This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer
File:                     zWXd_8pJD2leEvOlPuuv8O2ncFA.cer (raw, json)
Hash identifier:          EOQ29/81JX/6g3Li/Cg2pUbusHmU4oP+l//VjnW4OeY=
Subject key identifier:   CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:28:27 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 59078
                          IP: 43.242.52.0/22
                          IP: 101.48.0.0/16
                          IP: 103.235.84.0/22
                          IP: 2402:e7c0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59072 (0xe6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:28:27 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:26:1c:65:93:6d:dc:e5:9f:fc:8f:14:6b:
                    49:02:36:9e:78:ce:ca:61:3e:05:66:b2:c1:c2:45:
                    6b:37:b1:de:ea:69:1e:ff:11:8e:5c:34:dc:72:70:
                    cf:bd:67:7d:f6:8a:14:51:b8:a2:4e:39:7f:24:49:
                    b3:a9:b9:f4:11:e4:ed:e1:66:05:39:0a:93:bf:8c:
                    b6:5b:6d:26:cc:28:02:54:03:8a:3a:9a:c2:57:c5:
                    56:1d:c2:14:e1:a0:66:13:7b:2e:ab:0a:9e:7b:21:
                    78:e7:0b:4f:b0:d6:e1:97:8b:e3:78:3b:9e:08:2d:
                    9c:c4:8a:c9:1c:40:49:d3:f7:3d:2c:25:19:56:a0:
                    2e:ea:c5:fb:94:bd:1d:18:a4:72:fc:2e:fe:76:e6:
                    1d:e8:65:f5:eb:5c:e1:ac:0b:0a:d1:86:5b:c8:3d:
                    c5:41:5a:73:56:37:74:11:db:e4:c9:98:2c:00:40:
                    98:14:11:5d:56:9c:f5:44:32:03:ab:22:84:f2:59:
                    42:0a:9f:46:2c:4d:80:38:15:0b:f9:e1:62:ee:88:
                    66:2b:3f:02:87:66:7c:c1:70:cc:56:5b:c6:49:ab:
                    c7:82:ab:75:f6:89:13:2d:99:13:b9:5d:10:c6:a3:
                    b1:5e:da:bd:9a:dc:ea:2b:e5:99:dd:77:c1:e4:b8:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59078

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.52.0/22
                  101.48.0.0/16
                  103.235.84.0/22
                IPv6:
                  2402:e7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:7b:49:d8:a9:7b:d9:78:ab:6c:48:a6:0c:51:5a:44:88:
         64:d4:ac:b1:1a:c1:9b:d4:fa:42:51:bd:4d:90:c5:64:e0:ff:
         70:9e:59:94:5f:c8:bc:85:ff:6b:6e:98:4b:67:4c:33:d3:82:
         c3:9f:0a:3a:1f:7c:cd:06:47:07:7a:df:9d:08:26:55:fa:fd:
         8f:5f:18:86:6d:5a:97:96:bf:64:96:b3:47:bf:56:9e:ad:a3:
         43:91:f7:c6:69:83:78:f1:b0:22:e2:61:9a:65:ca:8a:70:b3:
         d8:65:ed:88:b0:3c:b1:8d:f4:51:ee:3b:48:46:5e:bd:73:df:
         be:3d:87:ac:1b:41:30:d0:bc:43:ae:a4:2f:38:bd:2a:c2:44:
         fd:0c:88:4d:be:13:10:91:0f:86:35:6a:2f:a6:a0:f3:99:68:
         01:ea:15:74:e5:e6:ec:9c:d8:48:09:16:b3:15:bf:67:84:19:
         7b:ca:d9:ed:ab:7e:3d:cd:b3:56:20:1a:96:0e:35:24:bb:52:
         a4:d9:98:b4:eb:ff:8e:da:2a:9b:f5:64:a9:32:b0:c4:09:05:
         52:34:fd:df:64:83:31:29:04:ef:1a:99:bb:2a:8e:46:83:42:
         94:dd:e4:a5:3e:dc:37:be:ff:58:c2:3d:8f:6f:d9:28:0b:02:
         0c:1f:d5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----