This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.cer (raw, json) Hash identifier: 0xhrSD3fqfToFaaDan1aBFZIbxx0kKjDsRl0gJAP+Xw= Subject key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 23A050F8002E778CE8CAA5AB63140EAC15B61D82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:40:24 +0000 Certificate not after: Mon 18 Jan 2027 10:45:24 +0000 Subordinate resources: AS: 131539 IP: 103.88.32.0/22 IP: 110.42.0.0/17 IP: 2402:dcc0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a0:50:f8:00:2e:77:8c:e8:ca:a5:ab:63:14:0e:ac:15:b6:1d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:40:24 2026 GMT Not After : Jan 18 10:45:24 2027 GMT Subject: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:5a:3c:86:2f:d5:3a:c1:83:c7:b9:cf:b7: 00:fd:08:2a:73:ad:24:de:8a:26:3e:33:41:05:1f: 9a:f2:61:14:6c:8d:de:cb:fb:92:8c:14:9d:ec:cc: c9:8d:8b:e3:23:c8:47:2e:cb:97:41:dd:5f:41:2b: f2:9f:c9:48:7f:41:22:13:3b:79:04:2f:53:11:f5: f7:be:b4:4e:0e:4b:81:60:c1:8b:5c:5d:d1:27:bf: 91:33:d1:25:b3:81:ab:a2:39:52:2c:57:83:a2:69: 5f:f6:59:76:ec:a1:60:04:09:8f:91:25:a4:d4:90: 43:dd:b8:db:43:e9:7c:11:cb:10:2f:2e:34:41:f3: 9e:48:84:bd:6c:f8:0c:88:62:8d:78:07:67:52:05: 2d:10:0e:c5:cd:66:3e:74:61:d0:c2:f1:d4:fc:87: 68:30:f3:42:95:33:c4:42:fb:66:e8:41:bb:a3:70: e2:ef:67:60:c5:2a:bc:7d:dc:05:4f:d2:dc:23:3c: a4:1c:32:45:67:1b:5b:63:2c:af:30:12:6b:4b:7e: ad:e9:42:94:34:bf:c3:7a:b3:91:5d:22:33:89:e8: d0:7f:54:fe:88:28:5c:11:2f:87:77:ee:2b:2b:8a: f4:f0:24:ab:7f:93:d9:72:5d:f9:3d:e9:e9:cc:34: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.88.32.0/22 110.42.0.0/17 IPv6: 2402:dcc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131539 Signature Algorithm: sha256WithRSAEncryption 3a:f0:56:18:fa:3d:f4:5c:fb:18:24:fa:a6:ce:9c:4f:fc:7e: bb:51:ad:ef:a6:78:52:8c:b3:c4:b9:6c:f0:ac:44:0c:37:9f: 25:56:12:01:97:3e:d6:43:41:74:ee:f2:0e:82:80:65:d6:b7: a0:7f:d8:00:02:49:3c:c9:1c:58:28:8b:82:cb:ea:7c:ac:60: f6:d7:fc:1a:25:a8:85:5b:24:39:eb:81:c6:b4:ee:6c:f2:9e: f6:5a:de:71:b3:1e:38:67:59:70:14:2f:be:38:a1:66:0c:14: ed:46:8f:b5:4c:e8:bf:d0:97:1d:8f:bc:8e:f5:96:37:9a:87: 88:4b:a1:7c:18:2d:5d:48:f9:e0:ad:56:bb:79:b4:d4:8c:b0: 5f:06:9e:ad:55:24:cf:92:8d:7e:b9:71:2d:5b:df:e9:42:69: 8f:86:15:38:4a:11:12:18:39:b3:ab:02:50:0e:bb:e8:28:08: 48:7f:a0:da:7f:f2:37:ac:c3:3e:6e:3f:ab:8f:a3:f7:34:a2: dc:ef:52:ec:b1:e8:d8:18:da:7d:1c:05:41:45:8b:5c:d0:a8: d2:ef:0a:33:07:19:ca:b2:53:d6:81:cb:63:61:fe:6d:29:2e: 2e:66:21:ea:5d:b0:6b:24:4d:39:84:1a:9b:6b:60:20:14:6d: 9c:57:13:dd -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUI6BQ+AAud4zoyqWrYxQOrBW2HYIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNDAyNFoX DTI3MDExODEwNDUyNFowMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMx ODBCMDZGMjUwQURFNjk3MDBCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOCxWjyGL9U6wYPHuc+3AP0IKnOtJN6KJj4zQQUfmvJhFGyN3sv7kowUnezM yY2L4yPIRy7Ll0HdX0Er8p/JSH9BIhM7eQQvUxH19760Tg5LgWDBi1xd0Se/kTPR JbOBq6I5UixXg6JpX/ZZduyhYAQJj5ElpNSQQ92420PpfBHLEC8uNEHznkiEvWz4 DIhijXgHZ1IFLRAOxc1mPnRh0MLx1PyHaDDzQpUzxEL7ZuhBu6Nw4u9nYMUqvH3c BU/S3CM8pBwyRWcbW2MsrzASa0t+relClDS/w3qzkV0iM4no0H9U/ogoXBEvh3fu KyuK9PAkq3+T2XJd+T3p6cw0cvcCAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAo3rIjjA/S7g0wYCwbyUK3mlwC/MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzI2OTI1MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3MjY5MjUw LzAvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJnWCADBAduKgAwDQQCAAIwBwMFACQC3MAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgHTMA0GCSqGSIb3DQEBCwUAA4IBAQA68FYY +j30XPsYJPqmzpxP/H67Ua3vpnhSjLPEuWzwrEQMN58lVhIBlz7WQ0F07vIOgoBl 1regf9gAAkk8yRxYKIuCy+p8rGD21/waJaiFWyQ564HGtO5s8p72Wt5xsx44Z1lw FC++OKFmDBTtRo+1TOi/0Jcdj7yO9ZY3moeIS6F8GC1dSPngrVa7ebTUjLBfBp6t VSTPko1+uXEtW9/pQmmPhhU4ShESGDmzqwJQDrvoKAhIf6Daf/I3rMM+bj+rj6P3 NKLc71LssejYGNp9HAVBRYtc0KjS7wozBxnKslPWgctjYf5tKS4uZiHqXbBrJE05 hBqba2AgFG2cVxPd -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:40 2026 by rpki-client