This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
File:                     848188DBA8D369CB93B918182269D397DE354F44.cer (raw, json)
Hash identifier:          WxFv/KAwqnhn/gjpgPIK1JNbImP38ANczgw6gBC2YfU=
Subject key identifier:   84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       72AFD41326EAD37BC820A17534FD2BE6CEC7A3F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:52:41 +0000
Certificate not after:    Mon 18 Jan 2027 10:57:41 +0000
Subordinate resources:    AS: 63584
                          IP: 103.60.32.0/22
                          IP: 111.223.8.0/22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:af:d4:13:26:ea:d3:7b:c8:20:a1:75:34:fd:2b:e6:ce:c7:a3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:52:41 2026 GMT
            Not After : Jan 18 10:57:41 2027 GMT
        Subject: CN=848188DBA8D369CB93B918182269D397DE354F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:f0:40:03:68:aa:a5:33:f8:9c:b0:43:4b:
                    4f:18:e8:3a:69:e0:5c:1f:44:10:43:08:36:9a:e3:
                    35:df:99:80:d4:10:1f:bc:f5:d6:02:18:fb:66:96:
                    25:d4:73:42:c0:56:3a:52:3b:bc:23:9e:03:cd:c1:
                    a3:04:8c:39:0d:b0:5a:40:6c:b6:f5:3c:2e:24:a6:
                    19:61:4b:bf:d9:95:28:c3:8f:8c:ca:56:a4:3c:29:
                    7c:61:3d:01:52:37:32:0a:46:9d:f6:c9:a0:c8:29:
                    22:94:27:99:22:41:9e:fe:e0:8d:e0:5f:16:7f:60:
                    ab:be:63:1e:c2:0f:0f:50:a8:af:f0:96:e9:68:30:
                    18:0e:4c:72:56:c3:6b:e1:d0:9a:1a:e6:37:23:96:
                    fe:ad:b4:63:96:2b:bd:20:39:78:87:fd:15:61:6a:
                    4b:65:ca:a0:63:cf:0c:2a:7f:a5:2f:94:df:83:14:
                    1e:1e:2b:35:f2:63:44:7b:ce:e5:d7:ab:ce:4d:8d:
                    f0:02:94:a9:62:75:b8:1d:9c:31:47:bc:b8:06:82:
                    33:1e:4c:89:ca:db:ba:5f:de:54:a8:d0:be:2c:d5:
                    02:7a:77:a4:00:21:78:01:d6:60:48:6d:f1:e2:99:
                    c6:2f:de:bd:13:88:ea:db:de:ff:8e:19:d0:95:64:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.32.0/22
                  111.223.8.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63584

    Signature Algorithm: sha256WithRSAEncryption
         35:c3:3b:6e:ed:97:bc:7b:9d:6a:94:29:06:6e:1a:fe:9c:d0:
         18:07:58:16:d9:d1:2f:d6:40:4c:73:65:67:31:a5:25:40:09:
         20:b4:2a:c7:34:e9:cd:f6:b9:8d:13:dc:4c:b0:1a:70:45:4f:
         93:5d:80:1d:75:73:50:4d:b1:c3:37:ce:cd:89:21:58:8d:6b:
         f4:b5:32:e1:e5:b6:f7:4a:ef:6f:3f:1b:bd:39:ed:77:4b:d0:
         65:c8:76:51:3d:9e:3c:4e:59:dc:b2:ab:2b:d4:85:5b:47:9e:
         f2:32:08:be:cc:7a:b8:e3:26:ad:cd:c5:ca:c7:61:ad:e1:9e:
         d4:ba:d1:9e:16:fd:4f:9f:16:22:b9:52:bc:b0:33:a9:f4:cc:
         13:24:a6:e8:f0:be:20:b5:d2:91:2f:6f:b4:3c:97:05:be:0d:
         4b:2c:10:0c:1d:61:af:66:68:c2:a2:33:98:8d:37:e7:15:22:
         0b:8a:6e:13:00:46:11:2a:dd:07:62:bd:3c:f9:9d:5a:ad:09:
         df:a1:06:7d:d5:9a:0f:f3:cd:bc:0f:01:6b:ca:5f:70:d1:a9:
         aa:da:8e:a0:36:86:6c:55:0d:80:90:f3:f5:1d:a1:2f:64:04:
         cf:47:3b:d2:f4:1f:de:c4:d4:48:7d:b7:d8:bf:03:a5:3a:ee:
         2c:df:8d:72
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUcq/UEybq03vIIKF1NP0r5s7Ho/IwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTI0MVoX
DTI3MDExODEwNTc0MVowMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkx
ODE4MjI2OUQzOTdERTM1NEY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjw8EADaKqlM/icsENLTxjoOmngXB9EEEMINprjNd+ZgNQQH7z11gIY+2aW
JdRzQsBWOlI7vCOeA83BowSMOQ2wWkBstvU8LiSmGWFLv9mVKMOPjMpWpDwpfGE9
AVI3MgpGnfbJoMgpIpQnmSJBnv7gjeBfFn9gq75jHsIPD1Cor/CW6WgwGA5MclbD
a+HQmhrmNyOW/q20Y5YrvSA5eIf9FWFqS2XKoGPPDCp/pS+U34MUHh4rNfJjRHvO
5derzk2N8AKUqWJ1uB2cMUe8uAaCMx5Micrbul/eVKjQvizVAnp3pAAheAHWYEht
8eKZxi/evROI6tve/44Z0JVk1uUCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFISBiNuo02nLk7kYGCJp05feNU9EMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4NTY0OTM0NTc1NzE4Ni8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NzU3MTg2
LzAvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAJnPCADBAJv3wgwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAPhgMA0GCSqGSIb3DQEBCwUAA4IBAQA1wztu7Ze8e51qlCkGbhr+nNAY
B1gW2dEv1kBMc2VnMaUlQAkgtCrHNOnN9rmNE9xMsBpwRU+TXYAddXNQTbHDN87N
iSFYjWv0tTLh5bb3Su9vPxu9Oe13S9BlyHZRPZ48Tlncsqsr1IVbR57yMgi+zHq4
4yatzcXKx2Gt4Z7UutGeFv1PnxYiuVK8sDOp9MwTJKbo8L4gtdKRL2+0PJcFvg1L
LBAMHWGvZmjCojOYjTfnFSILim4TAEYRKt0HYr08+Z1arQnfoQZ91ZoP8828DwFr
yl9w0amq2o6gNoZsVQ2AkPP1HaEvZATPRzvS9B/exNRIfbfYvwOlOu4s341y
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:01:07 2026 by rpki-client