This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kOpMYj8LihBi2qgOqaj0R49Z3oU.cer File: kOpMYj8LihBi2qgOqaj0R49Z3oU.cer (raw, json) Hash identifier: xj8LoTnnMr8UNS3/+u1NG3ANXP82SQhth5R620dSt4A= Subject key identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E7BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 12 Jan 2026 19:59:15 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 151225 IP: 113.31.136.0/21 IP: 2401:90a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59325 (0xe7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 12 19:59:15 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=90EA4C623F0B8A1062DAA80EA9A8F4478F59DE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:00:5c:6a:e8:b9:e6:7d:20:e0:a9:d6:e2: a3:17:09:2e:d2:25:3d:52:2f:8f:1d:f4:27:b7:cd: 35:a1:47:6b:c5:c5:68:3a:81:59:a3:5d:d1:f6:3d: 40:15:59:f4:c0:b0:61:d0:bb:cf:87:bf:89:e1:3d: 01:78:e2:b4:36:81:f1:b4:22:28:f7:da:c0:5f:dd: f7:8b:ca:d6:c8:85:2b:2d:fc:2e:29:12:f5:66:c2: 46:29:15:fa:83:88:25:48:e0:f4:de:bf:da:6b:29: cb:67:3b:c9:5b:01:ae:8e:58:8d:aa:5c:ac:c1:e8: cb:e9:bd:39:7c:7c:a0:72:39:e3:bb:b1:23:1b:ea: 1f:b6:d5:4c:e9:6a:de:eb:23:9c:0d:05:da:f7:64: 1f:6f:bb:85:76:15:14:23:f1:a9:e3:1d:0a:ca:c5: 9a:35:56:fb:7d:65:f5:93:6d:c6:61:0f:ac:af:95: 3f:9c:06:9c:76:63:7d:43:59:53:31:6d:32:ce:8e: fc:1f:8f:22:91:ee:7b:7f:40:d2:86:dd:1f:9e:77: 72:57:07:c1:ab:ca:28:7a:bc:4f:f1:d8:ad:a6:4e: 02:c7:8e:50:59:e0:ef:bc:54:ac:ab:0e:bd:72:26: 4b:91:a7:07:df:ae:74:f5:45:d4:d3:8f:29:b7:36: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:4C:62:3F:0B:8A:10:62:DA:A8:0E:A9:A8:F4:47:8F:59:DE:85 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3275/kOpMYj8LihBi2qgOqaj0R49Z3oU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151225 sbgp-ipAddrBlock: critical IPv4: 113.31.136.0/21 IPv6: 2401:90a0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:d7:37:8b:2e:94:20:d1:b5:04:ee:f0:dd:d8:c8:be:f4:4c: 3e:ac:ca:e1:3c:19:db:0e:bf:33:79:1f:68:24:3d:d5:15:e0: 50:8f:6a:17:70:38:cd:56:56:63:2f:80:25:5d:36:1f:c0:74: 0a:05:04:5c:6b:58:ae:4c:0c:c4:61:31:58:26:f5:bd:4f:c1: d5:e8:30:b4:3f:86:71:b3:65:63:3e:08:9a:73:4f:4f:56:46: e9:3d:d9:eb:ad:91:23:2a:46:66:5e:dc:2f:a2:e8:c5:bb:b6: 7a:ad:bb:9f:9d:ec:36:76:33:a6:58:33:1a:0f:f9:2e:c3:09: 4f:eb:05:92:b7:40:3c:e4:83:41:f7:83:2e:95:eb:8f:9d:8c: 1c:58:74:cc:93:40:93:71:fc:94:33:68:ec:ff:85:41:9f:fb: e2:c7:58:90:23:1b:41:34:f6:43:f4:61:8b:55:31:5c:48:40: 6c:44:51:c1:f8:dd:6d:43:4c:76:a5:94:13:2b:c1:de:8a:90: 91:25:72:b8:53:b8:52:fe:ce:da:9a:64:ec:94:a6:b8:f8:d9: f0:a6:63:c8:db:f7:5a:1d:0c:60:a7:f3:9c:95:9c:08:06:27: 07:cf:a6:2a:63:f9:d9:b5:e5:15:16:f3:ea:ad:3d:4b:81:ef: e3:96:a4:db -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOe9MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMTIxOTU5MTVaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDkwRUE0QzYyM0YwQjhBMTA2MkRBQTgwRUE5QThGNDQ3OEY1OURF ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtgBcaui55n0g4KnW 4qMXCS7SJT1SL48d9Ce3zTWhR2vFxWg6gVmjXdH2PUAVWfTAsGHQu8+Hv4nhPQF4 4rQ2gfG0Iij32sBf3feLytbIhSst/C4pEvVmwkYpFfqDiCVI4PTev9prKctnO8lb Aa6OWI2qXKzB6MvpvTl8fKByOeO7sSMb6h+21Uzpat7rI5wNBdr3ZB9vu4V2FRQj 8anjHQrKxZo1Vvt9ZfWTbcZhD6yvlT+cBpx2Y31DWVMxbTLOjvwfjyKR7nt/QNKG 3R+ed3JXB8Gryih6vE/x2K2mTgLHjlBZ4O+8VKyrDr1yJkuRpwffrnT1RdTTjym3 NqdDAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUkOpMYj8LihBi2qgOqaj0R49Z3oUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NzUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI3NS9rT3BNWWo4TGloQmkycWdPcWFqMFI0OVozb1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOuTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEA3EfiDANBAIAAjAHAwUAJAGQoDANBgkqhkiG9w0BAQsFAAOCAQEA D9c3iy6UING1BO7w3djIvvRMPqzK4TwZ2w6/M3kfaCQ91RXgUI9qF3A4zVZWYy+A JV02H8B0CgUEXGtYrkwMxGExWCb1vU/B1egwtD+GcbNlYz4ImnNPT1ZG6T3Z662R IypGZl7cL6Loxbu2eq27n53sNnYzplgzGg/5LsMJT+sFkrdAPOSDQfeDLpXrj52M HFh0zJNAk3H8lDNo7P+FQZ/74sdYkCMbQTT2Q/Rhi1UxXEhAbERRwfjdbUNMdqWU EyvB3oqQkSVyuFO4Uv7O2ppk7JSmuPjZ8KZjyNv3Wh0MYKfznJWcCAYnB8+mKmP5 2bXlFRbz6q09S4Hv45ak2w== -----END CERTIFICATE-----Generated at Mon Jan 19 12:17:30 2026 by rpki-client