This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
File:                     7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer (raw, json)
Hash identifier:          E7S7GkVT2aVSc51JCA7F3g8XXcqqa7MyfjANzDPrD/o=
Subject key identifier:   7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       42694B2888F4E867210FEFDE59A1BA9D265A7539
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:38:46 +0000
Certificate not after:    Mon 18 Jan 2027 10:43:46 +0000
Subordinate resources:    AS: 131482
                          IP: 103.72.120.0/22
                          IP: 2406:dd80::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:69:4b:28:88:f4:e8:67:21:0f:ef:de:59:a1:ba:9d:26:5a:75:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:38:46 2026 GMT
            Not After : Jan 18 10:43:46 2027 GMT
        Subject: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:c7:87:6d:a3:a4:50:76:56:b6:4a:2e:ee:
                    39:96:6e:4a:68:62:ed:7c:64:03:9c:d8:51:e9:72:
                    16:00:74:5e:2d:55:31:80:71:25:7e:8f:a6:f9:d3:
                    cb:52:46:05:f9:1c:d8:50:92:7f:a4:d9:fb:ba:df:
                    f3:2d:3d:8d:b6:b5:0d:97:3e:83:bc:e7:0a:77:0e:
                    68:0a:37:ea:a6:14:45:3e:86:3a:ff:0f:a3:d7:e8:
                    9e:eb:ae:15:9f:fe:d2:f3:66:54:ab:1b:33:30:d0:
                    54:2c:3c:ce:3f:00:51:ab:e2:e1:ff:b3:74:74:39:
                    24:85:02:4e:92:63:26:f4:ba:3c:c3:4d:db:a0:7b:
                    61:7f:32:5a:11:34:19:24:af:2c:2c:39:2c:f3:f5:
                    b2:c3:d5:43:ff:19:df:51:28:ee:b0:3b:05:41:b8:
                    b2:02:1c:16:8e:1f:25:53:82:37:87:97:e4:b3:bf:
                    9f:10:c5:9c:0d:c9:87:1c:18:24:20:1a:f1:cd:f9:
                    0a:af:d4:1e:87:82:bd:14:30:6f:23:a6:f0:aa:c8:
                    93:32:f9:95:70:7c:a6:50:a1:f4:4f:16:d4:cc:56:
                    ac:62:31:18:71:33:7c:b0:33:6a:c0:85:fe:38:c3:
                    2d:9a:69:42:14:5c:11:bb:fb:4d:c6:5d:7b:a9:7a:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.120.0/22
                IPv6:
                  2406:dd80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131482

    Signature Algorithm: sha256WithRSAEncryption
         8a:07:bb:d5:91:10:49:61:28:2e:c5:0f:f7:c2:36:d8:da:e7:
         fc:7f:fa:07:b5:ee:6f:df:65:50:ed:5e:12:26:40:e2:68:57:
         2b:22:1a:74:98:66:c0:5a:85:4a:86:a1:aa:6b:4f:6f:22:26:
         5f:3f:61:c9:62:53:f5:72:32:fc:2b:42:1b:6c:6c:d2:53:f7:
         3d:d4:19:51:c4:51:55:bc:35:a0:81:f0:88:4e:70:df:02:82:
         94:b6:ae:b2:99:bc:be:d7:64:e4:eb:27:52:2a:39:9c:5c:49:
         0c:1f:25:6d:c6:62:6d:87:55:ba:2f:f6:eb:93:be:5a:12:b3:
         30:58:97:f7:df:38:78:9e:b8:28:69:78:0e:3e:6c:94:2b:53:
         e2:59:7d:73:8e:db:f7:19:a9:08:64:0d:59:52:17:a8:d2:24:
         b6:dd:e4:8f:34:48:23:53:56:de:6b:6d:49:d5:07:22:2f:9c:
         95:52:d3:f3:c9:b1:6a:f0:12:d3:d6:35:8e:ad:a6:ff:ad:11:
         b0:0b:bf:a6:e3:9d:8d:4d:83:e9:31:41:4c:59:9a:fd:0d:50:
         8e:3a:d1:b7:42:40:9d:5d:cf:b2:c8:8f:bd:75:c7:a2:63:38:
         50:4e:91:8d:1c:1e:78:ea:3b:ce:da:2f:8b:c3:64:3d:c3:ff:
         b1:07:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----