This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer File: FRA62aFdfkF8Zwh3k9UUzyOK8lQ.cer (raw, json) Hash identifier: 9RwP+N7cRFXbtQ2lHzyqjgBI0hWHbNvMmZAyLKiaV6E= Subject key identifier: 15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 12 Jan 2026 19:55:46 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 131553 IP: 103.164.42.0/23 IP: 2407:3540::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59285 (0xe795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 12 19:55:46 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=15103AD9A15D7E417C67087793D514CF238AF254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:ef:8e:97:e0:38:be:02:76:2b:7b:49:c2: 24:49:9e:1e:85:10:3e:ed:b6:79:63:13:a9:57:93: e5:dc:ea:f6:75:28:32:d0:4c:96:75:ec:cc:e5:fa: 26:1a:60:19:39:0c:bc:45:1d:f1:d3:99:66:2f:5f: 99:41:1d:66:62:fc:f7:90:36:65:cf:a0:4d:e4:9a: aa:f4:15:ad:f3:86:72:e5:7f:d5:7a:7f:03:95:53: 0c:bb:7d:a1:97:51:cc:8b:27:aa:17:2a:b8:0f:08: 84:b1:e3:77:2f:18:e2:6f:68:28:aa:97:7b:1d:82: 19:df:e5:f4:e6:d6:d0:64:fa:8c:97:19:82:15:1a: be:af:12:91:a1:26:f0:41:3b:90:c1:b3:af:4f:b1: a7:0f:97:35:96:3c:f1:5a:1b:53:ed:23:4b:41:26: e8:d0:a2:27:ad:5a:f6:25:e4:48:9e:44:30:b3:1b: 3c:3c:5b:41:a5:bc:ec:1f:1b:e2:cf:06:50:83:bf: 86:ef:2a:b3:08:57:46:74:09:f9:51:87:fd:cb:4b: db:c8:4b:9f:1b:9c:0e:4b:31:0a:e0:57:8e:6a:cd: 76:4b:a6:e0:88:d9:c8:9c:79:4c:98:b5:2c:3b:58: 78:6e:a8:4e:97:e2:62:71:c6:a1:18:fa:2b:5c:2b: b9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:10:3A:D9:A1:5D:7E:41:7C:67:08:77:93:D5:14:CF:23:8A:F2:54 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3076/FRA62aFdfkF8Zwh3k9UUzyOK8lQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131553 sbgp-ipAddrBlock: critical IPv4: 103.164.42.0/23 IPv6: 2407:3540::/32 Signature Algorithm: sha256WithRSAEncryption 11:10:f1:e8:b4:75:99:8c:20:d0:eb:5c:75:38:b5:e5:20:83: ea:b0:d3:ae:06:0d:94:d7:eb:0a:28:79:64:ba:ea:58:57:6b: d7:0b:1e:ed:66:ef:55:0f:72:1f:36:1f:c6:6a:32:97:c6:ca: 5c:b1:fa:89:43:61:f5:c1:c5:db:08:89:bb:e1:8d:3e:a9:54: 94:21:b4:40:f6:cc:6e:7d:ce:33:f0:31:18:76:2d:14:c0:b7: 8f:c8:d8:39:ab:05:ef:24:eb:7e:2b:7a:6b:94:bb:d6:aa:f4: 0d:5d:24:d5:a9:6b:14:55:42:5e:11:8d:5f:21:af:be:d0:90: 2a:c5:f9:22:f2:a5:aa:30:9f:22:23:51:33:ec:f7:6b:c2:92: 3c:40:f0:f5:92:34:07:00:90:ec:6a:8c:97:cc:a0:2b:70:eb: d2:a7:81:8b:56:ed:89:3b:43:56:67:df:56:1f:b0:95:32:5c: 0b:fb:f4:2a:e4:bc:22:cb:cd:96:fe:a0:9b:0b:7a:af:61:0e: ea:6b:db:28:7b:4d:32:ab:65:1f:5b:dd:e5:94:21:1a:48:9a: 74:16:3e:e3:61:68:d5:d9:fb:1a:c7:68:fd:16:3d:85:df:5f: 37:50:dc:c5:32:d0:0a:a9:8f:ba:b0:dd:4a:da:1c:93:06:a2: 15:18:db:bc -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOeVMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMTIxOTU1NDZaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDE1MTAzQUQ5QTE1RDdFNDE3QzY3MDg3NzkzRDUxNENGMjM4QUYy NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSe+Ol+A4vgJ2K3tJ wiRJnh6FED7ttnljE6lXk+Xc6vZ1KDLQTJZ17Mzl+iYaYBk5DLxFHfHTmWYvX5lB HWZi/PeQNmXPoE3kmqr0Fa3zhnLlf9V6fwOVUwy7faGXUcyLJ6oXKrgPCISx43cv GOJvaCiql3sdghnf5fTm1tBk+oyXGYIVGr6vEpGhJvBBO5DBs69PsacPlzWWPPFa G1PtI0tBJujQoietWvYl5EieRDCzGzw8W0GlvOwfG+LPBlCDv4bvKrMIV0Z0CflR h/3LS9vIS58bnA5LMQrgV45qzXZLpuCI2ciceUyYtSw7WHhuqE6X4mJxxqEY+itc K7m7AgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUFRA62aFdfkF8Zwh3k9UUzyOK8lQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw NzYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzA3Ni9GUkE2MmFGZGZrRjhad2gzazlVVXp5T0s4bFEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIB4TAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWekKjANBAIAAjAHAwUAJAc1QDANBgkqhkiG9w0BAQsFAAOCAQEA ERDx6LR1mYwg0OtcdTi15SCD6rDTrgYNlNfrCih5ZLrqWFdr1wse7WbvVQ9yHzYf xmoyl8bKXLH6iUNh9cHF2wiJu+GNPqlUlCG0QPbMbn3OM/AxGHYtFMC3j8jYOasF 7yTrfit6a5S71qr0DV0k1alrFFVCXhGNXyGvvtCQKsX5IvKlqjCfIiNRM+z3a8KS PEDw9ZI0BwCQ7GqMl8ygK3Dr0qeBi1btiTtDVmffVh+wlTJcC/v0KuS8IsvNlv6g mwt6r2EO6mvbKHtNMqtlH1vd5ZQhGkiadBY+42Fo1dn7Gsdo/RY9hd9fN1DcxTLQ CqmPurDdStockwaiFRjbvA== -----END CERTIFICATE-----Generated at Mon Jan 19 12:19:29 2026 by rpki-client