This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer File: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer (raw, json) Hash identifier: dz8uwFbdTu2A4LhVHVoNWTChwO21R72P32OnAde0rHQ= Subject key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 532E3A0F501BEA535F45AAC942BBAADF54C24D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:56:12 +0000 Certificate not after: Mon 18 Jan 2027 11:01:12 +0000 Subordinate resources: AS: 146806 IP: 42.201.8.0 -- 42.201.31.255 IP: 45.250.152.0/22 IP: 103.79.228.0/23 IP: 103.219.64.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2e:3a:0f:50:1b:ea:53:5f:45:aa:c9:42:bb:aa:df:54:c2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:56:12 2026 GMT Not After : Jan 18 11:01:12 2027 GMT Subject: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:22:ef:40:49:ce:8a:8c:3c:1e:eb:53:5f:b3: fd:02:10:76:fd:91:92:a6:4a:09:e3:73:1b:0a:f1: dd:02:7c:19:c8:94:7b:f2:1a:34:67:1c:83:01:2d: fa:aa:6a:a9:53:aa:e3:ff:c2:79:a1:73:1d:ad:5a: 3f:44:cc:7e:9f:6a:39:21:88:c4:54:54:d6:fb:45: 37:40:d0:cc:b1:5f:41:44:10:5e:d7:62:3b:5d:7a: 88:2f:d8:4d:66:89:40:3b:ac:c6:52:fe:e1:84:fe: 4a:c1:d8:eb:75:ff:45:c5:a1:74:f2:d1:80:67:04: fb:c7:a3:4b:9c:ff:0c:9c:71:28:9e:d9:43:27:6f: be:ff:fa:5b:73:c3:9b:82:f5:57:95:c7:7e:ba:c9: dd:c7:1b:36:ba:4d:7b:54:43:7d:9a:0d:8e:c0:42: 4a:c4:9b:98:d4:61:a2:78:ea:83:61:1f:e0:ff:82: a8:a8:84:22:11:06:e5:f5:3d:8d:a0:58:2d:f5:49: 9c:11:1b:8a:0e:f6:e2:64:79:b6:cb:70:28:84:6a: 0e:ec:8f:76:71:07:19:c4:bd:7c:b0:c2:08:b4:5e: b7:8c:4e:aa:0a:40:fa:4c:81:3c:ac:94:37:ff:18: f9:e4:48:2a:53:d4:e9:0f:4e:02:83:53:fb:f5:3b: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.201.8.0-42.201.31.255 45.250.152.0/22 103.79.228.0/23 103.219.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 146806 Signature Algorithm: sha256WithRSAEncryption 2d:f3:57:ee:7e:db:f8:b6:f5:f4:e1:e6:67:16:17:2d:dc:95: 68:ba:4d:65:f3:e8:57:4d:a7:94:39:ff:e4:51:7e:69:26:3d: a1:99:9a:83:c7:c3:08:e9:6f:4d:f1:17:78:d1:d3:00:d5:bc: d9:6f:84:a6:df:5b:ed:ba:1b:32:a5:7b:d8:40:f0:70:bf:d1: 57:0c:a6:69:d3:c3:6a:7b:3f:52:f4:04:ce:5a:53:2e:ca:1b: fc:d7:7d:5a:f7:b0:10:65:43:c8:d0:c0:d7:0e:a4:40:ec:bd: 22:5a:de:c3:bf:6a:5a:34:35:71:e9:6d:3f:02:6f:aa:c8:20: a7:61:2f:a2:81:7e:6f:16:71:fe:a0:40:01:45:58:c6:bb:92: f3:d6:f3:f5:20:b6:28:5c:a3:74:c1:03:3b:82:eb:d7:ee:4d: 90:3c:38:8c:02:7f:c2:d7:90:76:a9:c1:6d:8f:9c:1f:5e:b3: d0:71:48:38:ac:5c:dc:f2:ee:8e:8c:14:25:72:ad:18:83:d0: 6c:02:10:32:01:19:51:4c:bb:db:1f:3e:25:c2:1f:a7:39:e2: 66:f4:86:d0:c4:97:10:f9:93:85:cc:9a:65:ab:90:c0:6b:46: f9:ff:74:11:f6:fe:35:95:38:62:ba:b0:12:04:cb:3a:0d:5a: 75:5b:2d:74 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgITUy46D1Ab6lNfRarJQruq31TCTTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTE2MkUzRDAwMDExMTAvBgNVBAUTKEE1NkU4NzJBNDAz RTdCOUNFQjk0MzFBMDhGNTQwNDAxRDJGQkQ3MTAwHhcNMjYwMTE5MTA1NjEyWhcN MjcwMTE4MTEwMTEyWjAzMTEwLwYDVQQDEyg2MzJBMDFDNEYxRDVDOTkwQkY2QjM2 M0E2Nzg5NENDN0Q2OUU0NzhCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SLvQEnOiow8HutTX7P9AhB2/ZGSpkoJ43MbCvHdAnwZyJR78ho0ZxyDAS36 qmqpU6rj/8J5oXMdrVo/RMx+n2o5IYjEVFTW+0U3QNDMsV9BRBBe12I7XXqIL9hN ZolAO6zGUv7hhP5Kwdjrdf9FxaF08tGAZwT7x6NLnP8MnHEontlDJ2++//pbc8Ob gvVXlcd+usndxxs2uk17VEN9mg2OwEJKxJuY1GGieOqDYR/g/4KoqIQiEQbl9T2N oFgt9UmcERuKDvbiZHm2y3AohGoO7I92cQcZxL18sMIItF63jE6qCkD6TIE8rJQ3 /xj55EgqU9TpD04Cg1P79Tsk/wIDAQABo4IC0DCCAswwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUYyoBxPHVyZC/azY6Z4lMx9aeR4swHwYDVR0jBBgwFoAUpW6H KkA+e5zrlDGgj1QEAdL71xAwDgYDVR0PAQH/BAQDAgEGMHMGA1UdHwRsMGowaKBm oGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM5MDc3NTA5 MDY3NTcxNS8xL0E1NkU4NzJBNDAzRTdCOUNFQjk0MzFBMDhGNTQwNDAxRDJGQkQ3 MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNkhLa0EtZTV6cmxER2dqMVFFQWRMNzF4QS5jZXIwggEBBggrBgEF BQcBCwSB9DCB8TBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5j bi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDg1ODI1LzAvMG4GCCsGAQUFBzAKhmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUv MC82MzJBMDFDNEYxRDVDOTkwQkY2QjM2M0E2Nzg5NENDN0Q2OUU0NzhCLm1mdDA7 BggrBgEFBQcwDYYvaHR0cHM6Ly9ycmRwLXJwcy5jbm5pYy5jbi9ycmRwL25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcB BwEB/wQqMCgwJgQCAAEwIDAMAwQDKskIAwQFKskAAwQCLfqYAwQBZ0/kAwQCZ9tA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwI9djANBgkqhkiG9w0BAQsFAAOCAQEA LfNX7n7b+Lb19OHmZxYXLdyVaLpNZfPoV02nlDn/5FF+aSY9oZmag8fDCOlvTfEX eNHTANW82W+Ept9b7bobMqV72EDwcL/RVwymadPDans/UvQEzlpTLsob/Nd9Wvew EGVDyNDA1w6kQOy9Ilrew79qWjQ1celtPwJvqsggp2EvooF+bxZx/qBAAUVYxruS 89bz9SC2KFyjdMEDO4Lr1+5NkDw4jAJ/wteQdqnBbY+cH16z0HFIOKxc3PLujowU JXKtGIPQbAIQMgEZUUy72x8+JcIfpzniZvSG0MSXEPmThcyaZauQwGtG+f90Efb+ NZU4YrqwEgTLOg1adVstdA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:40 2026 by rpki-client