This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/v53ECbEbmTO6Vq39mHrqjUQseeY.cer
File: v53ECbEbmTO6Vq39mHrqjUQseeY.cer (raw, json)
Hash identifier: n8I3vNnTufKURwCm7cn8BLPzWmNTCiPYa9WcHuBgsT8=
Subject key identifier: BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E67C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 09 Jan 2026 08:26:51 +0000
Certificate not after: Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources: AS: 137760
IP: 163.223.28.0/23
IP: 2401:f3e0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 16:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59004 (0xe67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jan 9 08:26:51 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=BF9DC409B11B9933BA56ADFD987AEA8D442C79E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:55:e8:9c:cc:05:75:c8:d0:81:01:88:57:
30:f1:e4:9a:32:5b:3c:56:23:1c:c0:29:d5:69:d1:
7c:39:df:7a:9c:c9:97:9b:f8:39:71:93:38:8b:40:
74:fb:a8:57:4e:07:4d:7a:e5:f1:a9:f3:bd:d0:fb:
9a:d4:d7:05:e8:45:9c:ef:00:00:40:4e:77:97:df:
bf:30:fb:4e:6a:3e:ec:ce:00:c4:3a:8b:c9:06:8d:
b4:fd:10:cb:e7:6a:3b:4c:14:d4:8d:6b:62:16:e0:
1b:c1:a6:4a:2e:e4:2b:fb:41:c4:b1:bd:60:d3:5b:
d1:e0:c8:4c:b8:d9:14:97:26:48:f7:fa:a1:ed:f8:
61:15:c1:18:bd:0f:62:35:f5:1c:ad:af:b7:d7:d8:
5b:1a:2f:4b:78:82:f9:46:87:79:f7:d4:5a:69:d4:
f6:f4:b5:3b:c5:45:40:d5:39:4d:f8:af:18:33:5f:
77:d9:55:b5:96:ca:65:c0:89:e4:56:88:22:32:8a:
11:99:ed:93:cf:fc:0a:05:75:78:f6:0b:b7:87:74:
28:5c:5a:f6:61:1c:1e:83:44:9f:25:f2:11:a4:e0:
6b:01:1b:b2:a7:1f:ce:ad:1a:97:84:90:e3:22:5d:
a0:9c:91:ab:54:df:8c:30:b9:c0:32:6a:98:65:7c:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:C4:09:B1:1B:99:33:BA:56:AD:FD:98:7A:EA:8D:44:2C:79:E6
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3356/v53ECbEbmTO6Vq39mHrqjUQseeY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137760
sbgp-ipAddrBlock: critical
IPv4:
163.223.28.0/23
IPv6:
2401:f3e0::/32
Signature Algorithm: sha256WithRSAEncryption
92:a1:76:2d:43:53:ee:3c:c1:a5:3d:03:2d:7e:30:b8:87:ef:
87:b1:a1:f5:f6:4f:30:6d:c4:13:0d:c6:08:c6:e3:05:99:3d:
fd:fe:f7:39:22:ff:94:87:d9:1f:74:8b:6d:31:b2:b4:1a:b4:
6c:df:47:e7:c4:c6:3a:ce:3b:99:b6:bb:69:e2:b2:61:7a:25:
09:30:05:4e:ac:f6:2a:ac:92:a7:03:50:63:2b:4d:0c:3a:4d:
ee:86:54:ad:ef:a3:5b:50:de:c6:68:ea:24:96:07:a4:4e:26:
bb:32:ac:55:dd:fd:00:5e:ed:77:8f:c4:87:c2:68:f3:1a:08:
c6:ed:98:89:40:2c:8b:5e:0f:48:31:ad:9a:9b:e1:76:69:0b:
06:f0:3f:a5:93:3a:25:52:17:cf:6a:da:69:67:00:f4:a5:8f:
6d:a7:ae:fb:90:b8:c4:71:5e:fc:cb:e3:73:52:d7:c0:35:a5:
a3:4a:a1:d7:f0:9e:69:07:83:ed:a1:6f:03:23:ab:63:d4:60:
90:4b:b0:31:d9:27:e5:13:3d:73:30:c0:61:ec:f7:5a:bf:d2:
6e:da:4a:d4:bc:e4:c3:d1:08:34:ac:29:08:fc:14:a4:ce:4b:
ac:3b:28:a0:d1:5d:4d:ad:ef:b1:28:6f:70:a3:b8:b3:46:97:
8b:aa:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 12:20:14 2026 by rpki-client