This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer
File:                     dme1o3MAnBs-wTTnPJk2NFMpLHg.cer (raw, json)
Hash identifier:          J7nWQ8W4C0S+Pc4WnEALu70wetLMTSAQ2pzzZItdgtE=
Subject key identifier:   76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       D1B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Sat 03 May 2025 20:07:13 +0000
Certificate not after:    Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources:    IP: 103.131.224.0/22
Validation:               Failed, certificate revoked on Thu 23 Oct 2025 09:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53684 (0xd1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: May  3 20:07:13 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=7667B5A373009C1B3EC134E73C99363453292C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:cf:dd:d1:a7:42:e5:da:76:6f:0a:bc:d3:
                    db:ba:dd:92:4a:2b:d2:bd:3e:6e:d7:99:3b:f5:9d:
                    c5:84:86:b0:5a:b8:8c:83:36:33:9b:de:ed:8f:bb:
                    b7:e7:9b:0b:52:ee:21:f3:b4:ae:07:26:e9:0c:4c:
                    f6:8c:e1:b5:80:b5:8d:e7:64:74:84:e7:b5:58:71:
                    ea:8a:b6:a8:b1:2f:82:2f:72:d0:7c:da:9f:2f:4a:
                    fd:09:f6:ca:9b:7c:77:21:23:09:d0:c9:21:13:af:
                    57:10:7f:74:92:44:0f:c8:37:ca:ab:32:13:0b:8f:
                    f5:7f:42:3e:44:4c:ae:31:e5:03:bf:41:65:97:c0:
                    4c:39:0c:c7:4a:5b:f2:80:71:29:97:fa:d3:b6:82:
                    38:16:89:ed:a8:14:89:9a:91:64:27:26:71:72:a8:
                    8e:f3:33:31:05:52:03:49:ca:c7:c8:74:ca:f5:de:
                    87:25:46:fc:92:54:c2:6f:ec:cc:4b:a1:9a:69:4b:
                    95:10:b8:ea:e0:2a:04:4c:40:42:da:e1:bc:0f:a0:
                    87:1c:7a:c0:ba:3d:c8:51:75:6e:de:dc:ab:19:64:
                    a9:0c:82:ba:04:aa:09:77:18:ec:df:47:49:8b:a9:
                    ad:e1:73:9e:8b:e5:5b:36:17:66:8e:d4:f6:b9:cd:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:83:77:88:da:95:2d:ca:b3:eb:85:85:43:60:74:2a:c2:1c:
         2c:db:95:be:63:bf:0f:77:4e:03:77:65:b7:94:95:01:e8:22:
         16:c8:45:34:7a:6f:58:85:29:fa:8a:ea:e1:0d:5b:3b:6e:fa:
         4d:30:ed:04:58:03:11:bd:4d:d7:ef:51:ca:04:5d:c3:32:78:
         74:6a:e9:18:d4:28:3a:4d:14:64:4c:1f:b8:b3:8d:e4:96:0d:
         1f:1d:69:c4:b2:1c:34:50:74:9a:2d:85:91:b9:0b:3d:33:a6:
         91:8d:02:5c:b7:15:eb:9b:6f:a6:72:95:cc:28:67:95:82:8c:
         c8:d9:35:44:9e:ad:23:da:a4:be:52:8e:6b:f7:eb:c2:15:e1:
         e4:60:55:ab:62:6a:c7:d9:af:34:46:86:db:de:26:30:b8:2f:
         9d:a9:fc:fe:00:8f:20:e0:1d:e9:ae:1a:73:2e:4d:5c:7e:4f:
         27:04:e8:00:8b:a3:c2:d4:19:96:e0:0c:02:07:23:c9:d9:6f:
         55:37:ce:2d:73:c9:f4:fe:d2:08:50:5a:70:e0:22:cb:e6:7b:
         d0:85:e7:54:c4:01:42:5f:be:23:58:55:2a:72:d5:f9:e5:d1:
         af:79:e8:40:78:a0:68:9a:ca:bd:2c:cd:19:01:a1:8a:ae:aa:
         a7:17:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----