This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer File: 4LWzbEhxQqoAYPpbVHULJsXPW9w.cer (raw, json) Hash identifier: oHSVkYtt8pgA4+8t+tiJVoAlZNlYNNaH5DlGFrfh9FQ= Subject key identifier: E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:00 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 9306 IP: 211.88.0.0/16 IP: 2001:f38::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58948 (0xe644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:26:00 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=E0B5B36C487142AA0060FA5B54750B26C5CF5BDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:02:2e:18:e8:2f:54:b4:e9:fe:00:9f:36: 86:01:7d:07:94:33:06:24:25:84:7f:01:ab:95:17: 33:94:d3:36:18:4c:c6:23:a5:3c:13:59:a3:fa:89: 16:35:56:b5:51:e5:10:a3:d1:92:ea:08:b8:5b:ed: 96:e1:a8:8f:9a:d3:14:8b:79:16:be:5a:89:bc:88: 09:36:b5:5d:cd:d2:d9:c1:0a:bb:47:ca:35:16:bf: 1b:82:2f:82:9c:0b:7e:a8:76:d4:46:da:55:c4:62: 1f:13:78:8e:76:12:e4:92:66:7e:f2:67:8a:01:38: cc:73:0d:73:d4:f0:72:c3:6d:50:04:4b:49:3b:a9: ab:09:d4:0f:f5:db:3f:39:7b:92:b7:a9:46:53:5a: 5e:e6:25:53:62:dc:81:9c:7c:d4:db:f6:f9:7e:79: f7:a5:a8:23:6a:12:9b:e2:34:92:9d:1d:ca:96:ca: 38:02:d9:79:80:a1:cc:a0:d6:e7:62:ac:1c:1b:d3: ee:35:89:f7:1a:ce:6a:31:a2:bf:85:f6:95:e9:f2: 34:d0:ad:8c:89:fe:d5:41:c9:26:a1:c3:ef:62:ac: 9a:8a:ac:16:b5:60:2f:bd:b5:22:28:6c:4c:d2:6a: 85:6a:0a:15:00:f2:00:c0:30:65:21:66:48:8b:c7: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9306 sbgp-ipAddrBlock: critical IPv4: 211.88.0.0/16 IPv6: 2001:f38::/32 Signature Algorithm: sha256WithRSAEncryption ac:86:be:79:98:22:b6:6e:47:51:d9:bf:df:4b:8b:95:da:71: 80:15:77:54:a3:fe:0f:47:38:d5:b3:b2:a5:27:b2:b1:61:40: 59:13:9b:c0:59:95:07:5b:8d:40:26:c2:3c:1b:69:8a:55:ca: 25:73:d1:f8:ba:8e:89:ae:d9:66:76:ea:f1:f0:c8:01:43:ee: f6:fe:bb:f8:03:ca:f2:82:f7:38:bb:28:d1:9a:e9:07:79:60: 7b:19:02:0a:d8:4b:55:6d:28:be:84:42:68:c3:9e:b4:d8:79: a9:95:cb:e2:4e:b6:d9:a5:4c:36:f8:ea:99:ef:a9:9f:44:d1: e6:ef:ba:23:ff:18:fd:06:44:9f:d1:0b:fe:70:df:9b:74:c0: 8f:7e:b5:5b:1c:6e:53:e7:04:52:e4:31:f5:e8:aa:2a:76:ee: 4c:33:4a:bc:9e:6b:33:59:42:5d:ea:09:4e:c0:16:e5:1c:2c: 10:08:a0:aa:94:11:54:30:d7:2f:b3:2a:70:10:fa:57:7b:5f: 53:f9:f8:4a:88:6c:17:1c:78:bd:a1:1e:0b:70:d4:a1:90:6b: dc:de:16:df:0d:00:3b:67:c3:37:e6:f6:22:43:41:f5:fe:3a: 62:57:e1:20:84:83:d6:4e:a8:47:81:1c:84:62:0a:f0:71:0a: 69:d1:2a:a3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAOZEMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI2MDBaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEUwQjVCMzZDNDg3MTQyQUEwMDYwRkE1QjU0NzUwQjI2QzVDRjVC REMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJwIuGOgvVLTp/gCf NoYBfQeUMwYkJYR/AauVFzOU0zYYTMYjpTwTWaP6iRY1VrVR5RCj0ZLqCLhb7Zbh qI+a0xSLeRa+Wom8iAk2tV3N0tnBCrtHyjUWvxuCL4KcC36odtRG2lXEYh8TeI52 EuSSZn7yZ4oBOMxzDXPU8HLDbVAES0k7qasJ1A/12z85e5K3qUZTWl7mJVNi3IGc fNTb9vl+efelqCNqEpviNJKdHcqWyjgC2XmAocyg1udirBwb0+41ifcazmoxor+F 9pXp8jTQrYyJ/tVBySahw+9irJqKrBa1YC+9tSIobEzSaoVqChUA8gDAMGUhZkiL x59RAgMBAAGjggJ8MIICeDAdBgNVHQ4EFgQU4LWzbEhxQqoAYPpbVHULJsXPW9ww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEw NC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8xMDQvNExXemJFaHhRcW9BWVBwYlZIVUxKc1hQVzl3Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgIkWjAtBggrBgEFBQcBBwEB/wQeMBwwCwQC AAEwBQMDANNYMA0EAgACMAcDBQAgAQ84MA0GCSqGSIb3DQEBCwUAA4IBAQCshr55 mCK2bkdR2b/fS4uV2nGAFXdUo/4PRzjVs7KlJ7KxYUBZE5vAWZUHW41AJsI8G2mK Vcolc9H4uo6Jrtlmdurx8MgBQ+72/rv4A8rygvc4uyjRmukHeWB7GQIK2EtVbSi+ hEJow5602HmplcviTrbZpUw2+OqZ76mfRNHm77oj/xj9BkSf0Qv+cN+bdMCPfrVb HG5T5wRS5DH16Koqdu5MM0q8nmszWUJd6glOwBblHCwQCKCqlBFUMNcvsypwEPpX e19T+fhKiGwXHHi9oR4LcNShkGvc3hbfDQA7Z8M35vYiQ0H1/jpiV+EghIPWTqhH gRyEYgrwcQpp0Sqj -----END CERTIFICATE-----Generated at Mon Jan 19 12:18:07 2026 by rpki-client