This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/w9r9_4KPO0NdEnBkqVb13VOivD0.cer
File:                     w9r9_4KPO0NdEnBkqVb13VOivD0.cer (raw, json)
Hash identifier:          saGXNvV5KCg8+iYST5FA2K6W3d5CL3K4I3kN6XwzssQ=
Subject key identifier:   C3:DA:FD:FF:82:8F:3B:43:5D:12:70:64:A9:56:F5:DD:53:A2:BC:3D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       E6FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 09 Jan 2026 08:29:28 +0000
Certificate not after:    Sat 09 Jan 2027 08:23:18 +0000
Subordinate resources:    AS: 131541
                          IP: 103.103.36.0/22
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59132 (0xe6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jan  9 08:29:28 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=C3DAFDFF828F3B435D127064A956F5DD53A2BC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:b1:08:43:20:09:af:e0:78:bd:3e:e6:8b:
                    b8:4a:72:e4:7d:fd:1a:08:e8:78:bb:1c:f9:47:dc:
                    af:d5:ba:5f:8a:85:9a:69:a7:9e:16:d3:20:72:c0:
                    27:4d:45:db:52:10:ee:33:b7:dd:f9:a9:d4:b8:a3:
                    5a:a8:93:c7:53:cb:ed:f2:41:b0:59:e4:34:a5:dd:
                    56:d4:9b:ff:52:4d:a9:6d:e1:1e:d8:8b:9f:b4:15:
                    86:99:fa:e7:39:73:4d:91:df:70:04:0a:65:4d:62:
                    d5:16:f4:cd:f8:45:70:45:70:a2:b8:69:1a:e8:fb:
                    37:b4:20:17:2b:e7:64:6a:46:8d:ab:41:22:96:84:
                    22:fe:30:b9:05:3f:d7:b7:37:e1:a4:a4:aa:50:25:
                    cf:87:5f:9d:4a:55:3a:71:41:aa:26:cc:94:54:6e:
                    ca:66:18:ee:b1:5e:e7:a3:a2:35:fa:31:27:ac:56:
                    b3:5f:2b:a2:3e:12:d8:14:5e:e8:a2:21:51:f8:f9:
                    fc:34:17:9e:b3:2d:cf:e2:44:e6:87:4e:d3:53:da:
                    e4:6e:8d:df:15:de:6a:fa:55:04:20:82:d9:b4:5b:
                    36:9f:a2:fc:c9:d5:b1:d0:3d:c3:3b:a2:87:e9:c0:
                    56:5b:29:8b:8f:bd:46:38:fa:97:5f:89:a0:57:00:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DA:FD:FF:82:8F:3B:43:5D:12:70:64:A9:56:F5:DD:53:A2:BC:3D
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2625/w9r9_4KPO0NdEnBkqVb13VOivD0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131541

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:44:f7:ca:33:dd:8c:dd:e3:68:f1:bf:29:41:03:24:ca:
         9d:0e:45:84:9d:21:f7:bd:f9:1f:5b:2f:64:6e:60:db:dc:e5:
         7f:45:db:94:ac:17:ec:13:4e:36:79:eb:ef:fd:f6:fd:5b:94:
         a1:b1:a1:4a:ad:6b:41:5d:41:7d:1d:15:94:b2:72:25:38:77:
         48:a6:bc:04:e3:ff:bc:08:a5:1f:85:7d:50:a3:f5:2f:03:ff:
         38:f7:ef:e1:51:21:6d:74:3e:36:4b:13:2f:8d:27:af:1c:8d:
         82:b2:3f:13:7b:5a:22:be:53:42:79:ce:e1:09:75:8c:21:a7:
         51:1b:c2:56:31:31:69:32:83:82:6b:38:f5:4e:4e:29:91:e7:
         d0:f9:62:60:31:a0:5b:17:50:d2:f3:66:b1:05:29:96:cc:86:
         2b:81:ba:d1:ff:f4:82:ac:6b:29:7b:df:a1:6b:0c:3b:17:7f:
         40:fe:45:ad:4c:1f:4a:3a:c3:e5:74:68:36:f3:33:9d:63:9a:
         35:b6:12:ee:48:f2:d8:46:2e:26:4f:bb:ee:7e:cb:4a:8b:f3:
         8b:13:c9:27:8e:8e:51:7d:52:3b:03:d2:fe:44:3b:02:0f:b1:
         bc:c6:b1:47:4c:2f:88:e9:98:70:24:24:fc:18:8f:70:f7:40:
         d4:b9:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 12:20:41 2026 by rpki-client