This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
File:                     191E76D74421148B42FA2A7F663270AE7FAD25F9.cer (raw, json)
Hash identifier:          LByMeKu+GFuxBIJN4+HOWyu5D70VhWf7eOJ6YPinzOY=
Subject key identifier:   19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       70E482A985119F888F4C705CC6C3C5DDEFBD9055
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:45:21 +0000
Certificate not after:    Mon 18 Jan 2027 10:50:21 +0000
Subordinate resources:    AS: 137797
                          IP: 103.116.120.0/22
                          IP: 2402:f9c0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e4:82:a9:85:11:9f:88:8f:4c:70:5c:c6:c3:c5:dd:ef:bd:90:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:45:21 2026 GMT
            Not After : Jan 18 10:50:21 2027 GMT
        Subject: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:11:e8:51:ad:05:06:7e:8c:11:6c:9a:a1:
                    ac:03:a9:c1:92:43:a1:1a:9f:ef:57:da:0c:e8:19:
                    73:ac:d4:74:ae:28:7e:14:f8:6d:4d:f0:e0:c3:43:
                    e4:a0:be:01:c1:d5:a1:57:5b:ce:81:73:cf:a7:97:
                    89:de:c9:55:b4:e2:26:f0:d5:ba:08:cc:f3:1f:72:
                    a3:d4:2f:e2:10:25:b6:f0:6c:74:2a:48:bf:63:94:
                    e5:7f:5a:d8:28:c9:b5:99:e3:8e:8d:af:2f:f4:8a:
                    76:5c:d7:08:3a:cc:03:41:b8:37:14:fe:09:28:b0:
                    8d:6d:ee:48:b3:47:25:e2:2e:16:4d:12:33:90:ee:
                    d6:4d:b2:59:91:c9:7c:5f:e0:2f:b4:09:5b:35:07:
                    8b:ee:1e:47:6f:fa:d9:77:f6:80:fb:42:72:7e:42:
                    d1:d5:5c:4c:7e:5b:8e:2c:89:ba:70:e9:be:cb:83:
                    30:3b:3a:f6:7c:eb:52:56:e1:0e:c1:29:3e:fc:89:
                    cd:95:9e:ec:1a:f5:85:77:cb:a9:77:ea:22:2c:4c:
                    50:06:de:71:57:77:f3:b2:c4:24:cc:53:e8:dd:ce:
                    74:b7:fc:d8:07:56:a7:43:17:3c:bd:fa:2b:aa:00:
                    38:9a:b8:49:f1:58:57:0f:8d:0b:d8:4e:55:9a:42:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.120.0/22
                IPv6:
                  2402:f9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137797

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:5f:f1:4b:e9:2c:a6:1e:d0:d0:15:e4:88:26:69:f2:e5:
         7b:8e:74:9f:2d:0e:78:0d:51:64:b7:6f:aa:87:06:09:89:1d:
         27:68:5d:39:ef:9b:0e:38:a6:61:c8:50:3f:9b:cb:66:fb:4c:
         9f:5a:6f:a0:f5:ec:e9:86:0b:f0:7f:5f:7e:e3:4f:85:32:b7:
         e5:24:7b:01:88:21:b7:a7:f4:02:4e:f2:af:94:1a:55:df:2f:
         35:79:b7:4a:e1:1c:18:e3:6e:bf:cc:2e:aa:47:4d:2d:5b:82:
         13:ee:1f:ba:da:22:d9:b1:8f:59:45:62:1e:e6:07:f6:f9:aa:
         0d:99:25:27:a8:89:bd:a1:2b:b4:13:b3:dc:2a:1e:6e:7a:74:
         4a:5f:5a:4f:8f:d6:ce:e3:73:d9:7d:d7:e6:e5:46:b5:03:50:
         43:62:ff:a9:0f:87:2f:8e:6a:07:4c:1e:c2:1b:0e:ed:0e:a4:
         b5:7c:39:b7:a3:3a:78:d8:c9:f8:40:64:70:d4:3e:34:fd:24:
         5a:d5:7b:ab:1f:14:de:36:0d:58:e7:76:e4:88:bb:99:90:73:
         fe:50:a3:03:27:33:d1:d5:c0:1b:18:24:1b:c6:39:7e:2c:cc:
         a4:da:4c:72:5c:f4:71:ef:ad:f7:9d:1b:7a:3d:c8:ce:71:70:
         a1:05:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:31 2026 by rpki-client