This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer (raw, json) Hash identifier: lFoawIl0eoEO7zyvfc1ysMUEwSGnErfjL7DDBZpKmh8= Subject key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 430D83C2EACBD1B717038F02FA477F3B233DEC31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:51:40 +0000 Certificate not after: Mon 18 Jan 2027 10:56:40 +0000 Subordinate resources: AS: 139119 IP: 103.157.234.0/23 IP: 2406:a7c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0d:83:c2:ea:cb:d1:b7:17:03:8f:02:fa:47:7f:3b:23:3d:ec:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:51:40 2026 GMT Not After : Jan 18 10:56:40 2027 GMT Subject: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:a7:58:7f:35:fa:57:e8:17:da:1f:2e:69: cd:88:5d:be:d3:91:5a:70:06:16:68:3c:f4:40:88: 0b:49:d0:00:48:b9:5f:cd:ab:4d:29:cc:41:45:7b: 8f:97:9c:70:ca:61:0c:de:4d:2a:ff:f9:45:65:3d: ef:27:96:cf:f9:56:b8:88:30:53:d8:9f:c1:17:a3: bb:de:4f:41:ed:ac:ee:7f:80:55:14:cb:c5:09:d5: 57:c4:ea:18:99:31:04:95:f2:3b:de:8e:02:f6:26: 38:d8:fe:f4:a0:d2:5e:d3:55:e9:ec:6c:04:31:3f: e4:1c:16:4c:f9:1c:05:44:b8:5f:9f:39:fe:60:ac: ff:c9:e5:d0:d9:c9:84:96:62:77:48:5e:c1:e0:0d: 04:80:96:53:06:06:4f:41:f7:bb:1b:68:4e:76:32: 84:c4:27:a4:fb:7f:c4:ba:fd:14:93:ea:a4:5e:52: 55:1f:32:ee:3f:2d:a3:20:a7:ce:40:e8:57:ba:6c: 2b:eb:14:f7:db:6b:08:02:72:c4:57:32:ba:b0:7c: 83:10:a1:66:fc:b6:27:9c:79:04:7f:10:ba:0e:c7: 4b:12:51:b6:26:8f:de:e0:ee:83:4d:01:11:cf:8d: 5d:d2:4f:9f:5c:af:53:a3:fd:25:54:ea:81:20:6e: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.234.0/23 IPv6: 2406:a7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139119 Signature Algorithm: sha256WithRSAEncryption 0b:ba:0e:bb:6a:4d:0e:e4:1a:20:b1:33:35:68:c1:3e:a5:63: a4:1b:9b:ef:e6:7b:a4:f6:03:da:62:11:4a:a3:3e:d3:84:67: 3c:52:93:48:05:eb:2c:0d:c5:49:dd:70:b2:1f:db:53:b0:dd: 8f:66:0e:e4:3d:49:18:c7:f2:22:28:81:b1:b1:df:df:f0:0d: 7a:c2:1d:c8:ab:cc:a8:7f:c0:b8:40:0b:7a:ac:00:88:40:b1: d3:f5:95:7a:37:3d:1a:18:07:20:66:53:ca:6a:e7:bb:f8:9c: c4:2e:81:2f:2d:c1:7a:9c:14:7a:bd:44:78:d1:5e:58:95:76: 3c:4d:89:d6:43:ed:b6:8a:18:62:2a:29:ea:5e:b0:21:82:70: 62:20:08:60:e3:dd:a8:38:da:2c:e2:e5:54:a9:de:24:96:ed: 2c:74:af:4a:24:c1:2e:4c:72:5c:2e:1d:ec:17:e9:a8:7d:30: a8:47:52:52:f0:25:d1:28:ac:ff:9c:38:13:26:d5:10:b0:c0: a6:6f:cc:4e:7d:0e:33:7a:fc:40:1a:a4:d5:ae:8d:46:b5:cd: b5:13:93:0b:82:9b:35:88:2c:5d:d2:f2:92:c9:9b:10:a9:3f: 66:b3:c9:b4:51:6f:13:fd:51:a0:10:af:fc:5c:94:4f:4c:f6: 06:03:bc:11 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUQw2DwurL0bcXA48C+kd/OyM97DEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTE0MFoX DTI3MDExODEwNTY0MFowMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZF MkQwQUE4RDRFMTI5NjBFQjdDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANo6p1h/NfpX6BfaHy5pzYhdvtORWnAGFmg89ECIC0nQAEi5X82rTSnMQUV7 j5eccMphDN5NKv/5RWU97yeWz/lWuIgwU9ifwReju95PQe2s7n+AVRTLxQnVV8Tq GJkxBJXyO96OAvYmONj+9KDSXtNV6exsBDE/5BwWTPkcBUS4X585/mCs/8nl0NnJ hJZid0heweANBICWUwYGT0H3uxtoTnYyhMQnpPt/xLr9FJPqpF5SVR8y7j8toyCn zkDoV7psK+sU99trCAJyxFcyurB8gxChZvy2J5x5BH8Qug7HSxJRtiaP3uDug00B Ec+NXdJPn1yvU6P9JVTqgSBuVlsCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA6v635zRujyeP/i0KqNThKWDrfHMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTM1NDc1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MzU0NzUz LzAvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnneowDQQCAAIwBwMFACQGp8AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAh9vMA0GCSqGSIb3DQEBCwUAA4IBAQALug67ak0O5Bog sTM1aME+pWOkG5vv5nuk9gPaYhFKoz7ThGc8UpNIBessDcVJ3XCyH9tTsN2PZg7k PUkYx/IiKIGxsd/f8A16wh3Iq8yof8C4QAt6rACIQLHT9ZV6Nz0aGAcgZlPKaue7 +JzELoEvLcF6nBR6vUR40V5YlXY8TYnWQ+22ihhiKinqXrAhgnBiIAhg492oONos 4uVUqd4klu0sdK9KJMEuTHJcLh3sF+mofTCoR1JS8CXRKKz/nDgTJtUQsMCmb8xO fQ4zevxAGqTVro1Gtc21E5MLgps1iCxd0vKSyZsQqT9ms8m0UW8T/VGgEK/8XJRP TPYGA7wR -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:53 2026 by rpki-client