This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
File:                     -ta0PAnQSQoN9_iR359jtSDPIQ8.cer (raw, json)
Hash identifier:          afrqYkt6xHxxTtc7+M1AQ4AIeGo2YFAkpc6ri28NBJ4=
Subject key identifier:   FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:12 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    IP: 103.116.148.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59112 (0xe6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:12 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:9b:9a:af:12:09:c7:40:01:a4:41:6a:33:
                    14:1b:39:9c:a8:e8:b9:62:ef:bf:10:c4:ad:5a:9d:
                    1d:a7:71:96:88:21:12:a9:b7:e7:82:7e:94:ca:cd:
                    c6:d4:47:66:43:d2:19:5b:29:87:03:f4:95:f8:72:
                    32:8a:7e:4e:f8:5b:ab:17:1d:61:1d:b1:42:1f:3c:
                    1f:2e:f8:94:da:fa:48:9c:23:93:22:ce:04:82:d4:
                    0e:8f:bf:5c:2f:36:cd:97:74:52:39:c0:05:22:f7:
                    68:2c:7b:e0:d8:1f:20:d9:6d:cc:15:e1:39:84:ea:
                    3c:66:38:cc:96:23:35:62:6f:80:83:51:6f:3e:7b:
                    e2:96:04:57:38:dc:b1:4d:5e:66:44:37:e1:4f:9f:
                    07:7e:1f:c8:e9:b5:8b:1c:fa:ad:67:9d:a1:89:da:
                    a3:e3:27:2b:c9:05:ce:7a:22:81:4a:ae:d0:05:55:
                    d1:76:68:6d:07:62:32:de:b5:ad:0b:46:61:17:63:
                    34:03:80:b7:52:54:4c:b9:48:41:57:32:9e:77:28:
                    d3:1a:bb:c2:15:5c:13:fd:d2:59:6e:93:fa:66:86:
                    d1:d7:db:08:7e:c7:47:ea:58:15:20:c2:80:1e:a9:
                    c3:d2:ca:7a:cc:c3:82:b8:e0:10:f1:ee:f5:91:2e:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:fd:38:d1:4a:03:62:49:17:1b:f7:ee:c7:b6:a4:58:b4:db:
         6d:1d:f4:57:35:8c:18:86:5d:d8:61:70:33:06:4e:2d:12:38:
         38:78:1b:15:bb:a6:7e:dd:21:01:cc:21:2e:06:bf:23:58:ca:
         56:d5:12:c3:05:ff:17:24:df:95:ef:98:45:f5:c7:3e:65:df:
         56:a9:89:57:e3:d8:1a:10:db:d6:dc:da:7d:fe:0f:e5:15:5c:
         ae:0f:18:6f:a8:d7:cb:22:37:c2:9b:93:51:e7:f7:1f:fd:53:
         eb:86:ff:b7:24:d3:b6:65:43:9c:e2:f1:33:83:42:15:81:8f:
         be:cb:83:b4:06:27:44:70:d9:38:2f:0b:88:0e:b3:c5:5e:b1:
         d4:54:44:15:3a:f9:94:eb:8f:1f:62:22:8d:10:e5:4e:e5:cb:
         53:ec:5f:cc:31:82:8a:cd:c2:5b:04:7c:00:62:e2:a8:60:fd:
         ff:9d:95:10:a7:b8:82:2c:e9:52:5d:70:11:61:18:bc:f2:07:
         ec:5f:bb:7a:f4:59:8d:97:c2:50:ca:7b:1a:69:b9:f8:a0:a8:
         0b:0f:ab:2d:cb:1e:67:b7:60:e5:25:66:b4:be:b2:61:ed:55:
         69:6a:62:df:26:5b:52:1c:c5:a8:80:40:fa:8a:b4:97:46:9c:
         ec:13:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----