This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer (raw, json) Hash identifier: hBMV3AnNPH5Xh8K0t435615871vmvZwPM9bxK+2CkYc= Subject key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5A93ED377966227D399661F9A1210FFC7E97FA0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:15:02 +0000 Certificate not after: Mon 18 Jan 2027 11:20:02 +0000 Subordinate resources: IP: 103.150.130.0/23 IP: 2406:140::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:93:ed:37:79:66:22:7d:39:96:61:f9:a1:21:0f:fc:7e:97:fa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:15:02 2026 GMT Not After : Jan 18 11:20:02 2027 GMT Subject: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:b1:aa:a7:99:03:1d:5b:65:07:ad:18:08: e5:22:86:a3:fd:0b:70:cc:55:ce:6b:5e:13:3d:d5: ae:e4:20:fd:c1:33:e6:f3:b5:ea:c5:20:54:a6:2a: fd:75:f4:c6:b4:d7:c9:d9:7e:6a:53:74:f1:e5:7a: 81:50:fb:2b:80:f7:12:68:07:07:90:29:a5:df:b7: ff:15:64:cd:6d:7d:24:b8:bf:04:5a:b5:55:91:55: d5:ea:b6:f3:73:55:eb:51:84:ae:02:bb:d0:26:12: bb:30:fd:25:c2:d7:94:ef:ce:57:7a:7e:1a:18:d5: 2e:36:e8:f7:e7:3f:8b:b4:07:08:d5:ec:14:4d:ca: ef:39:02:3c:51:d6:b4:06:41:09:8f:ab:3e:1d:d2: 77:f7:1e:a8:57:b4:d3:82:a6:3b:0a:7b:80:7c:eb: c1:bd:1f:7f:c9:84:6f:6c:a2:42:63:c5:0c:48:29: ea:e7:ec:b8:c9:33:91:7e:03:f6:c3:d3:d8:96:59: c0:78:5c:b2:9c:8c:35:b3:34:7a:6c:14:12:4c:bd: 10:15:6e:09:0d:30:ef:83:7a:c8:6f:72:66:21:d1: 8f:26:3c:a5:a1:5f:24:fb:00:34:e3:90:f9:7c:40: c5:39:0a:da:18:a6:a2:70:fd:69:de:9a:e8:2b:7a: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.130.0/23 IPv6: 2406:140::/32 Signature Algorithm: sha256WithRSAEncryption 0f:06:0b:15:f6:9b:69:52:86:6d:52:c1:b2:7d:90:74:64:2f: b1:71:51:eb:9f:28:f7:fe:07:ea:ff:65:e2:c2:11:a0:33:18: fd:bf:76:24:8b:45:b2:07:bb:0c:ce:c9:0c:49:0d:7c:ca:5f: 45:59:32:2a:fb:bd:c5:b9:d4:ca:6e:a9:ea:02:f6:f7:68:16: a2:38:d8:85:a2:4a:52:12:12:6c:5d:62:77:42:ef:80:2f:ce: 26:86:45:f2:47:be:b2:73:df:ce:15:5d:ea:1b:5e:e9:c2:24: 7d:c5:f8:87:59:39:3f:85:e7:56:b8:e2:bd:cd:91:8a:cb:57: ae:3e:ec:00:a2:34:b8:d2:15:88:22:af:3d:7f:67:85:eb:ad: ac:0e:66:a4:5c:0b:de:1d:34:48:de:4a:ae:67:fd:ec:da:dd: e0:a7:cc:04:d2:7a:6d:a1:95:07:8f:7e:92:19:51:81:d9:65: 76:45:4a:e5:5a:6e:27:c5:b2:ea:83:3c:ca:e2:fb:35:e8:8f: f9:47:59:75:bc:f1:9c:b2:9c:d4:24:b2:e6:ce:27:ea:d3:4c: 4b:d2:c0:4f:18:a7:1d:c7:22:87:f4:5a:77:4a:c8:0b:ad:cb: db:a3:06:cf:b2:98:1a:ad:45:f8:be:4b:79:f9:bf:2b:da:06: 14:53:83:0c -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUWpPtN3lmIn05lmH5oSEP/H6X+gswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTUwMloX DTI3MDExODExMjAwMlowMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4 NUU3N0MyRDZEOEYwQTIyOUFFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANx/saqnmQMdW2UHrRgI5SKGo/0LcMxVzmteEz3VruQg/cEz5vO16sUgVKYq /XX0xrTXydl+alN08eV6gVD7K4D3EmgHB5Appd+3/xVkzW19JLi/BFq1VZFV1eq2 83NV61GErgK70CYSuzD9JcLXlO/OV3p+GhjVLjbo9+c/i7QHCNXsFE3K7zkCPFHW tAZBCY+rPh3Sd/ceqFe004KmOwp7gHzrwb0ff8mEb2yiQmPFDEgp6ufsuMkzkX4D 9sPT2JZZwHhcspyMNbM0emwUEky9EBVuCQ0w74N6yG9yZiHRjyY8paFfJPsANOOQ +XxAxTkK2himonD9ad6a6Ct6DmkCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEpaMNp0TqSkIG+F53wtbY8KIprlMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTQ2NTg1Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNDY1ODU3 LzAvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnloIwDQQCAAIwBwMFACQGAUAwDQYJKoZIhvcN AQELBQADggEBAA8GCxX2m2lShm1SwbJ9kHRkL7FxUeufKPf+B+r/ZeLCEaAzGP2/ diSLRbIHuwzOyQxJDXzKX0VZMir7vcW51MpuqeoC9vdoFqI42IWiSlISEmxdYndC 74AvziaGRfJHvrJz384VXeobXunCJH3F+IdZOT+F51a44r3NkYrLV64+7ACiNLjS FYgirz1/Z4XrrawOZqRcC94dNEjeSq5n/eza3eCnzATSem2hlQePfpIZUYHZZXZF SuVabifFsuqDPMri+zXoj/lHWXW88ZyynNQksubOJ+rTTEvSwE8Ypx3HIof0WndK yAuty9ujBs+ymBqtRfi+S3n5vyvaBhRTgww= -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:04 2026 by rpki-client