This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer (raw, json) Hash identifier: PvbUOmLiQJIFrSgb2+qmb3CeBo7iz7rnXGtznM8ijhc= Subject key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6A3B7A6B6D49BE9ADB0E7571E759F18971E567A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:53:17 +0000 Certificate not after: Mon 18 Jan 2027 10:58:17 +0000 Subordinate resources: AS: 131577 IP: 103.163.180.0/23 IP: 2407:2ac0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:7a:6b:6d:49:be:9a:db:0e:75:71:e7:59:f1:89:71:e5:67:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:53:17 2026 GMT Not After : Jan 18 10:58:17 2027 GMT Subject: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:59:c6:8c:44:a0:c3:f1:18:bd:88:bf:12:b7: 8b:01:88:10:4a:39:5a:be:a9:92:70:59:6e:d7:54: 39:1f:fe:9b:21:1d:1a:54:aa:68:c1:cf:0f:fa:be: 3e:c9:12:ca:1a:66:20:05:1a:fd:37:c0:aa:ed:40: fd:92:3c:e9:3e:ef:92:1d:2b:aa:d7:3a:86:0a:5f: a9:67:8e:ce:99:69:a4:99:56:f5:15:b2:a3:d6:96: 09:f2:8c:f9:55:20:6d:6c:4e:a3:c2:35:c0:dd:ef: af:e0:ab:e8:c7:35:65:d3:e6:2c:60:8d:87:e2:0f: 7f:8f:41:ee:83:3e:99:29:8b:bc:58:69:2e:00:3e: 11:0b:44:7a:24:28:3e:db:90:7c:f5:c4:06:43:79: 5c:8b:91:c1:42:96:e8:40:7b:2d:20:c1:8d:f1:a4: 14:d0:ce:df:4b:9b:76:d1:55:7d:5b:96:96:04:13: 42:3e:1e:85:c7:29:ca:2b:59:15:3c:02:a1:dc:9d: 76:70:61:58:90:45:90:4c:49:ed:c0:0f:e2:24:1e: c7:ac:d3:6a:14:19:40:19:35:e2:a9:20:f3:18:cb: ee:9d:5a:b7:77:4c:a6:f4:45:81:95:db:ad:e6:ff: 17:14:8f:16:36:ea:39:94:eb:90:1a:ed:39:a4:95: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.180.0/23 IPv6: 2407:2ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131577 Signature Algorithm: sha256WithRSAEncryption 16:89:45:51:e8:1c:b0:ee:20:35:01:31:4c:9e:a9:c8:59:52: 0b:c8:66:8c:f5:f0:3e:2a:1b:d6:ad:71:7f:00:6c:ee:b6:22: 2f:32:1e:2f:7c:fa:a7:ec:64:ba:7c:35:21:d0:4e:6e:16:2d: 8f:5e:0c:6f:ce:75:22:4c:aa:63:56:09:b0:e4:f6:f7:68:26: 90:0d:64:00:47:f7:88:72:f0:76:93:2f:58:60:ec:58:16:e5: 1d:17:79:25:79:7f:a6:e7:6d:67:af:5d:fc:e1:4a:df:8a:9f: 36:51:00:60:30:40:ff:82:62:ef:df:75:07:76:cd:db:1e:b0: 58:57:78:1d:fc:13:16:11:27:55:f5:e7:69:dc:a2:54:cb:06: 36:09:62:f7:4b:ca:0f:8f:47:f7:d5:2d:68:3b:87:02:f2:01: bf:bb:2a:24:39:0a:2b:38:1a:03:f7:45:ff:9a:00:1c:e9:50: 06:5b:9d:af:94:6c:b6:e6:7f:f4:1d:6c:7c:1f:44:4c:b1:62: 62:a6:16:75:fe:d6:58:51:02:78:b4:f0:75:80:4d:ec:8c:7e: 3c:de:db:46:9c:01:32:3a:20:7a:f8:16:71:5b:77:c3:ce:3a: 90:cd:35:88:3d:0b:55:65:6a:4f:1f:6e:90:5a:5c:32:3b:61: a4:8f:ba:d0 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUajt6a21JvprbDnVx51nxiXHlZ6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTMxN1oX DTI3MDExODEwNTgxN1owMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTky MkZBOEU1NTlFQ0RDRkRBODIxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVZxoxEoMPxGL2IvxK3iwGIEEo5Wr6pknBZbtdUOR/+myEdGlSqaMHPD/q+ PskSyhpmIAUa/TfAqu1A/ZI86T7vkh0rqtc6hgpfqWeOzplppJlW9RWyo9aWCfKM +VUgbWxOo8I1wN3vr+Cr6Mc1ZdPmLGCNh+IPf49B7oM+mSmLvFhpLgA+EQtEeiQo PtuQfPXEBkN5XIuRwUKW6EB7LSDBjfGkFNDO30ubdtFVfVuWlgQTQj4ehccpyitZ FTwCodyddnBhWJBFkExJ7cAP4iQex6zTahQZQBk14qkg8xjL7p1at3dMpvRFgZXb reb/FxSPFjbqOZTrkBrtOaSVRBECAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKDrACSyP4xGvFki+o5Vns3P2oIaMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzA2MTg5MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MDYxODkx LzAvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFno7QwDQQCAAIwBwMFACQHKsAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAgH5MA0GCSqGSIb3DQEBCwUAA4IBAQAWiUVR6Byw7iA1 ATFMnqnIWVILyGaM9fA+KhvWrXF/AGzutiIvMh4vfPqn7GS6fDUh0E5uFi2PXgxv znUiTKpjVgmw5Pb3aCaQDWQAR/eIcvB2ky9YYOxYFuUdF3kleX+m521nr1384Urf ip82UQBgMED/gmLv33UHds3bHrBYV3gd/BMWESdV9edp3KJUywY2CWL3S8oPj0f3 1S1oO4cC8gG/uyokOQorOBoD90X/mgAc6VAGW52vlGy25n/0HWx8H0RMsWJiphZ1 /tZYUQJ4tPB1gE3sjH483ttGnAEyOiB6+BZxW3fDzjqQzTWIPQtVZWpPH26QWlwy O2Gkj7rQ -----END CERTIFICATE-----Generated at Sun Jan 25 05:56:49 2026 by rpki-client