This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qOvq1LE6eRhQyveRTqMND1A2w-c.cer File: qOvq1LE6eRhQyveRTqMND1A2w-c.cer (raw, json) Hash identifier: fypLp+ysEPTzD87oownlXrwvG9V9hinasCZieQbXjNI= Subject key identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:26:33 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 139138 IP: 103.150.164.0/23 IP: 2406:b640::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58982 (0xe666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:26:33 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=A8EBEAD4B13A791850CAF7914EA30D0F5036C3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:8f:f7:29:4d:78:03:91:74:ca:3a:b2:3e: da:59:ff:8a:c4:7e:29:4f:32:73:0a:51:80:7b:51: 75:e5:12:9e:53:4a:73:c3:e3:b6:c5:cc:40:62:50: 26:2d:ac:84:7b:95:32:c8:91:8b:9c:fe:dc:3b:3f: 7c:53:48:51:46:ea:c8:3b:bb:d8:a3:f4:d4:88:51: d7:6b:da:ab:ed:d7:58:55:83:dc:f9:b5:5f:41:03: 1b:46:b8:38:8a:0e:f3:1d:ba:02:4c:1c:32:95:2d: 61:c1:af:a6:91:11:a9:db:e6:ae:3e:57:c7:fe:ed: 26:91:19:7d:c4:0d:74:e3:d0:64:0b:7e:5e:c1:a6: df:80:1c:b2:3a:80:f5:30:09:d7:a7:28:26:32:41: 6b:6b:f3:ba:8b:64:e6:d2:4f:24:f7:36:fa:d5:75: ff:38:fd:97:b3:e8:54:52:53:6f:24:54:5d:ba:e5: ad:91:92:6e:36:ce:78:b5:57:39:ab:83:f7:11:11: 10:75:eb:cc:65:df:d0:7e:b8:72:c3:c1:88:2c:49: 6f:f0:f2:65:17:c9:f5:8b:ef:f2:32:c1:fb:ca:e4: 3b:6b:cc:34:ea:01:dc:d1:89:37:e3:11:c8:ad:4e: 19:f7:f8:d4:79:c0:1b:76:72:94:7a:71:a4:14:f6: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EB:EA:D4:B1:3A:79:18:50:CA:F7:91:4E:A3:0D:0F:50:36:C3:E7 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2972/qOvq1LE6eRhQyveRTqMND1A2w-c.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139138 sbgp-ipAddrBlock: critical IPv4: 103.150.164.0/23 IPv6: 2406:b640::/32 Signature Algorithm: sha256WithRSAEncryption 30:37:d3:4b:24:ea:95:97:10:d2:30:89:8d:de:07:21:ef:02: 1f:ee:46:94:9b:a8:18:ea:57:22:be:8d:cd:7b:5b:ba:09:47: 8e:15:da:c5:03:ee:e0:92:f3:70:88:62:0f:77:17:fa:ac:fd: 1b:16:30:85:17:45:0b:4a:fa:1e:7f:c7:70:5a:07:dc:95:9e: f7:d0:ec:10:52:4d:e3:d0:ff:b6:4e:16:11:09:66:d3:8b:9c: 88:2b:a7:4e:31:b6:7f:6f:f6:49:04:7c:fc:24:2d:ba:a6:39: 67:ac:3e:a2:f9:90:bb:4a:1b:4c:81:53:25:c1:f6:7c:bd:d7: b1:48:44:0a:2f:b2:8b:82:b2:10:26:c9:93:04:9b:53:31:67: ff:be:88:5a:18:43:19:2a:6f:71:01:06:49:c9:10:8c:47:ee: 74:15:74:cc:7b:e2:ef:f4:a2:ed:99:db:6a:93:2e:9a:a8:3f: 30:3b:e2:78:6a:5c:5d:03:ec:8b:f8:22:78:6e:53:31:0f:13: 5f:6b:f4:b6:53:50:8a:f2:00:14:8a:9e:09:64:7a:d9:5f:32: 19:2a:34:39:d9:9a:de:38:04:4c:ae:5c:2e:a4:c6:15:65:ae: 0d:c0:cc:92:7e:b9:f2:9d:c7:ac:0f:7b:c8:c9:df:73:38:14: cf:23:db:90 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOZmMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI2MzNaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEE4RUJFQUQ0QjEzQTc5MTg1MENBRjc5MTRFQTMwRDBGNTAzNkMz RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLo/3KU14A5F0yjqy PtpZ/4rEfilPMnMKUYB7UXXlEp5TSnPD47bFzEBiUCYtrIR7lTLIkYuc/tw7P3xT SFFG6sg7u9ij9NSIUddr2qvt11hVg9z5tV9BAxtGuDiKDvMdugJMHDKVLWHBr6aR Eanb5q4+V8f+7SaRGX3EDXTj0GQLfl7Bpt+AHLI6gPUwCdenKCYyQWtr87qLZObS TyT3NvrVdf84/Zez6FRSU28kVF265a2Rkm42zni1Vzmrg/cRERB168xl39B+uHLD wYgsSW/w8mUXyfWL7/IywfvK5DtrzDTqAdzRiTfjEcitThn3+NR5wBt2cpR6caQU 9oSpAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUqOvq1LE6eRhQyveRTqMND1A2w+cw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5 NzIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjk3Mi9xT3ZxMUxFNmVSaFF5dmVSVHFNTkQxQTJ3LWMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfgjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWeWpDANBAIAAjAHAwUAJAa2QDANBgkqhkiG9w0BAQsFAAOCAQEA MDfTSyTqlZcQ0jCJjd4HIe8CH+5GlJuoGOpXIr6NzXtbuglHjhXaxQPu4JLzcIhi D3cX+qz9GxYwhRdFC0r6Hn/HcFoH3JWe99DsEFJN49D/tk4WEQlm04uciCunTjG2 f2/2SQR8/CQtuqY5Z6w+ovmQu0obTIFTJcH2fL3XsUhECi+yi4KyECbJkwSbUzFn /76IWhhDGSpvcQEGSckQjEfudBV0zHvi7/Si7ZnbapMumqg/MDvieGpcXQPsi/gi eG5TMQ8TX2v0tlNQivIAFIqeCWR62V8yGSo0Odma3jgETK5cLqTGFWWuDcDMkn65 8p3HrA97yMnfczgUzyPbkA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:44:04 2026 by rpki-client