This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xqqhwc8lwisJdbVYvDWjpnYmQiY.cer
File:                     xqqhwc8lwisJdbVYvDWjpnYmQiY.cer (raw, json)
Hash identifier:          oeikrlEW0hqNpDI1CC31ZmlB/2CP/7erxaGfD5bYo/U=
Subject key identifier:   C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E74E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:30:49 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 123.253.52.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59214 (0xe74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:30:49 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=C6AAA1C1CF25C22B0975B558BC35A3A676264226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:86:b9:b1:a9:90:16:85:62:07:14:f1:db:
                    f2:1b:83:36:94:f8:eb:d7:ef:69:75:d5:de:cf:51:
                    26:ef:e7:bb:9d:d8:6b:a9:e0:4a:11:6b:c3:a2:a7:
                    e5:f8:62:55:57:d0:43:6c:fb:ad:b6:bc:57:5f:9b:
                    6d:79:ad:ab:d1:93:70:61:4d:65:75:09:99:78:e6:
                    a4:68:8d:3d:27:ca:2f:3f:36:2c:c6:9c:73:76:f8:
                    b6:f8:ef:0f:4d:0e:35:0d:3f:78:f6:e4:d0:eb:32:
                    08:7e:ca:f4:e3:0f:be:59:5c:48:af:6c:92:11:4e:
                    de:8b:ed:fb:b3:cb:d7:9b:45:d3:3b:4b:f0:b1:84:
                    04:58:cd:82:33:62:0b:d3:92:34:9f:7e:ab:00:a2:
                    d2:33:03:9c:28:25:0f:95:d9:89:fc:26:71:1f:7b:
                    2d:51:49:b0:37:ef:94:63:53:f8:76:07:41:77:74:
                    93:5e:e4:4a:af:7f:29:6d:3f:a6:57:21:b7:15:0c:
                    94:2b:0e:8e:31:48:11:20:e6:af:ee:77:d4:35:17:
                    e8:cc:2d:a8:1b:9e:eb:37:4c:a1:17:cc:4c:67:e6:
                    b9:5d:b9:f5:40:d6:63:64:80:5e:93:4a:15:84:90:
                    83:89:c9:9c:76:ae:1b:cf:c0:51:92:cd:13:5b:ac:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:A1:C1:CF:25:C2:2B:09:75:B5:58:BC:35:A3:A6:76:26:42:26
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3397/xqqhwc8lwisJdbVYvDWjpnYmQiY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:d0:74:8a:21:8b:b9:35:e4:4a:da:e6:a9:44:ec:e5:70:a9:
         f6:a2:99:4d:18:b7:4e:8b:b1:c2:9e:22:0d:42:44:32:73:2b:
         78:7d:98:9a:42:8e:0d:36:3b:dd:a8:df:7d:1b:ea:6d:fa:fe:
         3b:c7:63:88:28:a8:d0:31:0f:79:b4:75:75:da:6c:47:e3:cf:
         c5:c0:47:59:ed:9a:20:10:74:df:60:f9:29:17:c1:52:e6:c1:
         77:bb:95:6e:3a:c4:dd:a3:12:a5:d3:51:4d:b7:54:46:f8:2e:
         7b:08:d5:1b:b3:17:f9:68:83:59:07:dd:73:fa:27:6b:da:39:
         cc:83:c8:84:47:ee:00:a4:7f:92:13:3e:d6:b2:85:13:5d:6b:
         72:9b:fe:01:89:d9:1c:14:1d:25:88:33:dd:ca:e6:e0:fd:f6:
         52:2f:05:2a:05:a7:ec:f8:ef:42:c0:3c:b9:20:f5:34:8c:8b:
         c0:88:a8:43:31:f4:8d:13:22:d0:81:72:44:68:ad:f8:04:57:
         14:cc:6a:37:96:01:3d:9c:de:f2:6c:10:43:63:00:2f:23:87:
         2a:81:6e:b8:38:23:c1:ae:87:1a:98:f1:91:c4:bd:79:a2:99:
         63:8a:c2:3b:04:b3:37:fd:f7:13:7f:f1:23:0d:fb:a2:49:d9:
         70:fd:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----