This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
File: EDAEF642B728F950499E8F90EDC704EB965E54A5.cer (raw, json)
Hash identifier: r5r5Q86EMM4MTjJ6z2a7o4msOVq9tW9p7GQ+nSn8c10=
Subject key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0E72157472AA7ED93267F2494FF5F58065D1030C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 22 Jan 2026 15:09:18 +0000
Certificate not after: Thu 21 Jan 2027 15:14:18 +0000
Subordinate resources: AS: 151264
IP: 163.223.124.0/23
IP: 2401:f320::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:72:15:74:72:aa:7e:d9:32:67:f2:49:4f:f5:f5:80:65:d1:03:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 22 15:09:18 2026 GMT
Not After : Jan 21 15:14:18 2027 GMT
Subject: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:61:54:23:03:59:16:a5:79:49:c0:08:b8:
a0:12:f2:d6:51:bc:ec:15:c2:a1:a9:4a:a9:e7:93:
88:ee:aa:90:7a:10:22:98:be:7a:34:4b:07:4a:4d:
33:73:a2:cd:ae:2d:44:b5:98:92:53:19:0e:80:3b:
39:2a:0e:03:e1:06:40:52:c2:b2:a8:3e:bb:86:c7:
79:31:2b:91:3f:78:80:f6:58:cf:3a:45:46:0b:0e:
c4:05:b2:09:66:e6:7a:ff:1e:eb:57:fc:3e:ea:f4:
7c:22:ad:72:ee:bd:cf:8c:0b:82:7f:51:1c:26:46:
e6:5e:38:a9:ec:1e:9a:87:2f:4b:12:9a:70:5a:b2:
8b:52:e3:46:b3:de:e6:ff:a5:54:a9:21:49:03:76:
c8:74:67:1c:ef:8a:fe:42:98:9b:bc:60:24:83:bc:
59:cd:f6:3e:c8:6f:7c:19:92:45:47:43:be:13:5c:
f7:40:ef:c2:f2:67:c5:6e:3e:e7:6f:38:43:53:33:
87:25:c2:d7:7a:02:65:86:4e:02:d6:7d:dd:2b:5e:
9d:96:34:15:ee:ad:e9:67:8e:bc:2a:e4:24:0e:6f:
4a:2e:e6:81:d6:87:2d:c5:4b:f2:68:83:e2:e3:b9:
fb:db:06:7e:b0:8a:19:67:5c:ad:c4:45:59:a2:c3:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.223.124.0/23
IPv6:
2401:f320::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151264
Signature Algorithm: sha256WithRSAEncryption
28:71:d8:49:6d:6b:fc:78:9a:00:bf:90:7d:39:74:da:ec:23:
d6:9b:11:27:63:58:0f:f0:ab:97:ae:b8:a0:70:0c:3e:6d:4a:
8b:0a:28:c5:ba:3c:cd:21:1c:cd:ea:87:4e:65:cc:16:40:3a:
f9:fa:20:5b:0d:32:75:92:10:6e:77:5c:e6:1b:70:5b:e0:af:
28:41:e8:20:29:1e:aa:45:e9:da:d3:c3:f4:44:e1:af:30:34:
cb:a0:46:85:5b:1e:5e:02:67:13:64:21:44:21:d2:02:79:5a:
d4:d7:03:11:a6:ca:99:75:91:69:f6:1d:42:1e:83:d5:43:98:
13:11:cf:00:69:0c:0e:76:50:20:ce:1f:5d:be:45:fa:97:7b:
23:55:e3:4a:af:67:5a:c1:8a:ee:6d:50:b1:1f:1d:41:66:bf:
2c:7a:e4:29:16:cf:0a:44:34:62:8c:fb:23:9d:f6:38:99:0c:
d3:c7:2c:82:4b:45:95:40:ed:93:00:71:a4:52:7d:9a:c3:f2:
cd:eb:e5:43:48:ec:cb:a8:ee:cc:b0:61:8f:2b:80:fa:2a:dd:
4a:58:b0:93:3b:25:10:d2:45:ac:be:00:95:8d:d9:bd:9e:d3:
0e:88:ca:a3:bc:a5:e8:a7:2d:70:d6:5c:29:8f:af:e6:c3:5c:
5d:c0:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:16 2026 by rpki-client