This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
File:                     SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer (raw, json)
Hash identifier:          LmzSBvhiHgw8a4RknhPUyem+lopAuYmUr65oUlEs2Rw=
Subject key identifier:   49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E71C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:59 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 151291
                          IP: 49.128.4.0/22
                          IP: 103.31.236.0/22
                          IP: 103.244.116.0/22
                          IP: 223.29.252.0/22
                          IP: 2403:6380::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59164 (0xe71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:59 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:82:1d:19:33:ce:c8:2a:a9:38:6a:9b:ee:
                    e8:1b:87:35:fe:af:2b:87:59:0f:4a:ba:18:16:b3:
                    ec:eb:3d:62:2f:0e:43:9e:5f:84:3c:c6:51:14:7e:
                    cc:9a:2b:4a:87:b3:74:46:50:27:f7:4e:c1:8c:c0:
                    2f:9a:86:32:c5:bc:c8:82:bb:c0:c6:49:f5:62:b1:
                    86:a0:37:29:34:dd:32:44:c2:ff:f2:ce:c2:a2:19:
                    fc:90:8e:6c:e2:17:01:4e:2e:32:42:0e:b4:ad:ba:
                    a6:50:df:5e:b2:bb:54:0a:7a:ae:aa:aa:2e:ed:6c:
                    17:cc:f8:d0:d6:06:49:84:2c:8d:0a:1c:9f:14:63:
                    a0:fd:54:f3:b6:d4:d0:06:70:56:bb:17:9c:1a:06:
                    42:a0:60:77:31:9c:6e:d1:49:69:e7:f7:ba:c4:2a:
                    70:fd:a3:90:41:37:27:f5:a6:2c:f8:95:bd:bd:19:
                    1f:f8:1c:ba:73:a1:fb:37:0c:29:64:5a:c5:05:33:
                    43:5c:40:c6:be:f9:5d:62:50:82:f1:03:71:68:d3:
                    e9:db:c1:81:ac:6b:75:ac:b0:b8:e0:95:fb:88:56:
                    bf:b0:82:38:f9:85:d1:c7:13:bb:03:8b:62:f3:ec:
                    45:98:ce:fd:14:54:89:12:69:32:bd:f5:60:7b:5b:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151291

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.4.0/22
                  103.31.236.0/22
                  103.244.116.0/22
                  223.29.252.0/22
                IPv6:
                  2403:6380::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:93:61:f0:33:32:4e:40:b9:7d:ee:61:38:85:e1:72:81:af:
         8e:d4:c9:b6:e6:59:25:74:b7:ab:29:b1:ec:72:d5:58:d4:ee:
         ec:1a:ee:12:12:7b:a3:64:5b:9e:92:7d:c4:6e:fe:88:6f:68:
         72:68:39:be:8f:3f:1a:52:b0:51:01:10:37:e4:73:8e:b0:11:
         1b:cd:ed:b0:c5:77:7c:55:f0:92:6e:8f:89:71:19:b0:78:80:
         02:53:a2:0d:f6:bb:c0:69:b5:53:93:ff:01:8d:5d:82:6c:e3:
         70:4d:84:56:67:56:09:eb:2d:4c:34:fd:06:cd:ca:8e:fa:30:
         89:01:61:02:01:0e:da:ab:ce:8d:45:40:3b:88:d0:a6:db:54:
         ad:de:9d:b4:c0:80:f1:78:74:8f:16:f7:4a:28:9e:94:ea:f2:
         9f:6f:4c:59:1b:2f:3e:67:a0:b6:d6:fd:ed:fc:f7:32:49:b0:
         5d:97:43:d9:86:88:9c:cf:79:3a:e3:3d:c2:38:3b:c6:66:ea:
         0c:5d:47:e4:55:3b:e5:36:e6:30:42:15:f6:1e:b9:6d:14:b4:
         97:67:d6:da:75:68:a9:f5:76:0a:9c:3b:c4:16:c9:d3:e6:ff:
         b9:13:e3:1d:11:15:07:95:d8:c8:57:8e:27:0e:36:cb:6d:72:
         e2:2f:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----