This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer
File:                     A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer (raw, json)
Hash identifier:          SwBBkYWduIZ6ACeK0u6e06mV3fOSn/mk/5+R+drW7Ks=
Subject key identifier:   A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       168567D4029E05B8DCFE63E3D54ACB63BE6723FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:57:21 +0000
Certificate not after:    Mon 18 Jan 2027 11:02:21 +0000
Subordinate resources:    AS: 146786
                          IP: 103.240.200.0/23
                          IP: 2401:1c60::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:85:67:d4:02:9e:05:b8:dc:fe:63:e3:d5:4a:cb:63:be:67:23:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:57:21 2026 GMT
            Not After : Jan 18 11:02:21 2027 GMT
        Subject: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:d6:63:e5:16:30:ec:40:19:2e:18:1e:25:
                    cf:b5:d7:fc:12:2b:ca:87:aa:2d:2e:b8:35:d9:e3:
                    90:64:c9:67:cb:7e:65:07:f6:b7:40:73:41:77:0b:
                    96:90:c8:df:87:ca:29:54:43:d0:7a:12:50:68:aa:
                    15:c5:b9:b3:d4:fe:d1:c2:03:8f:1c:13:6e:94:9c:
                    4d:2e:9e:75:35:16:a2:c2:1a:c0:97:7b:d1:4a:3e:
                    60:bd:47:89:7b:fc:8f:fc:f5:e8:a8:41:4f:27:8e:
                    9f:8f:dc:6e:e3:1a:44:73:88:c8:94:a4:67:5a:22:
                    14:6d:fa:80:af:41:da:43:24:04:b1:d3:15:d2:af:
                    b0:7a:c8:3c:b4:03:48:57:a7:75:0b:cf:08:9e:ef:
                    83:b3:a6:7f:36:4c:68:ca:27:72:9a:03:2d:51:8b:
                    a2:d3:71:ae:d7:35:f0:1f:c3:ad:26:c1:aa:7c:3a:
                    f1:8d:53:d5:38:58:d4:4b:96:0d:14:8a:6c:08:18:
                    96:e3:0d:1f:f6:a2:b7:3a:75:f7:d6:1a:d7:19:27:
                    40:6e:4c:68:2f:c7:b6:41:4c:f8:8f:b6:20:8f:01:
                    61:c9:41:d5:fc:c9:44:4b:67:8b:94:9b:49:2b:12:
                    39:ca:53:01:6c:6f:1b:bc:e7:b9:a8:90:42:10:d0:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.200.0/23
                IPv6:
                  2401:1c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146786

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:ac:fb:62:80:bd:19:0c:85:41:b9:d1:bd:f5:73:12:91:
         bf:87:d3:ad:8c:2b:79:88:45:23:6e:c9:35:51:40:a2:74:b0:
         1f:8e:d0:e0:d2:1f:58:59:c9:d7:b4:9c:21:73:9a:33:c5:a4:
         ac:64:69:75:8a:ed:af:2b:6f:06:07:ae:a5:77:d1:15:0b:f9:
         b7:c3:f3:60:21:c1:d5:07:f7:7d:4d:47:5a:24:2a:88:6b:09:
         64:60:f1:03:ef:fe:c4:b6:a4:76:17:b6:d1:3d:1f:b3:99:5f:
         01:4b:23:5c:80:6d:ea:ae:73:99:cb:6f:8e:b1:5e:57:99:03:
         b5:af:91:a7:c6:77:bb:e9:71:3b:23:81:c7:55:f2:f5:88:e6:
         2d:e7:35:a0:b0:ae:6a:c0:e8:f5:22:8a:0d:6e:37:6e:1a:4f:
         45:76:b2:5a:5b:09:a9:2f:22:ba:d1:e3:ea:c4:60:4e:f0:9f:
         35:b8:32:e5:23:65:8f:70:50:56:c3:68:53:a0:4e:29:df:1c:
         60:55:c7:04:74:e1:75:47:c2:f6:01:6b:28:46:cf:26:74:84:
         59:eb:82:1f:ac:a1:53:db:3b:2d:67:2c:d0:0d:18:c1:63:28:
         bd:6b:6d:9d:2c:09:45:65:c0:69:9b:29:d9:fc:9e:6d:2a:14:
         6d:b0:af:73
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIUFoVn1AKeBbjc/mPj1UrLY75nI/0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTcyMVoX
DTI3MDExODExMDIyMVowMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4Mjcx
OUFERUZBNDBCMUJEMzg2Q0EwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMZi1mPlFjDsQBkuGB4lz7XX/BIryoeqLS64NdnjkGTJZ8t+ZQf2t0BzQXcL
lpDI34fKKVRD0HoSUGiqFcW5s9T+0cIDjxwTbpScTS6edTUWosIawJd70Uo+YL1H
iXv8j/z16KhBTyeOn4/cbuMaRHOIyJSkZ1oiFG36gK9B2kMkBLHTFdKvsHrIPLQD
SFendQvPCJ7vg7OmfzZMaMoncpoDLVGLotNxrtc18B/DrSbBqnw68Y1T1ThY1EuW
DRSKbAgYluMNH/aitzp199Ya1xknQG5MaC/HtkFM+I+2II8BYclB1fzJREtni5Sb
SSsSOcpTAWxvG7znuaiQQhDQPNcCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKV3PBqdYO3giCcZre+kCxvThsoAMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4NTY0OTM0NTk1Mzc5NC8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1OTUzNzk0
LzAvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAFn8MgwDQQCAAIwBwMFACQBHGAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAj1iMA0GCSqGSIb3DQEBCwUAA4IBAQB+Qaz7YoC9GQyF
QbnRvfVzEpG/h9OtjCt5iEUjbsk1UUCidLAfjtDg0h9YWcnXtJwhc5ozxaSsZGl1
iu2vK28GB66ld9EVC/m3w/NgIcHVB/d9TUdaJCqIawlkYPED7/7EtqR2F7bRPR+z
mV8BSyNcgG3qrnOZy2+OsV5XmQO1r5Gnxne76XE7I4HHVfL1iOYt5zWgsK5qwOj1
IooNbjduGk9FdrJaWwmpLyK60ePqxGBO8J81uDLlI2WPcFBWw2hToE4p3xxgVccE
dOF1R8L2AWsoRs8mdIRZ64IfrKFT2zstZyzQDRjBYyi9a22dLAlFZcBpmynZ/J5t
KhRtsK9z
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:01:35 2026 by rpki-client