This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer (raw, json) Hash identifier: Akdm0mIiFa5Wea6ZDEHyUcidXD2MICq25b9eaNaL5LA= Subject key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E46F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 11 Nov 2025 08:30:34 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 45110 IP: 43.254.228.0 -- 43.254.243.255 IP: 43.254.248.0/22 IP: 43.255.0.0/22 IP: 45.125.76.0/22 IP: 45.125.84.0 -- 45.125.103.255 IP: 103.23.160.0/22 IP: 103.103.188.0/22 IP: 103.193.212.0 -- 103.193.239.255 IP: 103.200.220.0 -- 103.201.3.255 IP: 103.201.192.0 -- 103.201.219.255 IP: 103.229.216.0/21 IP: 103.229.228.0/22 IP: 103.229.236.0 -- 103.229.243.255 IP: 111.118.200.0/21 IP: 113.21.232.0/21 IP: 114.31.64.0/21 IP: 114.141.80.0/21 IP: 116.66.120.0/24 IP: 116.66.123.0/24 IP: 119.18.224.0/24 IP: 119.18.226.0/24 IP: 119.18.234.0/24 IP: 119.18.236.0/23 IP: 119.18.239.0/24 IP: 119.161.120.0/21 IP: 120.136.16.0/21 IP: 202.47.104.0/21 IP: 202.57.192.0/20 IP: 202.65.96.0/22 IP: 203.114.244.0/22 IP: 2401:f7c0::/32 IP: 2403:9b00::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 06:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58479 (0xe46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Nov 11 08:30:34 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:2c:cf:1d:e3:6b:44:6f:78:c6:23:43:04: ad:eb:e0:99:00:0b:61:37:4e:83:2e:04:8a:e2:ea: b5:47:fb:a8:1c:9d:a3:aa:a5:a7:3d:93:5a:a5:01: ca:62:f2:94:2b:f9:ae:ee:4b:23:62:06:d3:54:b6: 6e:3b:46:3c:4f:98:88:d8:31:d6:a8:35:d2:5e:2e: 8f:42:43:9f:8f:fb:67:11:df:32:38:26:ac:28:ca: 55:e8:05:01:55:e7:a8:8d:b2:12:08:47:72:91:34: a7:cf:91:1c:9f:60:1c:c6:d9:0a:28:6a:74:7d:9b: 81:b4:29:b0:4a:cc:b9:45:02:49:42:4b:11:68:4e: db:39:2c:57:a4:c1:bb:86:ff:b5:93:d0:56:7e:23: ba:b9:c8:14:e5:6e:1e:c7:a1:04:26:93:e7:eb:5f: 54:2c:bc:ae:c7:54:81:9a:0d:20:21:55:d1:2f:79: 39:7e:27:96:a8:73:c6:6a:d6:68:42:4c:36:d2:81: 41:21:48:a8:5f:dd:bc:fe:be:14:95:a8:33:a5:a4: 2f:1c:6a:43:b1:9f:54:75:d4:b0:d9:f8:d8:86:bb: 4c:56:5c:92:19:76:69:e6:48:96:1a:c9:8f:84:9d: 16:8b:6a:a1:72:d1:0b:f6:c1:f9:79:1c:2a:a7:f3: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45110 sbgp-ipAddrBlock: critical IPv4: 43.254.228.0-43.254.243.255 43.254.248.0/22 43.255.0.0/22 45.125.76.0/22 45.125.84.0-45.125.103.255 103.23.160.0/22 103.103.188.0/22 103.193.212.0-103.193.239.255 103.200.220.0-103.201.3.255 103.201.192.0-103.201.219.255 103.229.216.0/21 103.229.228.0/22 103.229.236.0-103.229.243.255 111.118.200.0/21 113.21.232.0/21 114.31.64.0/21 114.141.80.0/21 116.66.120.0/24 116.66.123.0/24 119.18.224.0/24 119.18.226.0/24 119.18.234.0/24 119.18.236.0/23 119.18.239.0/24 119.161.120.0/21 120.136.16.0/21 202.47.104.0/21 202.57.192.0/20 202.65.96.0/22 203.114.244.0/22 IPv6: 2401:f7c0::/32 2403:9b00::/32 Signature Algorithm: sha256WithRSAEncryption 2e:4b:11:7b:fe:1d:4e:6c:62:c0:d0:2c:59:7f:91:c2:36:f7: 33:e7:df:fb:2c:16:7a:54:0f:de:34:ee:6a:bd:e1:b9:c1:af: 73:ad:c5:9b:47:bd:18:f0:a1:34:93:d4:28:71:c4:36:ff:b9: 21:6b:8b:78:24:fd:b1:48:3d:68:30:ec:af:38:4e:54:df:85: fc:84:c5:9c:4a:81:75:90:eb:c3:b2:73:4d:ba:b8:ce:de:d9: 60:89:5b:e1:55:cb:13:b7:0f:a4:8d:c9:87:76:7c:83:23:16: 90:e2:32:81:f8:9c:84:99:ea:82:33:9a:ed:7f:2a:c1:e8:d0: 82:1c:f9:40:be:c9:33:c3:de:15:94:31:67:37:c8:18:bd:d9: 38:19:09:91:fe:48:70:d3:cd:54:dd:45:93:70:07:15:c2:90: 51:10:b8:5a:7b:ab:f6:d9:09:9d:ba:43:78:3d:f7:01:87:2b: b3:e4:d8:c2:07:2d:4a:f5:f6:06:ee:bb:b0:9e:04:79:1b:79: ae:80:d6:5b:0f:40:28:95:a9:78:85:0c:36:de:79:6a:fe:4c: f7:9d:13:26:c8:6a:bb:12:fd:48:5d:25:97:9d:39:d2:99:89: ac:b3:e3:10:50:2f:4d:e0:bc:4a:5d:d5:06:cd:8e:8c:0b:58: 4f:34:a3:ea -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIDAORvMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTExMTEwODMwMzRaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDU4NTIwNkM4NzQyMEJFNDJDN0I5MDQyREUzRTVGRDUxNTk1RkYx NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPSzPHeNrRG94xiND BK3r4JkAC2E3ToMuBIri6rVH+6gcnaOqpac9k1qlAcpi8pQr+a7uSyNiBtNUtm47 RjxPmIjYMdaoNdJeLo9CQ5+P+2cR3zI4JqwoylXoBQFV56iNshIIR3KRNKfPkRyf YBzG2QooanR9m4G0KbBKzLlFAklCSxFoTts5LFekwbuG/7WT0FZ+I7q5yBTlbh7H oQQmk+frX1QsvK7HVIGaDSAhVdEveTl+J5aoc8Zq1mhCTDbSgUEhSKhf3bz+vhSV qDOlpC8cakOxn1R11LDZ+NiGu0xWXJIZdmnmSJYayY+EnRaLaqFy0Qv2wfl5HCqn 84YVAgMBAAGjggNrMIIDZzAdBgNVHQ4EFgQUWFIGyHQgvkLHuQQt4+X9UVlf8Usw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM2 MS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNjEvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAsDYwggEZBggrBgEFBQcBBwEB/wSCAQgw ggEEMIHrBAIAATCB5DAMAwQCK/7kAwQCK/7wAwQCK/74AwQCK/8AAwQCLX1MMAwD BAItfVQDBAMtfWADBAJnF6ADBAJnZ7wwDAMEAmfB1AMEBGfB4DAMAwQCZ8jcAwQC Z8kAMAwDBAZnycADBAJnydgDBANn5dgDBAJn5eQwDAMEAmfl7AMEAmfl8AMEA292 yAMEA3EV6AMEA3IfQAMEA3KNUAMEAHRCeAMEAHRCewMEAHcS4AMEAHcS4gMEAHcS 6gMEAXcS7AMEAHcS7wMEA3eheAMEA3iIEAMEA8ovaAMEBMo5wAMEAspBYAMEAsty 9DAUBAIAAjAOAwUAJAH3wAMFACQDmwAwDQYJKoZIhvcNAQELBQADggEBAC5LEXv+ HU5sYsDQLFl/kcI29zPn3/ssFnpUD9407mq94bnBr3OtxZtHvRjwoTST1ChxxDb/ uSFri3gk/bFIPWgw7K84TlTfhfyExZxKgXWQ68Oyc026uM7e2WCJW+FVyxO3D6SN yYd2fIMjFpDiMoH4nISZ6oIzmu1/KsHo0IIc+UC+yTPD3hWUMWc3yBi92TgZCZH+ SHDTzVTdRZNwBxXCkFEQuFp7q/bZCZ26Q3g99wGHK7Pk2MIHLUr19gbuu7CeBHkb ea6A1lsPQCiVqXiFDDbeeWr+TPedEybIarsS/UhdJZedOdKZiayz4xBQL03gvEpd 1QbNjowLWE80o+o= -----END CERTIFICATE-----Generated at Sun Dec 7 02:56:06 2025 by rpki-client