This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ab4zXmpO-5VNuniThGkpo6X2hno.cer
File: Ab4zXmpO-5VNuniThGkpo6X2hno.cer (raw, json)
Hash identifier: m9w5vex8TZgDv2iQZT0DekcDaQLLKnWyf2Z9ttcDDO4=
Subject key identifier: 01:BE:33:5E:6A:4E:FB:95:4D:BA:78:93:84:69:29:A3:A5:F6:86:7A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E6BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 09 Jan 2026 08:28:25 +0000
Certificate not after: Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources: AS: 151263
IP: 43.226.49.0/24
IP: 43.226.72.0/22
IP: 43.227.68.0/24
IP: 43.227.80.0/20
IP: 103.20.128.0/22
IP: 103.45.128.0/19
IP: 103.65.224.0/23
IP: 103.255.68.0/22
IP: 2401:5c20::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59070 (0xe6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jan 9 08:28:25 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=01BE335E6A4EFB954DBA7893846929A3A5F6867A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:0f:f1:3f:52:6b:1f:67:c6:d7:bf:84:34:
7b:bb:14:a1:36:68:32:66:41:c0:1a:14:d6:59:80:
38:3e:d6:80:30:cb:db:fb:21:fe:70:b9:1f:06:2c:
d0:28:99:72:82:d1:fc:00:2c:e3:a9:a7:9f:63:a4:
e4:ee:17:10:5e:a9:aa:54:8d:d7:21:17:0f:92:47:
09:b6:71:3a:dc:8b:61:a2:e7:96:be:56:34:91:d9:
dd:40:4e:61:39:35:70:5d:2d:c4:2d:1d:8f:e9:e4:
b6:67:8d:f9:ac:16:df:78:02:3a:ef:f4:4d:60:e9:
40:5c:a3:4d:eb:8c:1b:ca:b9:a6:93:c2:1f:fd:96:
5a:f2:52:df:0d:ce:58:30:20:a3:00:78:8f:5c:e0:
02:40:b2:9d:09:8b:28:ad:6a:94:50:f1:07:b6:a2:
33:2e:f2:f2:e7:e2:cf:9d:27:81:35:ca:ef:44:de:
f1:ba:0d:d7:79:9a:ac:d8:c5:73:4c:47:71:c5:45:
30:d1:77:01:95:ac:26:5e:47:c3:c7:ea:3a:9c:28:
4b:c7:f8:f7:72:54:50:35:a4:47:fc:a3:5d:9f:da:
f2:43:59:8e:cd:e8:25:72:c9:a2:32:4d:63:c9:00:
2f:9e:ce:f0:a5:9e:86:b6:7f:4a:91:7c:50:c9:ff:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:33:5E:6A:4E:FB:95:4D:BA:78:93:84:69:29:A3:A5:F6:86:7A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3194/Ab4zXmpO-5VNuniThGkpo6X2hno.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151263
sbgp-ipAddrBlock: critical
IPv4:
43.226.49.0/24
43.226.72.0/22
43.227.68.0/24
43.227.80.0/20
103.20.128.0/22
103.45.128.0/19
103.65.224.0/23
103.255.68.0/22
IPv6:
2401:5c20::/32
Signature Algorithm: sha256WithRSAEncryption
43:83:7e:ac:52:e8:2b:06:95:ee:a2:2b:6b:cd:31:50:27:14:
3c:2e:73:30:81:ee:ce:c1:b7:e5:a1:ac:b8:b5:f6:df:2a:30:
da:6e:7f:e3:fb:44:42:de:e3:5a:52:1e:75:05:31:83:d6:e6:
e1:de:b6:6b:ad:e5:04:be:e4:85:d3:29:dc:5c:2e:29:8f:f8:
73:e6:39:6f:dc:11:13:dc:25:a8:b7:8c:88:d4:d0:44:61:f7:
39:9c:22:7e:14:19:4c:e1:45:69:a7:27:8e:02:53:17:79:af:
1a:54:a4:9a:5c:bd:b6:21:e7:be:9b:ea:36:ce:2c:73:4f:29:
52:64:42:61:c4:1e:b3:5c:ef:53:b9:53:66:03:7c:36:82:6b:
d5:41:09:4a:aa:75:19:14:11:47:d6:d1:b4:aa:fe:a6:4e:38:
5a:42:de:24:60:63:57:95:1e:e0:49:2b:01:10:62:e5:74:97:
ab:2c:3d:03:7d:37:4f:6c:47:0e:2d:40:d1:44:b7:c1:5e:4d:
71:1a:87:46:4a:81:0b:44:24:ab:bb:77:49:0b:6b:e7:86:ac:
6a:ec:ee:51:5c:d8:e1:60:67:d8:65:33:f5:32:1e:40:34:eb:
95:48:19:b7:d5:13:98:2f:c2:23:ab:29:59:2f:b9:f2:17:01:
ac:a7:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 12:22:09 2026 by rpki-client