This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RA0YjgN6sufC2lviztymGqt4xaM.cer File: RA0YjgN6sufC2lviztymGqt4xaM.cer (raw, json) Hash identifier: 2O6VLrAoCAA53gL+C/LQ8+Lu/5WWRALQQa62tYBTEso= Subject key identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 44B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 12 Jan 2026 19:57:38 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 160.30.196.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17585 (0x44b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Jan 12 19:57:38 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=440D188E037AB2E7C2DA5BE2CEDCA61AAB78C5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:78:64:4f:5f:ff:1d:05:d2:28:4a:1f:22: 01:12:3e:88:89:a9:da:1e:8e:d2:e0:c0:20:83:e2: da:5c:18:76:c4:7d:eb:a0:28:27:28:41:2d:b1:cd: c0:c6:bf:b5:ad:d7:1b:b1:a2:c8:17:a5:3d:d1:cb: b5:fa:ff:8b:3a:af:64:3b:89:28:48:9f:9f:32:33: bb:cc:21:dd:29:8c:cc:f8:d3:b8:a7:51:9c:53:73: dc:23:8d:88:aa:70:43:f6:1e:89:05:52:9d:5c:d5: 97:29:25:be:b2:83:c5:47:e9:c2:c6:b1:cd:14:f0: 0d:98:c2:ab:0e:3a:3d:47:87:80:45:66:e9:49:42: a8:f3:f6:72:b1:52:2c:61:43:70:4d:22:5f:02:0d: 3e:bd:0d:fe:9f:1a:e8:5d:4a:28:c6:d7:ff:89:92: c9:6c:91:76:c4:7e:ff:52:b9:e4:65:0b:1c:8e:11: a9:b0:88:17:6c:43:52:9a:b6:c2:47:65:e0:bf:d6: 85:61:2c:29:af:b3:0f:30:63:77:f3:04:6c:49:fc: 58:3b:9a:76:37:d2:40:d7:a4:f2:fc:93:f0:27:9b: 3c:43:f7:f0:6e:59:f5:10:97:37:de:3a:e0:fe:3d: ff:f4:bb:72:a0:1a:b2:a3:c9:1b:79:ec:10:72:7b: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:18:8E:03:7A:B2:E7:C2:DA:5B:E2:CE:DC:A6:1A:AB:78:C5:A3 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3313/RA0YjgN6sufC2lviztymGqt4xaM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.196.0/23 Signature Algorithm: sha256WithRSAEncryption 33:b1:a2:c4:bb:d9:10:2c:7b:ab:f5:dd:7c:68:e4:1b:43:53: d3:58:f3:62:ce:90:2b:89:9f:0e:8b:5c:ef:bc:cb:0d:bd:2b: 61:d6:21:9b:3c:f5:42:fc:fc:47:4c:3b:71:5c:66:55:ac:cd: 3f:68:e5:fe:97:29:e9:4a:6c:39:bb:24:d3:cc:a5:fe:6f:f0: 94:c7:51:6e:f9:30:7d:12:f1:34:31:f7:e1:04:64:c3:bc:0e: 26:96:8b:5c:55:f3:70:98:56:bc:e6:1f:da:ec:6d:5b:3d:bf: 8b:45:31:4a:9e:8c:4d:b9:8e:07:3d:e8:0a:a0:40:3c:f5:b3: 47:b4:35:a8:e8:9e:69:2e:90:96:e4:92:be:54:7d:fd:f3:a2: e5:56:ed:d2:b1:39:77:b4:c9:3e:fb:4c:78:92:bf:4a:1a:e5: 24:44:f2:42:3e:35:10:53:48:d7:2b:78:5e:54:6a:45:55:56: fc:46:f4:b4:77:4a:a1:f7:13:05:ff:8f:be:e5:2b:75:76:87: 23:ed:95:40:9c:2c:ac:8a:c9:b8:24:4e:8c:37:1d:f4:00:8c: 04:4d:3d:70:01:aa:a0:fb:88:45:61:5b:25:ef:81:db:9e:ca: bb:f2:96:8e:9b:6c:ed:b4:e1:08:71:ab:dc:16:e8:c0:64:33: 82:68:9f:95 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICRLEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI2MDExMjE5NTczOFoXDTI3MDEwOTA4MjMxOFowMzEx MC8GA1UEAxMoNDQwRDE4OEUwMzdBQjJFN0MyREE1QkUyQ0VEQ0E2MUFBQjc4QzVB MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTOeGRPX/8dBdIoSh8i ARI+iImp2h6O0uDAIIPi2lwYdsR966AoJyhBLbHNwMa/ta3XG7GiyBelPdHLtfr/ izqvZDuJKEifnzIzu8wh3SmMzPjTuKdRnFNz3CONiKpwQ/YeiQVSnVzVlyklvrKD xUfpwsaxzRTwDZjCqw46PUeHgEVm6UlCqPP2crFSLGFDcE0iXwINPr0N/p8a6F1K KMbX/4mSyWyRdsR+/1K55GULHI4RqbCIF2xDUpq2wkdl4L/WhWEsKa+zDzBjd/ME bEn8WDuadjfSQNek8vyT8CebPEP38G5Z9RCXN9464P49//S7cqAasqPJG3nsEHJ7 IFcCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBREDRiOA3qy58LaW+LO3KYaq3jFozAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx My8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMzEzL1JBMFlqZ042c3VmQzJsdml6dHltR3F0NHhhTS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHsQwDQYJKoZIhvcNAQELBQAD ggEBADOxosS72RAse6v13Xxo5BtDU9NY82LOkCuJnw6LXO+8yw29K2HWIZs89UL8 /EdMO3FcZlWszT9o5f6XKelKbDm7JNPMpf5v8JTHUW75MH0S8TQx9+EEZMO8DiaW i1xV83CYVrzmH9rsbVs9v4tFMUqejE25jgc96AqgQDz1s0e0NajonmkukJbkkr5U ff3zouVW7dKxOXe0yT77THiSv0oa5SRE8kI+NRBTSNcreF5UakVVVvxG9LR3SqH3 EwX/j77lK3V2hyPtlUCcLKyKybgkTow3HfQAjARNPXABqqD7iEVhWyXvgdueyrvy lo6bbO204Qhxq9wW6MBkM4Jon5U= -----END CERTIFICATE-----Generated at Sun Jan 25 18:26:55 2026 by rpki-client