This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer File: s7pq7zuPouXZteQ0OOACDUJqHso.cer (raw, json) Hash identifier: UGj42zIAOari+ez+RJ7RF3TagbsHZLw6pywgdQRZxk4= Subject key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:31:25 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 45096 AS: 45108 IP: 39.96.0.0 -- 39.108.255.255 IP: 42.96.128.0/17 IP: 42.120.0.0/15 IP: 42.156.128.0/17 IP: 59.110.0.0/16 IP: 60.205.0.0/16 IP: 101.37.0.0/16 IP: 101.132.0.0/15 IP: 101.200.0.0/15 IP: 103.15.96.0/22 IP: 106.14.0.0/15 IP: 110.75.160.0/19 IP: 110.76.32.0/20 IP: 112.74.0.0/16 IP: 112.124.0.0/14 IP: 114.55.0.0/16 IP: 114.215.0.0/16 IP: 115.28.0.0/15 IP: 116.62.0.0/16 IP: 118.31.0.0/16 IP: 118.178.0.0/16 IP: 118.190.0.0/16 IP: 119.23.0.0/16 IP: 120.24.0.0/14 IP: 120.55.0.0/16 IP: 120.76.0.0/14 IP: 121.40.0.0/14 IP: 121.89.0.0/16 IP: 121.196.0.0/14 IP: 123.56.0.0/15 IP: 157.119.192.0/22 IP: 182.92.0.0/16 IP: 203.107.0.0/17 IP: 218.244.128.0/19 IP: 223.4.0.0/14 IP: 2400:3200::/32 IP: 2405:e000::/32 IP: 2406:2880::/32 IP: 2407:bc00::/32 IP: 2408:4000::/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59256 (0xe778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:31:25 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:dc:2f:fd:24:a9:3f:fc:dc:e6:f4:90:98: e1:4b:48:a3:da:b1:bb:32:0b:79:56:49:b6:8b:c2: f4:e7:42:a9:17:18:72:f3:8b:cf:bd:1e:87:bc:9e: 18:5f:3b:e5:2f:09:6c:53:6a:64:5a:f6:68:7a:74: 06:c1:f4:64:6f:f3:99:95:0f:b8:97:1a:e7:e3:b1: 36:63:1a:9b:96:8c:26:e2:cc:30:34:e9:13:8f:00: dd:db:9c:63:c7:da:44:32:ec:c0:d6:cd:17:81:06: f4:10:79:18:5f:4b:c6:cc:e2:ca:ad:01:c5:2a:48: ae:81:7a:0c:b9:3c:ca:22:5a:cf:32:9e:00:2c:d0: 20:e9:65:4b:a6:1e:8a:61:b2:4a:d7:b2:f6:36:26: e6:df:6b:c8:70:68:6c:4d:67:5c:34:33:b0:ca:73: f9:3e:e0:c2:a4:7b:1b:c8:9d:ea:3c:eb:67:74:1a: 86:47:00:18:06:34:eb:c5:40:ac:7a:79:12:85:ce: 61:9a:aa:8b:42:66:00:66:4b:8d:eb:25:7a:bc:3a: a3:da:2d:83:16:17:d0:07:e1:78:53:fd:0f:b3:d2: 69:91:7a:f4:a2:d7:ed:48:5f:d9:28:3d:42:7b:d3: ca:58:e9:06:69:9e:ee:e0:6f:31:6f:26:90:56:83: 0f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45096 45108 sbgp-ipAddrBlock: critical IPv4: 39.96.0.0-39.108.255.255 42.96.128.0/17 42.120.0.0/15 42.156.128.0/17 59.110.0.0/16 60.205.0.0/16 101.37.0.0/16 101.132.0.0/15 101.200.0.0/15 103.15.96.0/22 106.14.0.0/15 110.75.160.0/19 110.76.32.0/20 112.74.0.0/16 112.124.0.0/14 114.55.0.0/16 114.215.0.0/16 115.28.0.0/15 116.62.0.0/16 118.31.0.0/16 118.178.0.0/16 118.190.0.0/16 119.23.0.0/16 120.24.0.0/14 120.55.0.0/16 120.76.0.0/14 121.40.0.0/14 121.89.0.0/16 121.196.0.0/14 123.56.0.0/15 157.119.192.0/22 182.92.0.0/16 203.107.0.0/17 218.244.128.0/19 223.4.0.0/14 IPv6: 2400:3200::/32 2405:e000::/32 2406:2880::/32 2407:bc00::/32 2408:4000::/22 Signature Algorithm: sha256WithRSAEncryption 05:6c:c7:44:25:99:db:14:06:5f:9f:ea:01:9a:b0:20:5c:fe: f4:28:92:0c:cc:71:c1:0b:2d:4a:18:08:a5:00:06:92:97:64: 8e:63:71:af:a6:8b:03:72:5d:0f:34:6d:de:08:25:4f:08:ec: a3:7f:a5:f8:58:c2:20:71:43:6d:48:db:05:f8:da:02:f0:0b: ca:48:47:87:2e:fc:ea:e6:31:a4:f4:e1:d2:d7:48:4a:27:1b: 14:c2:a1:31:cf:d1:f8:eb:c4:52:59:8d:96:d9:26:21:60:f2: e7:0a:88:f9:65:af:49:4a:7b:23:f8:a2:66:8c:d5:1d:56:84: 19:8a:fe:4d:01:88:35:b4:65:6e:f7:dc:ab:6b:d9:11:b9:75: 81:3b:d3:6c:86:42:28:e8:89:31:f2:5c:20:3a:c5:40:8b:d7: 1d:12:c7:97:2c:55:1a:d7:0c:46:e3:7a:a4:b2:77:04:62:94: f4:38:b6:51:62:da:e6:f1:9a:92:ce:87:0b:fd:a7:42:f6:c4: 9d:58:f8:fe:6f:b7:f6:28:53:3e:2e:d8:08:63:49:d4:8b:d1: 1c:ae:47:c2:85:45:db:35:dd:00:8e:1b:4d:aa:d3:9c:f0:b7: aa:f7:34:b8:b3:3d:b4:45:03:50:30:bb:5f:46:c8:26:95:a0: a4:d9:e4:dd -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIDAOd4MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODMxMjVaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEIzQkE2QUVGM0I4RkEyRTVEOUI1RTQzNDM4RTAwMjBENDI2QTFF Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+dwv/SSpP/zc5vSQ mOFLSKPasbsyC3lWSbaLwvTnQqkXGHLzi8+9Hoe8nhhfO+UvCWxTamRa9mh6dAbB 9GRv85mVD7iXGufjsTZjGpuWjCbizDA06ROPAN3bnGPH2kQy7MDWzReBBvQQeRhf S8bM4sqtAcUqSK6Begy5PMoiWs8yngAs0CDpZUumHophskrXsvY2Jubfa8hwaGxN Z1w0M7DKc/k+4MKkexvIneo862d0GoZHABgGNOvFQKx6eRKFzmGaqotCZgBmS43r JXq8OqPaLYMWF9AH4XhT/Q+z0mmRevSi1+1IX9koPUJ708pY6QZpnu7gbzFvJpBW gw/7AgMBAAGjggNcMIIDWDAdBgNVHQ4EFgQUs7pq7zuPouXZteQ0OOACDUJqHsow HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM1 Ny8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNTcvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAsCgCAwCwNDCCAQUGCCsGAQUFBwEHAQH/ BIH1MIHyMIHFBAIAATCBvjAKAwMFJ2ADAwAnbAMEBypggAMDASp4AwQHKpyAAwMA O24DAwA8zQMDAGUlAwMBZYQDAwFlyAMEAmcPYAMDAWoOAwQFbkugAwQEbkwgAwMA cEoDAwJwfAMDAHI3AwMActcDAwFzHAMDAHQ+AwMAdh8DAwB2sgMDAHa+AwMAdxcD AwJ4GAMDAHg3AwMCeEwDAwJ5KAMDAHlZAwMCecQDAwF7OAMEAp13wAMDALZcAwQH y2sAAwQF2vSAAwMC3wQwKAQCAAIwIgMFACQAMgADBQAkBeAAAwUAJAYogAMFACQH vAADBAIkCEAwDQYJKoZIhvcNAQELBQADggEBAAVsx0QlmdsUBl+f6gGasCBc/vQo kgzMccELLUoYCKUABpKXZI5jca+miwNyXQ80bd4IJU8I7KN/pfhYwiBxQ21I2wX4 2gLwC8pIR4cu/OrmMaT04dLXSEonGxTCoTHP0fjrxFJZjZbZJiFg8ucKiPllr0lK eyP4omaM1R1WhBmK/k0BiDW0ZW733Ktr2RG5dYE702yGQijoiTHyXCA6xUCL1x0S x5csVRrXDEbjeqSydwRilPQ4tlFi2ubxmpLOhwv9p0L2xJ1Y+P5vt/YoUz4u2Ahj SdSL0RyuR8KFRds13QCOG02q05zwt6r3NLizPbRFA1Awu19GyCaVoKTZ5N0= -----END CERTIFICATE-----Generated at Sun Jan 25 06:04:54 2026 by rpki-client