This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer
File:                     DE3831D69587EC59C3002006198FD58A977ED1AD.cer (raw, json)
Hash identifier:          9BtaNNCImPtoJDc7n1Jmjy7DSLKZKJpqL214VT0He00=
Subject key identifier:   DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       7BEDF4ACCB089F91BDC1EA95F8C8AB09B6EE1378
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:47:06 +0000
Certificate not after:    Mon 18 Jan 2027 10:52:06 +0000
Subordinate resources:    AS: 137730
                          IP: 103.124.48.0/22
                          IP: 2403:d9c0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ed:f4:ac:cb:08:9f:91:bd:c1:ea:95:f8:c8:ab:09:b6:ee:13:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:47:06 2026 GMT
            Not After : Jan 18 10:52:06 2027 GMT
        Subject: CN=DE3831D69587EC59C3002006198FD58A977ED1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:48:d1:ea:95:e5:36:36:53:38:ac:ea:49:
                    c3:7b:1c:92:6c:6f:a0:f5:3f:92:19:08:50:51:a9:
                    01:d0:11:a3:16:71:07:35:de:9d:a7:93:50:62:37:
                    73:63:f2:13:03:89:93:26:37:e7:ac:a3:ff:1f:c2:
                    ae:e1:61:3b:55:a1:2d:0f:fe:a6:18:c7:5d:55:b7:
                    6c:11:bf:5c:11:ad:72:df:43:3c:8d:c8:94:de:0d:
                    71:41:98:49:e6:e5:ca:c1:5c:90:ee:c2:da:ff:c1:
                    a8:f5:5b:38:01:36:68:6d:f2:20:86:8a:d7:30:38:
                    b4:83:01:56:45:3d:6b:30:4e:77:27:4c:37:41:8b:
                    6c:d0:42:fb:27:95:f0:ef:46:a7:07:1e:1a:f5:7c:
                    64:de:1f:34:d0:db:c7:13:2d:81:27:e4:c7:a7:f9:
                    9e:d6:c5:c5:7a:d9:c7:ea:c2:f8:59:5d:58:1e:10:
                    0e:cc:8e:42:50:e0:7e:c1:03:a1:b3:2a:39:13:2e:
                    ec:fb:03:28:36:15:36:55:3d:8b:48:c4:01:52:c9:
                    73:a8:b1:f8:41:5c:5c:91:bc:fd:65:9a:ab:cb:38:
                    4b:34:57:c4:95:c6:a8:8f:c5:79:d9:fe:63:79:9b:
                    cb:a2:10:75:5b:e0:d9:63:66:c2:e0:7a:09:23:ff:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.48.0/22
                IPv6:
                  2403:d9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137730

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:a7:25:23:81:b3:bc:85:a9:af:d9:c0:7b:3b:6f:8e:f3:
         57:b3:17:7d:c6:07:25:19:38:3c:c1:1f:cc:ce:90:fe:7f:16:
         4f:96:12:c0:65:d2:dc:42:53:bf:b0:1f:d4:f6:9c:11:dc:a2:
         15:8a:2d:44:a2:84:ea:31:36:1f:8e:68:67:1a:65:da:c6:19:
         a0:20:a5:48:5a:10:ce:91:f3:10:97:6b:f3:87:3b:ba:ee:a5:
         f6:27:17:a3:70:d1:64:b0:ac:d0:09:a5:46:52:6c:39:44:64:
         94:ca:83:f4:e8:a8:a9:11:d0:70:da:0d:57:70:53:dc:34:0f:
         29:54:e9:ae:fc:00:f2:45:a9:4d:d6:f9:97:fd:60:c2:35:b8:
         5b:ae:56:b8:8e:81:bb:04:56:ee:b4:b1:26:0e:55:35:93:49:
         fc:75:a8:a4:7d:bb:a2:9b:bb:24:45:c1:34:e0:6f:af:f6:f2:
         1d:18:19:4e:83:1e:23:bf:87:ae:cb:55:2b:24:31:10:1f:4e:
         52:08:52:10:03:88:87:a9:f3:21:1e:fe:80:ba:ad:d2:03:19:
         de:46:5c:5d:e7:ba:dc:c0:a3:ba:31:fe:7a:4f:c5:9d:7b:ae:
         bb:84:4b:9a:d8:86:80:c4:7c:db:42:39:5e:e7:00:85:43:36:
         ba:ed:27:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----