan 12 19:59:16 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=BCC0068156452F99B34358DF78AA45244AA66B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:29:ba:84:2c:c8:cc:c4:65:4b:c5:5b:ea:
                    86:79:18:fc:d7:c0:26:03:89:df:c0:34:43:4c:f6:
                    b5:f8:11:47:1e:98:38:21:7f:e3:68:67:31:8c:46:
                    b8:50:3c:e1:46:fc:d2:88:30:d6:66:22:cc:37:ca:
                    37:b5:ec:e2:57:40:01:e8:23:98:72:20:e2:40:2d:
                    a8:23:eb:9f:65:14:7e:4d:e9:ce:1e:3c:bc:7e:81:
                    00:e2:81:9c:34:1b:f3:32:57:19:04:40:85:89:f9:
                    37:6d:39:58:93:79:e8:44:05:a6:0b:bc:ce:00:ad:
                    ef:1e:46:43:fe:06:01:e2:9f:5d:86:06:1f:1e:14:
                    79:4e:61:d6:86:b9:bd:d5:90:0a:38:7f:c8:33:1b:
                    f5:4f:ce:4d:c5:a7:73:05:6d:b4:ee:63:e8:12:f5:
                    f7:56:ab:f3:cf:15:4e:d7:7c:1b:5a:34:31:fa:1e:
                    93:43:f9:cd:1c:fb:a8:e0:50:c7:17:3a:ee:37:01:
                    ac:96:e5:67:82:4f:51:f1:74:b6:c1:ac:50:ac:f5:
                    85:f9:9c:4c:ff:ea:c1:ca:7c:9f:ef:9f:92:4c:46:
                    90:be:9a:ad:20:73:1b:37:b5:69:66:44:d3:9b:d1:
                    73:5b:52:85:0c:ba:7c:a1:af:fe:ee:20:d8:9a:89:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:06:81:56:45:2F:99:B3:43:58:DF:78:AA:45:24:4A:A6:6B:21
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/vMAGgVZFL5mzQ1jfeKpFJEqmayE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:88:a7:5c:fa:fa:9b:7e:64:ff:35:68:dd:c6:6c:88:e7:e3:
         85:94:28:d7:06:87:f9:f7:24:71:a0:4e:62:5c:09:37:41:a4:
         42:64:1b:ac:b5:27:0e:b6:7f:97:2e:20:5c:34:dc:8e:ab:6b:
         af:81:d3:5e:9e:54:6a:c4:23:71:73:f5:6e:b8:59:35:3d:5d:
         28:bc:84:3e:65:87:43:21:7f:6d:d1:6a:90:f2:2f:c6:fe:ac:
         9e:d5:bc:90:a6:23:a4:96:7b:ca:cf:7e:a4:62:f1:7c:c3:0f:
         41:85:82:52:2f:51:60:20:d3:e2:d9:f7:04:65:ad:7a:fd:d2:
         8a:2b:f3:3d:bb:ca:9d:6c:70:c6:65:27:8c:4b:0d:46:e6:58:
         45:62:fa:d9:84:46:b9:cb:f8:59:5a:69:48:aa:07:7e:03:29:
         6d:e2:89:32:96:90:f5:86:d5:5e:ba:1e:f9:06:19:17:ac:87:
         66:b0:5b:17:5d:70:3a:f4:32:3f:79:7f:15:32:25:25:45:b4:
         49:0e:72:f7:ed:d4:b0:aa:e2:9f:f9:35:48:21:15:41:ce:43:
         99:04:fb:c9:38:49:87:c0:93:b5:74:04:e6:d6:9c:46:27:e7:
         14:23:e0:84:51:24:1b:64:fe:9c:af:46:f8:30:a1:59:88:81:
         38:f5:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----