This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer File: 27TF-pa4dBv2i0i_AE29b9ljb60.cer (raw, json) Hash identifier: 5TFlmzZ1QHd0Ze9SLCwP/6SJj4tqNW42EAffMRpTHjA= Subject key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 18 Jan 2026 19:57:56 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 63567 IP: 43.226.96.0/20 IP: 43.240.0.0/22 IP: 43.241.48.0/22 IP: 43.247.92.0/22 IP: 43.248.80.0/20 IP: 43.248.176.0 -- 43.248.207.255 IP: 103.37.44.0/22 IP: 103.40.12.0/22 IP: 103.45.160.0/22 IP: 103.83.72.0/22 IP: 103.87.180.0/22 IP: 103.98.140.0 -- 103.98.147.255 IP: 103.205.252.0/22 IP: 103.239.244.0/22 IP: 111.223.12.0/22 IP: 2403:3380::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59393 (0xe801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 18 19:57:56 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:10:36:99:e7:de:e4:de:0e:b9:37:c2:c7: ec:76:32:81:d2:ef:3b:6a:81:8e:2e:8e:2f:6b:ee: 95:bf:e6:70:8b:55:92:f7:b0:ae:74:17:52:d5:77: 83:ec:66:64:d9:48:08:bb:89:6e:af:91:df:86:1f: e1:4c:6b:f5:ce:ad:1b:8f:89:cd:55:ad:19:46:2a: 80:13:88:15:8c:d9:7e:04:d0:f2:7e:4b:25:e5:1c: 5c:cc:a1:00:b6:ed:94:af:8c:37:6d:dd:37:23:91: d8:2a:72:5c:fe:98:b6:5e:a0:20:ae:22:64:ec:ae: b1:08:d8:0a:25:fa:c5:bd:60:51:f3:84:bd:fb:c5: 46:d1:05:93:1c:68:f0:6f:e4:f5:4d:b5:ef:54:c5: 86:82:7c:b0:3b:f4:46:fd:9b:52:27:bf:81:89:72: 2c:e7:e8:84:e4:2a:6c:20:0a:5f:dd:88:ca:ac:88: 03:02:37:54:ee:3a:d5:5a:f2:aa:ed:5c:a7:ab:79: 8e:70:6b:07:73:f7:c6:c4:6b:09:17:a5:c7:18:41: ae:02:07:11:a0:75:a2:7f:fc:f3:a7:e6:67:1e:cb: 23:41:bb:a7:f8:03:0a:78:26:de:98:87:06:6e:51: 93:be:25:87:b6:7f:84:79:ab:fd:76:b8:15:8f:77: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63567 sbgp-ipAddrBlock: critical IPv4: 43.226.96.0/20 43.240.0.0/22 43.241.48.0/22 43.247.92.0/22 43.248.80.0/20 43.248.176.0-43.248.207.255 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.83.72.0/22 103.87.180.0/22 103.98.140.0-103.98.147.255 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 IPv6: 2403:3380::/32 Signature Algorithm: sha256WithRSAEncryption 73:40:71:78:d9:3b:f2:4d:90:f0:fc:ea:8c:5d:10:77:a3:8d: 54:96:77:09:7a:06:5c:92:b6:61:c3:fd:2b:aa:b8:16:09:4e: 34:d4:20:75:0f:a9:c5:13:e0:ba:e5:18:e1:4c:84:7d:0e:f2: ef:79:8c:47:63:56:e2:b6:47:d9:af:f6:9f:f0:b8:30:e5:a0: c7:d2:81:a5:c7:16:b3:d6:3a:f9:0c:63:5b:b9:7a:d4:3c:33: 51:6c:90:78:98:d9:11:93:30:6f:1e:06:e7:0f:f3:98:b6:08: 91:2a:38:20:8b:77:e9:12:e0:66:2e:34:2a:e0:d5:fc:cb:6b: 09:12:cf:ec:25:6c:31:a2:a2:1e:e0:5c:5e:fe:bf:66:be:0c: 20:13:10:8d:f6:6a:94:4c:6d:2d:dd:ea:b4:60:19:50:ba:16: e9:58:5a:42:d7:66:c7:b0:8d:c9:0f:99:a9:bb:82:c8:63:72: e7:9d:de:28:6c:a8:bb:28:00:50:90:3b:96:ed:25:42:6c:e0: 7d:6b:27:60:f4:c3:9c:1f:66:d3:75:be:c5:cb:da:22:07:ba: 33:47:2f:b6:e3:32:b5:4d:97:6c:68:cb:1a:d2:d9:e0:07:cd: f2:8b:11:28:a6:ab:f6:ca:88:62:f6:d5:2c:cb:4b:71:52:57: 03:77:40:58 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIDAOgBMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMTgxOTU3NTZaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKERCQjRDNUZBOTZCODc0MUJGNjhCNDhCRjAwNERCRDZGRDk2MzZG QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnRA2mefe5N4OuTfC x+x2MoHS7ztqgY4uji9r7pW/5nCLVZL3sK50F1LVd4PsZmTZSAi7iW6vkd+GH+FM a/XOrRuPic1VrRlGKoATiBWM2X4E0PJ+SyXlHFzMoQC27ZSvjDdt3Tcjkdgqclz+ mLZeoCCuImTsrrEI2Aol+sW9YFHzhL37xUbRBZMcaPBv5PVNte9UxYaCfLA79Eb9 m1Inv4GJcizn6ITkKmwgCl/diMqsiAMCN1TuOtVa8qrtXKereY5wawdz98bEawkX pccYQa4CBxGgdaJ//POn5mceyyNBu6f4Awp4Jt6YhwZuUZO+JYe2f4R5q/12uBWP d6NLAgMBAAGjggLlMIIC4TAdBgNVHQ4EFgQU27TF+pa4dBv2i0i/AE29b9ljb60w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzg5 MC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC84OTAvMjdURi1wYTRkQnYyaTBpX0FFMjliOWxqYjYwLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+E8wgZQGCCsGAQUFBwEHAQH/BIGEMIGB MHAEAgABMGoDBAQr4mADBAIr8AADBAIr8TADBAIr91wDBAQr+FAwDAMEBCv4sAME BCv4wAMEAmclLAMEAmcoDAMEAmctoAMEAmdTSAMEAmdXtDAMAwQCZ2KMAwQCZ2KQ AwQCZ838AwQCZ+/0AwQCb98MMA0EAgACMAcDBQAkAzOAMA0GCSqGSIb3DQEBCwUA A4IBAQBzQHF42TvyTZDw/OqMXRB3o41UlncJegZckrZhw/0rqrgWCU401CB1D6nF E+C65RjhTIR9DvLveYxHY1bitkfZr/af8Lgw5aDH0oGlxxaz1jr5DGNbuXrUPDNR bJB4mNkRkzBvHgbnD/OYtgiRKjggi3fpEuBmLjQq4NX8y2sJEs/sJWwxoqIe4Fxe /r9mvgwgExCN9mqUTG0t3eq0YBlQuhbpWFpC12bHsI3JD5mpu4LIY3Lnnd4obKi7 KABQkDuW7SVCbOB9aydg9MOcH2bTdb7Fy9oiB7ozRy+24zK1TZdsaMsa0tngB83y ixEopqv2yohi9tUsy0txUlcDd0BY -----END CERTIFICATE-----Generated at Sun Jan 25 06:06:22 2026 by rpki-client