This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/n_rAX7q4ai-Wvk0Rbe3Vacn9XEk.cer File: n_rAX7q4ai-Wvk0Rbe3Vacn9XEk.cer (raw, json) Hash identifier: /tDX3ADob3ZUgQ9kxqn45bzdZeshC1mIS0JfRsaLOkU= Subject key identifier: 9F:FA:C0:5F:BA:B8:6A:2F:96:BE:4D:11:6D:ED:D5:69:C9:FD:5C:49 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/n_rAX7q4ai-Wvk0Rbe3Vacn9XEk.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:30:39 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 38373 IP: 119.80.0.0/19 IP: 119.80.48.0 -- 119.80.191.255 IP: 119.80.204.0 -- 119.80.239.255 IP: 119.80.244.0 -- 119.80.255.255 IP: 2400:5580::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59202 (0xe742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:30:39 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=9FFAC05FBAB86A2F96BE4D116DEDD569C9FD5C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:ad:27:30:a1:de:2a:ed:69:7c:73:97:fd: 91:33:0f:a7:cd:2d:ff:7e:3f:6b:65:ac:93:15:e2: ce:5a:74:eb:90:e8:94:49:c3:14:db:76:da:ed:ba: 82:db:1a:bc:47:f0:ee:82:42:d4:55:66:cd:af:44: b3:f4:e4:dd:f8:18:40:17:fa:fd:53:23:b6:d4:94: c4:53:f9:6a:af:a7:e5:3b:93:1b:c9:56:02:50:19: 91:6f:29:a6:6e:9c:7f:f9:31:84:ff:95:22:f7:41: 43:3b:16:af:ad:2d:ef:af:31:65:c5:af:fa:af:32: 41:d1:44:cd:34:f3:46:64:e2:48:1b:b0:cf:4e:ef: 53:58:61:7a:fa:b0:53:31:41:21:0c:7f:c1:d5:5e: 1c:cf:82:00:84:e9:7d:0f:a2:bc:1e:98:2d:88:11: d0:b3:79:3e:71:e1:bb:fc:4a:df:70:fc:74:db:ae: b3:04:b9:c7:b7:7a:2a:60:64:b7:61:25:f4:f9:54: 2a:dc:9b:a8:76:3f:6f:ef:01:4a:31:8a:02:3c:91: 4c:82:46:2f:3b:76:9c:82:fe:4a:e6:58:0b:1c:ee: 00:bd:cb:44:06:7d:66:2d:bd:8a:0d:af:22:7e:ce: c1:4e:9b:9b:d2:70:6d:c8:e3:73:d1:e6:8d:58:0e: 8a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FA:C0:5F:BA:B8:6A:2F:96:BE:4D:11:6D:ED:D5:69:C9:FD:5C:49 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/322/n_rAX7q4ai-Wvk0Rbe3Vacn9XEk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38373 sbgp-ipAddrBlock: critical IPv4: 119.80.0.0/19 119.80.48.0-119.80.191.255 119.80.204.0-119.80.239.255 119.80.244.0-119.80.255.255 IPv6: 2400:5580::/32 Signature Algorithm: sha256WithRSAEncryption 96:19:08:90:88:47:2d:10:8f:95:36:1e:df:b3:87:01:a3:8a: 91:30:35:e0:5e:df:74:c5:7a:a6:7a:51:ac:85:51:ed:f0:8d: ef:b2:f1:54:a2:ac:a3:85:1a:a7:07:eb:54:7c:41:6e:5b:d9: d5:d5:3d:a4:74:37:8f:2a:73:ea:4e:77:24:42:95:2a:82:ba: da:6c:30:9e:c2:2b:d5:56:bf:ca:a1:20:8a:c9:9c:d9:75:03: 55:5b:80:70:aa:10:09:8b:72:f8:28:a3:7d:e9:03:0b:06:6e: 24:bd:40:dd:dd:80:5c:6a:0f:6a:f0:19:27:6f:83:f6:2a:90: 4a:cc:b2:82:02:30:f0:7a:93:3e:7c:0c:ac:7f:7d:98:70:21: 28:f5:b0:0f:fb:b9:da:f0:92:f2:65:e9:71:a0:a9:0f:9c:14: da:a7:34:33:d3:6f:93:13:70:5c:d1:9e:e3:c7:47:15:d2:8a: 2f:94:e6:03:2b:b1:85:72:e0:a7:04:4f:62:aa:c1:2c:88:b7: 84:64:5c:70:52:03:25:36:53:3e:ce:0f:ea:7e:63:96:2b:03: 84:d1:56:7c:37:d0:b1:08:b6:18:05:01:fb:28:4c:a5:52:b5: de:da:7c:dc:22:8c:bc:d1:25:92:4a:d0:bc:25:7f:e3:25:26: a5:bf:f3:18 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgIDAOdCMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMwMzlaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKDlGRkFDMDVGQkFCODZBMkY5NkJFNEQxMTZERURENTY5QzlGRDVD NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/60nMKHeKu1pfHOX /ZEzD6fNLf9+P2tlrJMV4s5adOuQ6JRJwxTbdtrtuoLbGrxH8O6CQtRVZs2vRLP0 5N34GEAX+v1TI7bUlMRT+Wqvp+U7kxvJVgJQGZFvKaZunH/5MYT/lSL3QUM7Fq+t Le+vMWXFr/qvMkHRRM0080Zk4kgbsM9O71NYYXr6sFMxQSEMf8HVXhzPggCE6X0P orwemC2IEdCzeT5x4bv8St9w/HTbrrMEuce3eipgZLdhJfT5VCrcm6h2P2/vAUox igI8kUyCRi87dpyC/krmWAsc7gC9y0QGfWYtvYoNryJ+zsFOm5vScG3I43PR5o1Y Dor3AgMBAAGjggKnMIICozAdBgNVHQ4EFgQUn/rAX7q4ai+Wvk0Rbe3Vacn9XEkw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy Mi8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjIvbl9yQVg3cTRhaS1XdmswUmJlM1ZhY245WEVrLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAleUwVwYIKwYBBQUHAQcBAf8ESDBGMDUE AgABMC8DBAV3UAAwDAMEBHdQMAMEBndQgDAMAwQCd1DMAwQEd1DgMAsDBAJ3UPQD AwB3UDANBAIAAjAHAwUAJABVgDANBgkqhkiG9w0BAQsFAAOCAQEAlhkIkIhHLRCP lTYe37OHAaOKkTA14F7fdMV6pnpRrIVR7fCN77LxVKKso4UapwfrVHxBblvZ1dU9 pHQ3jypz6k53JEKVKoK62mwwnsIr1Va/yqEgismc2XUDVVuAcKoQCYty+CijfekD CwZuJL1A3d2AXGoPavAZJ2+D9iqQSsyyggIw8HqTPnwMrH99mHAhKPWwD/u52vCS 8mXpcaCpD5wU2qc0M9NvkxNwXNGe48dHFdKKL5TmAyuxhXLgpwRPYqrBLIi3hGRc cFIDJTZTPs4P6n5jlisDhNFWfDfQsQi2GAUB+yhMpVK13tp83CKMvNElkkrQvCV/ 4yUmpb/zGA== -----END CERTIFICATE-----Generated at Sun Jan 25 04:26:38 2026 by rpki-client