Why edu.cn WHOIS is hard to reach outside CERNET — and how to read a static snapshot
The 2026-09-26 edu.cn snapshot contains 1,317 root domains: 1,126 full records, 168 Chinese registration-status responses and 23 queries with no matching record. The needhelp WHOIS tool now exposes these saved responses alongside its existing RDAP lookup. The numbers describe a collected dataset, not the complete edu.cn registry.
CNNIC manages the .cn domain system, but its registration FAQ assigns the rules for third-level domains under .edu.cn to the China Education and Research Network. CERNIC handles edu.cn registration and directory services within that network. A generic .cn RDAP lookup therefore cannot be assumed to return the corresponding CERNIC record; an empty response from one service is not proof that a domain is unregistered.
In xingwangzhe’s investigation, “Whois edu.cn? CERNIC介绍”, 12 overseas HTTP probes received 403 Forbidden from the CERNIC query endpoint on 2026-09-26. The same probes received 200 OK from the homepage; the two reports are linked below. Public access to the homepage does not establish public access to its query service.
The practical advice is to try a campus or CERNET connection when the official query fails outside the education network. Those probes do not prove that every public connection is blocked or every CERNET exit works. No cited public policy explains the precise access-control mechanism, so an IP allowlist or a security rationale would be speculation. The investigation also reports that the historical whois.edu.cn TCP/43 service has been retired; that statement comes from the author’s investigation, not a new service audit here.
Enter neu.edu.cn or jxutcm.edu.cn in the tool. It fetches that domain’s JSON from edu-cn-roots through jsDelivr, with GitHub Raw as a fallback; the dataset metadata supplies the collection date and coverage count. This follows the repository’s default branch, with possible CDN cache delays. edu.cn subdomains are automatically reduced to their root: www.neu.edu.cn → neu.edu.cn.
The result separates a full record, a Chinese registration-status response, a saved not_found response and a domain absent from the dataset. Neither of the last two means “available to register”. Empty fields mean the saved response did not supply a value. Nameservers are registration data from the snapshot, not fresh DNS measurements; registration, DNS and ownership are separate questions. For current information, use the official CERNIC directory in a network environment that can reach it.