This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
File:                     4155439EEB77ED19E3031F638A8E633394279977.cer (raw, json)
Hash identifier:          Hgs/5whR31bmYJ7kNa/5Ejf+t20cKSznBIr4yJnZ+6c=
Subject key identifier:   41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       6A8425A97A4DABBB7A7F16AA2C030FFB9F44F7B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:34:22 +0000
Certificate not after:    Mon 18 Jan 2027 10:39:22 +0000
Subordinate resources:    AS: 59022
                          IP: 45.115.244.0/22
                          IP: 103.56.20.0/22
                          IP: 2400:ebc0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:84:25:a9:7a:4d:ab:bb:7a:7f:16:aa:2c:03:0f:fb:9f:44:f7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:34:22 2026 GMT
            Not After : Jan 18 10:39:22 2027 GMT
        Subject: CN=4155439EEB77ED19E3031F638A8E633394279977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:9e:fb:7d:6b:00:83:50:d5:95:45:12:2d:
                    61:84:7d:a1:77:d8:22:6a:54:a7:67:5f:41:47:f9:
                    eb:45:c4:6c:37:e8:a0:88:6c:2c:94:2b:84:f3:23:
                    c4:f2:9d:e7:e4:38:e8:af:a0:e0:44:dd:34:23:8d:
                    77:ed:78:e9:60:de:0e:6c:3b:84:8f:a9:e4:8a:ac:
                    80:59:69:9d:87:a6:65:2b:c6:60:2c:b2:f4:5f:c8:
                    b2:6c:6d:b8:85:fa:17:fc:5f:96:82:8b:67:7c:a9:
                    65:dd:61:87:56:47:37:58:01:d3:67:39:69:0a:54:
                    53:fd:fa:a3:46:2e:19:77:02:59:9b:f2:d4:31:50:
                    7e:53:0c:f0:2b:e6:65:37:c4:7c:5a:d7:59:e4:70:
                    d4:83:70:a8:07:1f:ef:e7:8b:21:b6:2c:e1:c5:58:
                    25:4c:d2:5a:e7:b0:d0:3b:d4:a8:20:39:d8:91:b6:
                    7a:e9:7a:4f:a6:13:82:fc:5e:0f:29:f8:64:f4:07:
                    5f:fe:8b:07:b2:d0:c3:f5:31:1d:87:05:a3:8d:f1:
                    63:b3:74:f2:2c:1b:ef:cd:99:e9:fe:40:e8:c8:b4:
                    67:20:09:be:e2:af:b6:cd:f1:ae:53:84:b3:11:12:
                    bd:33:d1:a6:5d:b9:0c:18:1b:88:81:c1:57:64:e4:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.244.0/22
                  103.56.20.0/22
                IPv6:
                  2400:ebc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59022

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:cc:ae:42:e5:b0:15:42:80:7e:7c:04:48:b5:a1:3d:52:
         dc:7d:9b:fd:2c:cc:22:a1:44:e3:e0:51:02:d7:c0:61:45:c7:
         27:08:af:93:02:48:32:9d:c1:50:98:33:28:37:5c:cc:ca:dc:
         25:9f:01:09:6e:4d:bc:e0:61:75:d7:f1:89:31:6d:ef:68:a9:
         16:4c:1e:5d:15:67:45:63:7c:fb:3a:96:d1:10:2e:62:5d:d7:
         49:3f:40:b8:40:31:35:78:18:c2:cf:db:c4:3b:bc:a6:1a:25:
         f2:48:37:c3:c2:0b:31:78:c6:18:1e:30:cb:d3:f5:ad:c0:54:
         0a:7d:10:5e:45:2f:7f:46:b4:4c:da:b2:ed:ca:16:72:d0:35:
         09:57:39:ef:3a:3c:da:9f:d4:78:4f:51:3a:ae:5b:49:ca:6d:
         95:dd:4e:11:31:5c:2a:82:d5:93:fd:d4:55:d3:49:ed:fc:08:
         ff:a2:bc:3d:82:4e:fe:74:da:3e:fd:61:fc:ec:d7:32:74:65:
         31:62:fd:42:73:ad:ce:e7:bc:e2:96:40:ee:0d:7f:f8:45:43:
         01:6c:ae:89:9c:08:43:94:be:fe:a3:bf:9d:05:42:37:db:de:
         96:ec:6c:97:d4:7d:ae:b9:e5:eb:a3:63:f4:6f:fa:21:57:a6:
         d5:b5:ad:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:01:38 2026 by rpki-client