This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
File:                     ze9xEd6YvXVtkrNNOU2i057_m44.cer (raw, json)
Hash identifier:          34cFcaG6lZGYtTpTmU/RS1a3bGb6fgTbCho1ahTkc1k=
Subject key identifier:   CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E7DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Wed 14 Jan 2026 19:57:33 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 58593
                          IP: 42.159.0.0/16
                          IP: 103.9.8.0/22
                          IP: 163.228.0.0/16
                          IP: 2404:7940::/32
                          IP: 2406:e500::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59356 (0xe7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan 14 19:57:33 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:eb:2d:87:41:8f:b7:96:8d:b1:e7:38:4c:8b:
                    1b:d7:13:01:85:92:1c:d0:f8:03:c2:b8:2b:3e:15:
                    c3:99:f0:37:b6:3f:f7:de:af:ad:f4:f6:79:a4:e0:
                    ca:5e:a2:70:55:58:b0:b9:a0:a4:42:0a:5a:48:fa:
                    fa:81:90:6e:65:18:77:47:e6:e6:61:b4:a6:68:a5:
                    5d:48:cb:70:fb:12:68:12:12:00:e4:d9:fd:ef:23:
                    dc:a3:ad:f0:e5:27:43:fc:fd:56:c5:af:36:b6:18:
                    73:82:7f:c1:1f:ea:ac:a0:1b:31:dc:3c:30:8d:3a:
                    1f:86:e3:bd:24:e6:04:e0:ae:ff:a6:5d:ab:99:50:
                    0b:58:b7:8a:59:77:54:d7:ab:8a:b8:54:b6:b7:65:
                    6a:56:dd:ab:41:12:28:3a:d3:38:f0:68:1d:41:00:
                    13:1b:d7:38:90:9c:85:ed:70:c1:be:1c:61:10:08:
                    b8:3f:45:53:1b:8c:b4:ee:c2:6a:e1:f9:23:3e:85:
                    ee:c4:cd:e1:3a:82:90:e0:2b:b5:02:64:3f:04:ab:
                    18:86:c9:0f:07:65:83:31:ce:c6:1b:14:72:22:34:
                    77:18:4d:df:09:71:83:89:02:b3:b6:6c:39:bf:a0:
                    85:57:3c:3c:25:75:03:da:02:4a:de:f4:15:01:f4:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58593

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.159.0.0/16
                  103.9.8.0/22
                  163.228.0.0/16
                IPv6:
                  2404:7940::/32
                  2406:e500::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:a5:db:52:75:0c:37:24:59:2b:0f:34:2d:b5:ea:ed:38:66:
         70:66:c6:dc:6d:4b:80:36:00:1c:93:2a:e5:33:9b:b6:a7:52:
         84:e1:cb:79:44:37:d0:97:26:4a:d4:a8:8b:c7:70:3c:75:20:
         74:58:c5:1b:e3:b3:1e:66:86:75:6c:56:02:9c:fc:d5:18:0e:
         42:7e:82:26:6b:76:55:5b:3e:69:3b:f4:4c:48:58:a0:0e:74:
         c0:fe:4c:c8:1f:92:8b:43:4d:29:1f:fb:7d:0c:e2:9e:98:cb:
         8a:d9:bf:f4:70:3f:63:14:48:85:18:6d:dd:ce:89:a4:d5:aa:
         e1:6b:de:b3:ff:86:8f:86:49:f7:d1:02:9b:2c:24:6a:ba:d7:
         ae:6d:c8:6c:48:ad:f0:53:85:f1:50:45:5e:ba:4d:c7:11:a2:
         00:80:d7:30:b1:66:1d:af:9d:2a:36:b3:0a:e9:84:e3:86:b2:
         03:f3:45:ba:33:68:dc:48:6d:9d:14:02:f7:c1:43:fd:1b:ea:
         99:4f:7e:1e:11:5f:45:80:de:cd:10:91:97:41:41:22:51:c3:
         a8:8b:ee:91:d5:68:1d:0a:f0:d6:53:2b:3d:78:90:72:83:99:
         ac:85:6a:eb:89:b4:df:ca:7b:e9:0f:e2:31:ec:7a:30:ef:2e:
         2f:8f:6e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----