This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/0NoqLfX60198RI4OS6mmGusSjQA.cer File: 0NoqLfX60198RI4OS6mmGusSjQA.cer (raw, json) Hash identifier: BDXV32gnSqCz90NRbOZUugPAl/TiMy1SKmXhXwYyxo8= Subject key identifier: D0:DA:2A:2D:F5:FA:D3:5F:7C:44:8E:0E:4B:A9:A6:1A:EB:12:8D:00 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 4452 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/0NoqLfX60198RI4OS6mmGusSjQA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:22 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 192.232.44.0/23 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 17490 (0x4452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 9 08:26:22 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D0DA2A2DF5FAD35F7C448E0E4BA9A61AEB128D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:8e:7c:5e:b3:6a:ad:43:b3:49:7c:e6:60: f9:68:dc:a5:b8:69:63:8b:10:62:b5:de:99:59:22: d3:88:d4:2b:6b:07:87:9e:52:58:76:59:ef:57:8d: 47:26:f2:7e:88:44:23:83:02:7a:d2:02:5a:be:87: df:fd:61:de:a0:45:d9:8e:ef:7a:68:9a:8b:fd:e9: c9:05:57:0d:e3:81:a2:ee:2c:60:a6:f1:c6:ab:c9: 25:ee:f0:ec:09:61:40:cb:b2:db:29:22:53:f3:ba: 5d:48:3d:5a:fe:c1:84:b6:96:9d:35:0e:65:11:5c: 59:aa:c3:33:cb:09:ed:d3:5d:b3:bd:3e:d4:64:4b: 27:bd:71:dc:e1:1c:fc:0b:00:75:5f:d4:c0:54:e7: 59:60:49:51:b6:85:cf:cb:7f:30:32:7a:d3:28:a4: a9:7d:44:83:fe:7c:90:24:58:20:70:bb:03:b5:de: 46:f2:0b:14:92:be:5f:f3:9c:c2:38:b3:30:ab:db: 9e:a3:e9:da:b3:5d:15:4f:ca:70:ae:8e:21:33:ea: 11:69:97:f8:09:94:79:52:85:9d:bf:b4:d1:a5:19: e9:ca:95:a8:58:f9:9e:0c:ec:dc:c7:a4:1f:e9:72: ab:3c:79:b9:3e:96:3f:10:84:6b:63:bc:78:70:55: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DA:2A:2D:F5:FA:D3:5F:7C:44:8E:0E:4B:A9:A6:1A:EB:12:8D:00 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3423/0NoqLfX60198RI4OS6mmGusSjQA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.232.44.0/23 Signature Algorithm: sha256WithRSAEncryption a7:1c:ca:69:bd:58:6b:71:5c:a5:c2:88:22:e0:2d:df:29:e7: c6:c5:85:a3:91:8a:24:83:93:5d:db:23:bf:31:fe:5e:3e:5f: 98:6b:97:50:3a:52:23:58:34:94:f5:d8:d8:62:e4:6e:6d:35: 68:b0:aa:3d:fb:17:0b:19:e3:c2:9e:2b:9b:42:dc:bb:2c:78: 0e:51:1d:b7:b9:c7:11:53:f9:f8:08:66:e5:5e:08:70:9e:bd: 37:9e:89:bf:a4:0a:d3:93:76:11:96:a3:47:94:ee:0b:15:cf: f5:8a:f4:83:1e:dd:b9:e6:cb:54:6b:09:88:21:41:b6:21:0c: 66:9b:c3:ee:25:c4:c3:4c:33:12:2f:e1:7a:73:08:3b:5c:a5: 52:2f:d3:ca:78:95:c6:bc:79:4c:f0:92:9e:cc:6d:c5:de:b1: 65:fb:08:7d:73:4d:74:13:55:65:2e:41:dd:d5:df:55:c8:9c: 3b:d5:ee:25:93:70:93:f1:52:2f:94:cd:de:06:f0:58:29:ac: ac:14:77:7b:e9:eb:75:3d:8f:f2:95:a3:4e:12:42:62:cf:37: d2:43:76:d0:53:d3:0d:8c:7c:ed:c5:65:42:e4:ed:30:99:e8: 8b:83:af:be:63:da:3d:28:ef:1c:92:73:b8:30:53:6e:58:01: 36:89:b5:4a -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRFIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDEwOTA4MjYyMloXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoRDBEQTJBMkRGNUZBRDM1RjdDNDQ4RTBFNEJBOUE2MUFFQjEyOEQw MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmmjnxes2qtQ7NJfOZg +WjcpbhpY4sQYrXemVki04jUK2sHh55SWHZZ71eNRybyfohEI4MCetICWr6H3/1h 3qBF2Y7vemiai/3pyQVXDeOBou4sYKbxxqvJJe7w7AlhQMuy2ykiU/O6XUg9Wv7B hLaWnTUOZRFcWarDM8sJ7dNds70+1GRLJ71x3OEc/AsAdV/UwFTnWWBJUbaFz8t/ MDJ60yikqX1Eg/58kCRYIHC7A7XeRvILFJK+X/OcwjizMKvbnqPp2rNdFU/KcK6O ITPqEWmX+AmUeVKFnb+00aUZ6cqVqFj5ngzs3MekH+lyqzx5uT6WPxCEa2O8eHBV epkCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBTQ2iot9frTX3xEjg5LqaYa6xKNADAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQy My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDIzLzBOb3FMZlg2MDE5OFJJNE9TNm1tR3VzU2pRQS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHA6CwwDQYJKoZIhvcNAQELBQAD ggEBAKccymm9WGtxXKXCiCLgLd8p58bFhaORiiSDk13bI78x/l4+X5hrl1A6UiNY NJT12Nhi5G5tNWiwqj37FwsZ48KeK5tC3LsseA5RHbe5xxFT+fgIZuVeCHCevTee ib+kCtOTdhGWo0eU7gsVz/WK9IMe3bnmy1RrCYghQbYhDGabw+4lxMNMMxIv4Xpz CDtcpVIv08p4lca8eUzwkp7MbcXesWX7CH1zTXQTVWUuQd3V31XInDvV7iWTcJPx Ui+Uzd4G8FgprKwUd3vp63U9j/KVo04SQmLPN9JDdtBT0w2MfO3FZULk7TCZ6IuD r75j2j0o7xySc7gwU25YATaJtUo= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:25 2026 by rpki-client