This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer
File:                     v53ECbEbmTO6Vq39mHrqjUQseeY.cer (raw, json)
Hash identifier:          n8I3vNnTufKURwCm7cn8BLPzWmNTCiPYa9WcHuBgsT8=
Subject key identifier:   BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E67C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:26:51 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 137760
                          IP: 163.223.28.0/23
                          IP: 2401:f3e0::/32
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59004 (0xe67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:26:51 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:55:e8:9c:cc:05:75:c8:d0:81:01:88:57:
                    30:f1:e4:9a:32:5b:3c:56:23:1c:c0:29:d5:69:d1:
                    7c:39:df:7a:9c:c9:97:9b:f8:39:71:93:38:8b:40:
                    74:fb:a8:57:4e:07:4d:7a:e5:f1:a9:f3:bd:d0:fb:
                    9a:d4:d7:05:e8:45:9c:ef:00:00:40:4e:77:97:df:
                    bf:30:fb:4e:6a:3e:ec:ce:00:c4:3a:8b:c9:06:8d:
                    b4:fd:10:cb:e7:6a:3b:4c:14:d4:8d:6b:62:16:e0:
                    1b:c1:a6:4a:2e:e4:2b:fb:41:c4:b1:bd:60:d3:5b:
                    d1:e0:c8:4c:b8:d9:14:97:26:48:f7:fa:a1:ed:f8:
                    61:15:c1:18:bd:0f:62:35:f5:1c:ad:af:b7:d7:d8:
                    5b:1a:2f:4b:78:82:f9:46:87:79:f7:d4:5a:69:d4:
                    f6:f4:b5:3b:c5:45:40:d5:39:4d:f8:af:18:33:5f:
                    77:d9:55:b5:96:ca:65:c0:89:e4:56:88:22:32:8a:
                    11:99:ed:93:cf:fc:0a:05:75:78:f6:0b:b7:87:74:
                    28:5c:5a:f6:61:1c:1e:83:44:9f:25:f2:11:a4:e0:
                    6b:01:1b:b2:a7:1f:ce:ad:1a:97:84:90:e3:22:5d:
                    a0:9c:91:ab:54:df:8c:30:b9:c0:32:6a:98:65:7c:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137760

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.28.0/23
                IPv6:
                  2401:f3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:a1:76:2d:43:53:ee:3c:c1:a5:3d:03:2d:7e:30:b8:87:ef:
         87:b1:a1:f5:f6:4f:30:6d:c4:13:0d:c6:08:c6:e3:05:99:3d:
         fd:fe:f7:39:22:ff:94:87:d9:1f:74:8b:6d:31:b2:b4:1a:b4:
         6c:df:47:e7:c4:c6:3a:ce:3b:99:b6:bb:69:e2:b2:61:7a:25:
         09:30:05:4e:ac:f6:2a:ac:92:a7:03:50:63:2b:4d:0c:3a:4d:
         ee:86:54:ad:ef:a3:5b:50:de:c6:68:ea:24:96:07:a4:4e:26:
         bb:32:ac:55:dd:fd:00:5e:ed:77:8f:c4:87:c2:68:f3:1a:08:
         c6:ed:98:89:40:2c:8b:5e:0f:48:31:ad:9a:9b:e1:76:69:0b:
         06:f0:3f:a5:93:3a:25:52:17:cf:6a:da:69:67:00:f4:a5:8f:
         6d:a7:ae:fb:90:b8:c4:71:5e:fc:cb:e3:73:52:d7:c0:35:a5:
         a3:4a:a1:d7:f0:9e:69:07:83:ed:a1:6f:03:23:ab:63:d4:60:
         90:4b:b0:31:d9:27:e5:13:3d:73:30:c0:61:ec:f7:5a:bf:d2:
         6e:da:4a:d4:bc:e4:c3:d1:08:34:ac:29:08:fc:14:a4:ce:4b:
         ac:3b:28:a0:d1:5d:4d:ad:ef:b1:28:6f:70:a3:b8:b3:46:97:
         8b:aa:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 12:20:14 2026 by rpki-client