This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/-1zNjvD7jk1PBz11qrCaEgrhgD4.cer File: -1zNjvD7jk1PBz11qrCaEgrhgD4.cer (raw, json) Hash identifier: a0uWcTOIgCvrwTG7vNFOZopcVfjHxrL9dPx/nph+VMQ= Subject key identifier: FB:5C:CD:8E:F0:FB:8E:4D:4F:07:3D:75:AA:B0:9A:12:0A:E1:80:3E Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:30:41 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 149057 IP: 103.177.162.0/23 IP: 163.53.52.0/22 IP: 2001:df0:25c0::/48 IP: 2400:da60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59204 (0xe744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:30:41 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=FB5CCD8EF0FB8E4D4F073D75AAB09A120AE1803E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:14:c1:df:ff:6d:b3:81:be:c2:b9:6d:c4: fc:aa:a1:c1:49:31:92:aa:69:10:a2:ca:c1:66:f7: 1b:cf:63:0f:b4:4f:77:bd:dd:4d:75:ba:ac:65:a2: 58:bb:b4:94:3a:04:22:d3:94:11:20:00:e2:b7:4a: 5a:84:be:37:d2:78:df:4a:f9:de:f0:33:1d:ec:98: 0b:9b:b9:0b:47:55:45:28:2f:5d:7b:4c:d7:d2:69: 57:0b:f0:ed:19:9d:de:ee:24:b5:0e:a2:c5:7e:8f: 5b:ed:01:cc:f8:80:aa:de:66:36:15:a7:d1:8c:3e: 1d:db:3e:53:9c:e4:61:ac:8d:16:eb:c3:32:a6:49: 1e:1d:3a:09:8d:e8:13:9b:34:01:78:8a:2e:59:51: 88:91:86:a6:93:04:eb:51:33:d1:c5:70:06:a5:bc: 3b:ce:52:df:dc:0f:22:f1:c3:ce:36:8b:0b:c3:8e: aa:74:61:43:f4:21:42:28:12:11:de:2e:ac:ca:b7: a6:77:f7:49:df:ed:f4:89:25:1d:5b:c1:05:b6:8a: 15:2e:bb:7f:c4:a8:0c:06:30:b4:29:5f:97:c7:a4: 46:d4:a7:2a:db:b6:c7:09:24:4c:16:99:47:57:e9: ab:10:6c:f4:9b:8d:f6:0d:d6:02:41:0d:78:56:27: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5C:CD:8E:F0:FB:8E:4D:4F:07:3D:75:AA:B0:9A:12:0A:E1:80:3E X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3394/-1zNjvD7jk1PBz11qrCaEgrhgD4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149057 sbgp-ipAddrBlock: critical IPv4: 103.177.162.0/23 163.53.52.0/22 IPv6: 2001:df0:25c0::/48 2400:da60::/32 Signature Algorithm: sha256WithRSAEncryption 9c:d6:ad:83:51:44:ae:59:f9:84:b8:fc:39:4f:cd:60:36:7a: 16:db:40:25:89:44:ce:df:e2:f5:5e:35:b2:c1:a7:dd:be:50: a4:bb:ac:34:71:10:a5:97:37:51:32:b5:f8:57:ea:15:de:26: 38:42:90:5a:b4:be:b9:e3:5c:35:16:be:f6:a1:c7:0d:42:74: a4:39:15:52:c2:bc:43:50:41:dd:4a:d1:c8:cb:42:1a:03:65: 73:9d:25:58:7f:53:00:c1:23:09:bf:ea:9f:8e:a3:95:6d:ca: 41:7a:56:36:31:e0:a3:63:af:07:1f:b8:72:ee:30:19:af:e4: 47:cf:cb:cf:d1:74:94:18:f6:60:24:31:9a:63:c6:a4:85:8f: 61:62:78:81:b6:8f:09:c8:d5:a3:1f:c1:47:ad:3f:9f:42:cd: 43:9a:c2:5a:ba:01:3f:2b:01:bd:56:dd:0a:ba:f2:b2:8f:68: fe:ef:70:9d:e0:cc:1a:8e:64:a7:10:c1:12:c0:b2:7e:fd:78: 92:e0:31:0b:0b:b7:ff:cd:21:75:1e:ac:d0:bd:f3:fa:10:3e: 0b:62:7a:07:c3:90:e4:35:11:e5:24:f3:1d:73:a3:21:4e:be: c1:0c:3f:85:72:40:11:c4:c4:3b:34:2f:90:67:b6:39:ed:68: ad:a2:57:04 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIDAOdEMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMwNDFaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEZCNUNDRDhFRjBGQjhFNEQ0RjA3M0Q3NUFBQjA5QTEyMEFFMTgw M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHhTB3/9ts4G+wrlt xPyqocFJMZKqaRCiysFm9xvPYw+0T3e93U11uqxloli7tJQ6BCLTlBEgAOK3SlqE vjfSeN9K+d7wMx3smAubuQtHVUUoL117TNfSaVcL8O0Znd7uJLUOosV+j1vtAcz4 gKreZjYVp9GMPh3bPlOc5GGsjRbrwzKmSR4dOgmN6BObNAF4ii5ZUYiRhqaTBOtR M9HFcAalvDvOUt/cDyLxw842iwvDjqp0YUP0IUIoEhHeLqzKt6Z390nf7fSJJR1b wQW2ihUuu3/EqAwGMLQpX5fHpEbUpyrbtscJJEwWmUdX6asQbPSbjfYN1gJBDXhW J4IZAgMBAAGjggKPMIICizAdBgNVHQ4EFgQU+1zNjvD7jk1PBz11qrCaEgrhgD4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz OTQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM5NC8tMXpOanZEN2prMVBCejExcXJDYUVncmhnRDQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJGQTA9BggrBgEFBQcBBwEB/wQuMCww EgQCAAEwDAMEAWexogMEAqM1NDAWBAIAAjAQAwcAIAEN8CXAAwUAJADaYDANBgkq hkiG9w0BAQsFAAOCAQEAnNatg1FErln5hLj8OU/NYDZ6FttAJYlEzt/i9V41ssGn 3b5QpLusNHEQpZc3UTK1+FfqFd4mOEKQWrS+ueNcNRa+9qHHDUJ0pDkVUsK8Q1BB 3UrRyMtCGgNlc50lWH9TAMEjCb/qn46jlW3KQXpWNjHgo2OvBx+4cu4wGa/kR8/L z9F0lBj2YCQxmmPGpIWPYWJ4gbaPCcjVox/BR60/n0LNQ5rCWroBPysBvVbdCrry so9o/u9wneDMGo5kpxDBEsCyfv14kuAxCwu3/80hdR6s0L3z+hA+C2J6B8OQ5DUR 5STzHXOjIU6+wQw/hXJAEcTEOzQvkGe2Oe1oraJXBA== -----END CERTIFICATE-----Generated at Mon Jan 19 12:21:58 2026 by rpki-client