This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer File: CAA1931F96137E124A84BFBFF4963C4475B970C7.cer (raw, json) Hash identifier: FvXTAh8+fLHXMXtfv9CBOfwhUvC0ACJx55Cr13lGUIY= Subject key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 652054A213236F2BA684EAA9EE742DEA56F32974 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:02:03 +0000 Certificate not after: Mon 18 Jan 2027 11:07:03 +0000 Subordinate resources: AS: 139187 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:20:54:a2:13:23:6f:2b:a6:84:ea:a9:ee:74:2d:ea:56:f3:29:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:02:03 2026 GMT Not After : Jan 18 11:07:03 2027 GMT Subject: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7b:b0:eb:c7:1d:53:fa:e7:71:40:58:66:8d: 80:6e:3b:60:a1:9a:ab:90:c8:5d:5b:4b:88:37:8f: d8:c3:e6:a5:54:20:98:7d:0b:82:70:ba:9e:0e:a9: f3:97:68:f6:f5:8a:96:6b:13:20:23:ce:cb:26:17: 12:20:c6:25:a1:af:33:30:ab:e6:cf:94:f6:e3:ef: 2e:b5:ef:93:34:92:1c:c8:f1:91:d6:b0:1e:20:45: ad:d0:9b:1a:ee:0a:f0:40:36:00:65:32:c4:24:57: a4:00:38:57:46:aa:f4:68:66:05:aa:6e:84:d8:f6: ab:68:57:99:65:ca:71:18:75:17:1c:ac:69:9e:2c: ec:d7:5f:56:50:17:5e:29:6b:06:e2:19:a0:f9:ca: 5f:27:ef:3f:cc:63:1e:d9:4a:c0:48:fe:40:03:04: c2:f9:bc:c6:65:41:7f:83:68:30:9e:58:3b:9e:0e: f7:68:05:9a:5b:b3:d4:90:5b:d1:f9:b9:59:33:c9: 02:5d:71:40:2c:6a:4b:e1:b8:f9:5c:c1:b9:dd:11: 8c:09:f7:6a:0d:89:d2:ea:6b:9e:6b:b4:9d:96:07: 3a:df:6d:cd:ae:9a:30:97:d4:26:81:4b:52:a5:c1: 48:c5:32:67:cc:94:ca:62:9a:84:fe:8d:aa:8f:ba: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 139187 Signature Algorithm: sha256WithRSAEncryption 39:00:d0:be:75:1e:88:4c:11:49:fc:d3:a0:f2:64:fd:65:4b: d8:44:29:0a:a2:57:09:8c:b0:db:98:10:81:9a:e9:50:e6:e5: d8:4c:8f:ec:32:bf:3d:6e:e0:08:84:b7:46:43:cc:3b:c0:38: f9:1f:86:07:9f:3c:c5:7a:69:b4:96:e4:35:b0:ff:87:92:68: 99:34:ad:fb:82:fc:58:a1:3c:c8:f0:a6:b8:d5:c4:dd:25:af: dc:6f:29:43:64:6c:19:56:76:9c:c4:d6:b9:85:ed:05:0e:c2: 03:06:db:ca:5c:4b:2f:8b:37:8a:9c:d4:38:8e:60:44:57:2a: 3b:cb:16:45:29:ae:32:e5:f3:75:24:c8:6f:cb:c5:93:b8:dd: c8:c1:39:96:55:1d:7d:60:fc:7f:bf:9a:88:f7:75:0b:bc:aa: 57:be:80:31:56:6b:05:a4:49:65:33:97:f0:ff:d5:c1:13:e9: a7:7c:b0:d8:ba:f7:d6:ca:a0:6b:21:5f:de:d7:68:f9:67:76: 1e:78:a0:b9:7f:24:34:55:3b:bb:20:41:59:bd:f0:0e:23:73: 11:a0:cf:c8:25:45:04:5b:54:8e:d1:9c:48:1a:d9:ec:9c:35: f5:3f:b3:83:01:6a:0d:ce:ec:35:4d:0f:e5:e9:9f:59:21:03: 5d:be:42:99 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUZSBUohMjbyumhOqp7nQt6lbzKXQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDIwM1oX DTI3MDExODExMDcwM1owMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRC RkJGRjQ5NjNDNDQ3NUI5NzBDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR7sOvHHVP653FAWGaNgG47YKGaq5DIXVtLiDeP2MPmpVQgmH0LgnC6ng6p 85do9vWKlmsTICPOyyYXEiDGJaGvMzCr5s+U9uPvLrXvkzSSHMjxkdawHiBFrdCb Gu4K8EA2AGUyxCRXpAA4V0aq9GhmBapuhNj2q2hXmWXKcRh1FxysaZ4s7NdfVlAX XilrBuIZoPnKXyfvP8xjHtlKwEj+QAMEwvm8xmVBf4NoMJ5YO54O92gFmluz1JBb 0fm5WTPJAl1xQCxqS+G4+VzBud0RjAn3ag2J0uprnmu0nZYHOt9tza6aMJfUJoFL UqXBSMUyZ8yUymKahP6Nqo+6cscCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMqhkx+WE34SSoS/v/SWPER1uXDHMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzY1MTcxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NjUxNzE1 LzAvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAh+zMA0GCSqGSIb3DQEBCwUAA4IBAQA5ANC+dR6ITBFJ /NOg8mT9ZUvYRCkKolcJjLDbmBCBmulQ5uXYTI/sMr89buAIhLdGQ8w7wDj5H4YH nzzFemm0luQ1sP+HkmiZNK37gvxYoTzI8Ka41cTdJa/cbylDZGwZVnacxNa5he0F DsIDBtvKXEsvizeKnNQ4jmBEVyo7yxZFKa4y5fN1JMhvy8WTuN3IwTmWVR19YPx/ v5qI93ULvKpXvoAxVmsFpEllM5fw/9XBE+mnfLDYuvfWyqBrIV/e12j5Z3YeeKC5 fyQ0VTu7IEFZvfAOI3MRoM/IJUUEW1SO0ZxIGtnsnDX1P7ODAWoNzuw1TQ/l6Z9Z IQNdvkKZ -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:35 2026 by rpki-client