This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4hkHWT0fCCFTkF8FLRB0Eu5gngU.cer File: 4hkHWT0fCCFTkF8FLRB0Eu5gngU.cer (raw, json) Hash identifier: 2FaK6zjWzpaV7hrvulSWbc39Zf0pxrtteIVlI0w0b8I= Subject key identifier: E2:19:07:59:3D:1F:08:21:53:90:5F:05:2D:10:74:12:EE:60:9E:05 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E7F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/4hkHWT0fCCFTkF8FLRB0Eu5gngU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 16 Jan 2026 19:58:02 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 151262 IP: 43.240.160.0/19 IP: 103.36.176.0 -- 103.36.207.255 IP: 2401:7580::/32 IP: 2401:7680::/32 IP: 2401:7780::/32 IP: 2401:7880::/32 IP: 2401:7980::/32 IP: 2401:7a80::/32 IP: 2401:7b80::/32 IP: 2401:7c80::/32 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 59379 (0xe7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 16 19:58:02 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=E21907593D1F082153905F052D107412EE609E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:1a:79:b4:e0:93:87:09:9d:19:38:42:a3: 3e:b2:32:89:3d:17:0e:04:3b:1c:73:2d:35:d5:35: 57:47:ff:45:5f:e3:7e:a5:b9:11:ab:04:da:3b:de: bb:da:84:94:b4:2d:6a:1e:bc:86:d5:02:40:37:6b: fc:12:87:b6:3e:5a:22:44:fe:2c:27:98:b3:bc:0a: 8d:3f:7a:e4:17:db:08:02:c2:80:1f:bd:ca:c9:87: e2:ef:00:bb:d1:34:39:d0:93:81:ae:69:97:31:8c: 2c:7e:c5:c1:d4:87:9d:36:99:8e:e8:86:c3:c2:ae: da:86:8f:8b:e0:cb:6b:a0:57:5c:2c:65:f5:8a:62: 25:ab:b5:0e:7e:5d:65:b7:f8:5c:ab:19:8b:40:44: 85:6a:56:4d:a5:59:b1:78:a4:5c:ac:e5:ad:2b:67: c7:60:00:e3:c7:4d:0d:c1:a0:eb:e3:18:23:de:a3: cb:91:7d:fb:60:14:c1:68:5b:63:ed:d7:5b:94:2e: 0d:e7:c5:5a:92:99:fd:af:d6:f6:77:81:5a:cb:51: 96:2f:d6:cc:42:50:b7:67:95:c5:e3:60:3a:16:66: 6f:61:e3:a1:49:43:a5:f4:7c:d1:6b:35:ed:95:39: f7:95:ff:27:e9:a5:09:7b:cf:e4:2b:fb:ae:e9:cd: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:19:07:59:3D:1F:08:21:53:90:5F:05:2D:10:74:12:EE:60:9E:05 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3369/4hkHWT0fCCFTkF8FLRB0Eu5gngU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151262 sbgp-ipAddrBlock: critical IPv4: 43.240.160.0/19 103.36.176.0-103.36.207.255 IPv6: 2401:7580::/32 2401:7680::/32 2401:7780::/32 2401:7880::/32 2401:7980::/32 2401:7a80::/32 2401:7b80::/32 2401:7c80::/32 Signature Algorithm: sha256WithRSAEncryption 73:c9:34:3a:4c:f1:a4:77:b4:bd:71:e1:b8:ae:d8:3a:ff:5c: 4d:22:d2:d2:0b:79:f1:0c:67:0b:1b:e6:18:05:ac:04:e9:24: ea:9b:fd:84:01:7b:f2:bd:d5:fc:53:73:27:4c:9a:b2:99:a0: cc:7f:7c:8b:6c:a3:f4:06:cb:74:ba:6d:b4:13:69:1b:1f:df: a8:02:0a:c8:d7:b7:02:5b:4d:d6:39:70:39:38:6a:94:02:2d: 1b:0b:94:d1:03:ba:3e:50:a7:19:d8:11:b1:3d:47:a3:5f:64: 69:5e:aa:9a:e4:ce:11:0c:1a:eb:51:6d:61:7f:5b:be:62:e7: 29:d4:1f:4f:b9:67:75:bf:cf:48:86:47:ec:60:77:05:4b:b0: a4:93:48:3e:ab:58:5f:5e:f1:bb:b6:70:dd:6d:ae:91:f1:ef: b6:e5:cf:46:3a:af:a9:f7:94:75:97:36:97:7f:d9:73:cd:db: 39:34:84:78:6d:fc:2b:5b:2b:8d:ff:8f:f2:bc:a1:60:1d:1d: c3:03:12:1b:71:86:52:b6:38:3c:94:e4:e5:cd:26:a7:22:00: c5:57:91:6a:4a:0f:3e:22:3f:c3:8f:f9:68:24:77:5c:f3:9c: 7f:4f:01:8c:03:d7:38:64:ea:7e:f8:5e:f8:c6:6d:b8:15:3c: 6a:40:29:85 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIDAOfzMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMTYxOTU4MDJaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEUyMTkwNzU5M0QxRjA4MjE1MzkwNUYwNTJEMTA3NDEyRUU2MDlF MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzABp5tOCThwmdGThC oz6yMok9Fw4EOxxzLTXVNVdH/0Vf436luRGrBNo73rvahJS0LWoevIbVAkA3a/wS h7Y+WiJE/iwnmLO8Co0/euQX2wgCwoAfvcrJh+LvALvRNDnQk4GuaZcxjCx+xcHU h502mY7ohsPCrtqGj4vgy2ugV1wsZfWKYiWrtQ5+XWW3+FyrGYtARIVqVk2lWbF4 pFys5a0rZ8dgAOPHTQ3BoOvjGCPeo8uRfftgFMFoW2Pt11uULg3nxVqSmf2v1vZ3 gVrLUZYv1sxCULdnlcXjYDoWZm9h46FJQ6X0fNFrNe2VOfeV/yfppQl7z+Qr+67p zRytAgMBAAGjggK/MIICuzAdBgNVHQ4EFgQU4hkHWT0fCCFTkF8FLRB0Eu5gngUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NjkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM2OS80aGtIV1QwZkNDRlRrRjhGTFJCMEV1NWduZ1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO3jBtBggrBgEFBQcBBwEB/wReMFww GgQCAAEwFAMEBSvwoDAMAwQEZySwAwQEZyTAMD4EAgACMDgDBQAkAXWAAwUAJAF2 gAMFACQBd4ADBQAkAXiAAwUAJAF5gAMFACQBeoADBQAkAXuAAwUAJAF8gDANBgkq hkiG9w0BAQsFAAOCAQEAc8k0OkzxpHe0vXHhuK7YOv9cTSLS0gt58QxnCxvmGAWs BOkk6pv9hAF78r3V/FNzJ0yaspmgzH98i2yj9AbLdLpttBNpGx/fqAIKyNe3AltN 1jlwOThqlAItGwuU0QO6PlCnGdgRsT1Ho19kaV6qmuTOEQwa61FtYX9bvmLnKdQf T7lndb/PSIZH7GB3BUuwpJNIPqtYX17xu7Zw3W2ukfHvtuXPRjqvqfeUdZc2l3/Z c83bOTSEeG38K1srjf+P8ryhYB0dwwMSG3GGUrY4PJTk5c0mpyIAxVeRakoPPiI/ w4/5aCR3XPOcf08BjAPXOGTqfvhe+MZtuBU8akAphQ== -----END CERTIFICATE-----Generated at Mon Jan 19 12:19:30 2026 by rpki-client