This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
File:                     192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer (raw, json)
Hash identifier:          uVEEOAMzTiW1ylHwSpyB0rwCASSCQk1ry7aI2JXj1AI=
Subject key identifier:   19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       59E66D74948DA272BCF3E39D46B1623CC20D65E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:16:11 +0000
Certificate not after:    Mon 18 Jan 2027 10:21:11 +0000
Subordinate resources:    AS: 9812
                          AS: 23850
                          IP: 58.24.0.0/15
                          IP: 60.63.0.0/16
                          IP: 61.87.192.0/18
                          IP: 111.212.0.0/14
                          IP: 114.60.0.0/14
                          IP: 118.132.0.0/14
                          IP: 121.76.0.0/15
                          IP: 124.28.192.0/18
                          IP: 124.151.0.0/16
                          IP: 202.158.160.0/19
                          IP: 211.144.64.0/19
                          IP: 211.154.64.0/19
                          IP: 211.167.96.0/19
                          IP: 218.242.0.0/16
                          IP: 219.233.0.0/16
                          IP: 220.232.64.0/18
                          IP: 220.234.0.0/16
                          IP: 221.137.0.0/16
                          IP: 223.248.0.0/14
                          IP: 2400:6600::/32
                          IP: 2401:800::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e6:6d:74:94:8d:a2:72:bc:f3:e3:9d:46:b1:62:3c:c2:0d:65:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:16:11 2026 GMT
            Not After : Jan 18 10:21:11 2027 GMT
        Subject: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:cc:43:54:41:1b:c7:5b:0c:55:2a:2a:92:
                    21:1b:31:d7:2b:5b:46:bb:05:fd:09:1b:d1:14:61:
                    0d:69:a8:2e:d2:00:32:25:16:c7:8d:db:63:22:f1:
                    2f:59:4d:82:3f:e2:c4:9d:9a:ea:ec:c7:a4:22:b8:
                    ee:99:d9:d7:e9:ca:ac:d8:fd:d5:ef:d7:b8:11:90:
                    7d:e7:79:a5:29:23:c2:7d:f7:9d:82:a4:b9:ef:1d:
                    f2:1e:03:c9:4b:51:10:22:ca:fc:dc:ed:41:28:e6:
                    d6:9a:a5:b3:a9:f7:9f:9d:3a:58:04:54:01:04:15:
                    6c:7e:18:24:95:3a:0a:9d:fe:d0:ca:53:10:fb:2f:
                    93:7e:31:f5:3a:59:ff:8e:d2:a9:8c:85:6a:6f:6e:
                    2a:af:76:7f:ca:5b:99:bc:15:fa:f7:94:4e:ee:28:
                    ea:f4:d2:e6:0e:48:67:98:d9:e3:c2:f7:9d:d6:ef:
                    f8:6b:b9:d6:64:2c:60:43:41:d3:10:1c:2f:96:c1:
                    9d:32:3d:e4:53:06:da:d8:3a:dc:c0:97:30:f2:72:
                    66:c5:95:69:1c:36:99:b3:b1:f5:cd:0c:02:c9:a5:
                    6d:3e:3e:0f:09:97:48:9c:ca:fb:e2:eb:ec:0a:ef:
                    36:25:e2:74:7b:ad:25:0b:33:4e:33:e1:45:b3:76:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.24.0.0/15
                  60.63.0.0/16
                  61.87.192.0/18
                  111.212.0.0/14
                  114.60.0.0/14
                  118.132.0.0/14
                  121.76.0.0/15
                  124.28.192.0/18
                  124.151.0.0/16
                  202.158.160.0/19
                  211.144.64.0/19
                  211.154.64.0/19
                  211.167.96.0/19
                  218.242.0.0/16
                  219.233.0.0/16
                  220.232.64.0/18
                  220.234.0.0/16
                  221.137.0.0/16
                  223.248.0.0/14
                IPv6:
                  2400:6600::/32
                  2401:800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9812
                  23850

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:3f:45:6b:31:02:2d:13:60:e1:77:f6:fb:7d:a8:6b:93:
         7d:f3:27:bd:f0:e0:a4:f3:a9:c0:69:a9:0f:65:2e:3c:e0:9f:
         d0:da:c6:a6:6b:a0:35:3e:4b:4d:72:56:f2:72:e2:07:9e:42:
         08:ab:82:82:6d:95:88:b7:64:a9:09:1a:55:13:97:b6:0b:ff:
         4c:c5:f6:b4:f9:99:7f:93:f3:5c:3a:91:dc:d1:c1:e5:33:2a:
         5c:d4:5a:a9:9c:94:de:36:a2:09:26:11:5e:ac:1b:ae:f5:0c:
         62:5b:cc:f1:2a:d4:be:35:3e:b8:12:c5:ec:c6:c3:fb:e8:8f:
         4c:72:9c:e1:65:2e:f9:8c:49:e4:3f:41:c8:42:44:08:a3:3e:
         44:e3:7e:5f:4b:f7:d0:41:83:c5:c8:3e:b1:f1:a3:c2:84:5f:
         eb:22:01:d6:be:b5:84:76:38:a5:91:39:f7:dd:55:f0:27:75:
         83:6b:52:f5:86:b7:32:d9:63:59:87:0f:0e:ed:d9:09:71:39:
         a7:88:b3:ff:af:d1:47:78:4c:bb:42:47:78:2f:e6:69:6f:80:
         2c:ef:7d:a8:1c:51:e7:be:ac:6d:8d:58:53:ba:51:e0:2b:c8:
         6b:3d:93:f3:53:c5:69:9d:00:76:97:48:0d:67:08:68:77:2d:
         c2:81:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:55:41 2026 by rpki-client