This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
File:                     816C81988ECBEB701F4EA593D34F28951B10ABF2.cer (raw, json)
Hash identifier:          YMk6E4pmVkBuhKs/8VaABdJyQf8DlL3fs3jat/+uyE0=
Subject key identifier:   81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       5C00B33FE2EA689F31994F38AA10787CBC3730C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:42:35 +0000
Certificate not after:    Mon 18 Jan 2027 10:47:35 +0000
Subordinate resources:    AS: 131541
                          IP: 103.103.36.0/22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:00:b3:3f:e2:ea:68:9f:31:99:4f:38:aa:10:78:7c:bc:37:30:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:42:35 2026 GMT
            Not After : Jan 18 10:47:35 2027 GMT
        Subject: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8a:5b:d0:05:42:48:b8:f3:71:1d:ce:81:52:
                    bc:fd:03:20:b3:b4:e3:1f:c4:4e:7e:06:49:7b:92:
                    69:2d:70:a8:d4:90:5f:eb:41:7d:ea:6d:87:2a:34:
                    13:a4:ca:74:e8:1e:0b:d6:c3:0b:7b:4c:7c:37:b5:
                    48:ce:ed:a2:0f:cd:d7:66:3f:66:a9:04:a8:ed:8d:
                    6c:a8:5d:d3:10:f2:87:93:3f:3a:76:32:bd:13:54:
                    89:da:b0:60:6e:6a:0d:7a:68:02:7c:50:e7:3a:c0:
                    ed:82:ee:97:46:ce:9d:2a:ee:76:c4:cb:46:d4:83:
                    56:f4:5a:a3:cf:50:73:67:c4:62:f4:b5:f6:51:0a:
                    62:07:da:2e:83:e9:53:ca:55:d8:e4:6b:42:22:4e:
                    05:6c:8c:3e:17:7e:e8:86:73:6d:d7:83:22:9a:2d:
                    63:e8:a2:3c:21:80:0f:bf:98:b2:de:ed:db:b7:88:
                    68:b2:7b:84:f4:76:00:2c:57:08:b7:33:ef:00:a2:
                    cb:ed:31:22:c5:28:99:54:a8:fe:b0:b8:06:23:63:
                    5d:96:df:70:d2:68:f4:d8:0f:8b:f8:98:f8:63:e0:
                    a3:d0:5a:46:42:5e:00:3b:08:76:88:a5:ad:8f:8f:
                    cc:84:37:49:e6:61:78:4c:38:70:7d:f2:a2:d4:20:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.36.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131541

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:fc:98:e2:15:c6:9d:a1:91:5b:14:4f:fc:53:8c:c4:35:
         16:3c:aa:8f:16:d6:42:59:5e:84:fe:84:30:f6:d7:38:55:91:
         c0:3f:d8:28:58:af:bd:59:e4:ea:8c:5a:4c:db:34:53:58:2d:
         fe:cf:ca:50:d1:ec:79:68:20:b4:a4:88:17:dc:29:c6:be:67:
         90:34:6c:53:e7:07:b2:1c:ad:bf:24:28:3c:a8:33:4c:d4:2e:
         04:be:43:0d:21:cf:8d:a2:99:ec:fb:32:ea:aa:64:62:ff:4c:
         7c:0c:ae:b5:e7:5c:c9:35:33:b1:34:cf:9b:cf:b2:b7:3e:78:
         ec:46:f0:6b:62:a4:53:a6:40:cd:34:3c:0e:de:42:3f:f9:3b:
         0a:0a:03:f7:34:cc:77:eb:a4:f2:03:e5:85:8b:a1:f3:b8:49:
         ca:de:bc:0e:7f:fb:56:8e:ec:3e:bd:81:1f:41:e8:4f:e8:0c:
         32:93:2d:f1:4b:97:b9:b2:d2:c2:7e:34:a1:3d:e8:bb:cd:f5:
         bb:c8:e6:12:ab:38:85:af:03:73:7c:76:a0:01:0f:00:5e:d0:
         f5:31:b2:de:6d:ae:2d:21:88:78:98:a3:dd:f9:e4:dd:73:a6:
         9c:59:d5:ee:47:e1:7b:7f:38:6b:a7:c5:23:9a:9a:06:06:96:
         38:9e:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----