This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer File: olaXUSqiZSfOStYazAmhC-08lxk.cer (raw, json) Hash identifier: kZSY5u9hgybHk8mpqvkfuvj97C9OKrXTe+UGmHWALko= Subject key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4EAB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft caRepository: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 04:45:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 2.57.124.0/22 IP: 141.140.32.0/19 IP: 193.36.112.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20139 (0x4eab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Dec 3 04:45:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:f6:6c:ce:15:57:eb:32:90:1c:81:d4:75: a5:09:65:b2:df:71:5b:d9:d5:11:e1:f0:46:3e:87: b9:5a:62:1c:17:f4:ac:48:8c:f9:35:bf:98:2d:80: 6b:c3:98:0c:af:19:22:f3:de:88:7a:e3:da:51:a6: a6:f8:82:aa:5a:cb:f7:57:3d:db:b6:a4:e3:3e:e7: cd:4a:45:99:3a:4a:57:e7:cc:60:c3:27:b3:4b:0b: f0:ec:2a:bf:52:3c:55:81:00:33:ed:01:cd:7d:42: 75:78:8c:fe:cb:c1:e7:7d:9f:29:2d:cb:47:1f:14: 73:f5:08:eb:c8:8f:26:42:86:d3:0b:1a:e8:84:8f: 09:5e:70:a9:59:3b:b4:93:62:4a:9d:bf:47:61:30: 00:a3:c3:76:be:2b:74:71:00:78:bf:60:52:4c:0c: ac:0b:33:01:a3:85:24:96:04:13:61:66:d6:ff:9b: 69:4d:6c:da:06:9a:b8:f4:55:49:c1:4a:88:e1:57: 46:4b:47:7a:3b:50:86:ed:1a:a6:82:9c:87:14:2a: 79:ff:a5:3f:b9:07:8b:93:11:15:0b:71:3e:2a:09: 0e:80:de:40:1b:66:4d:12:67:93:0f:49:d1:de:3b: 38:56:21:1a:0d:a0:8f:c1:d3:f0:15:09:77:28:f2: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 2.57.124.0/22 141.140.32.0/19 193.36.112.0/22 Signature Algorithm: sha256WithRSAEncryption 51:93:91:d2:e2:44:2e:c2:a6:86:90:0d:ab:9e:93:7f:cf:62: 02:25:fd:79:30:73:0b:9f:b4:33:a1:21:65:06:ce:fe:b0:e2: 86:e1:3e:a1:d9:94:51:65:a4:84:bf:0a:a5:f2:18:61:02:b7: a4:17:53:20:15:d5:76:4a:b5:47:d9:2c:62:a6:be:8d:de:eb: 66:f6:ec:0e:74:e9:fd:be:24:62:50:7e:b7:3b:f9:59:dc:0a: b0:88:3c:15:65:55:c9:fd:a3:8e:52:cb:17:23:c4:ff:73:62: 84:66:d2:98:7e:e6:e9:51:9d:73:8e:ec:1f:cd:31:aa:d8:47: 14:74:52:c3:cc:fd:41:c2:a1:f2:5f:f7:e7:7a:60:0a:cf:1a: 4c:03:08:19:78:c8:bc:f2:e3:bb:e8:dc:3d:c5:59:09:eb:ca: a6:39:01:e1:17:15:13:13:fa:06:4d:df:51:47:95:48:64:ab: 15:e5:9e:85:b7:0a:aa:31:3c:86:d7:84:1c:8c:ae:24:d8:fa: e6:3b:28:ea:c8:94:71:80:18:b5:ef:0e:ab:ac:49:a8:a5:18: 94:5c:86:3d:73:06:b1:95:57:c7:93:27:f8:e8:19:e3:ee:ac: 42:10:fb:e2:7b:9a:c1:8e:6e:d3:f5:85:05:82:74:bb:e6:a4: 5d:dc:75:64 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICTqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMjAzMDQ0NTMwWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyNTk4RDExMC8GA1UEBRMoQTI1Njk3NTEyQUEyNjUyN0NFNEFENjFB Q0MwOUExMEJFRDNDOTcxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMVy9mzOFVfrMpAcgdR1pQllst9xW9nVEeHwRj6HuVpiHBf0rEiM+TW/mC2Aa8OY DK8ZIvPeiHrj2lGmpviCqlrL91c927ak4z7nzUpFmTpKV+fMYMMns0sL8Owqv1I8 VYEAM+0BzX1CdXiM/svB532fKS3LRx8Uc/UI68iPJkKG0wsa6ISPCV5wqVk7tJNi Sp2/R2EwAKPDdr4rdHEAeL9gUkwMrAszAaOFJJYEE2Fm1v+baU1s2gaauPRVScFK iOFXRktHejtQhu0apoKchxQqef+lP7kHi5MRFQtxPioJDoDeQBtmTRJnkw9J0d47 OFYhGg2gj8HT8BUJdyjycEsCAwEAAaOCAv8wggL7MB0GA1UdDgQWBBSiVpdRKqJl J85K1hrMCaEL7TyXGTAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvRTM5RDhFMENDOEVDMTFGMDhDNzhBQjQ1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI1OThEL0UzOUQ4RTBDQzhFQzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3Fp WlNmT1N0WWF6QW1oQy0wOGx4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAgI5fAMEBY2MIAMEAsEkcDANBgkqhkiG9w0BAQsFAAOCAQEAUZOR 0uJELsKmhpANq56Tf89iAiX9eTBzC5+0M6EhZQbO/rDihuE+odmUUWWkhL8KpfIY YQK3pBdTIBXVdkq1R9ksYqa+jd7rZvbsDnTp/b4kYlB+tzv5WdwKsIg8FWVVyf2j jlLLFyPE/3NihGbSmH7m6VGdc47sH80xqthHFHRSw8z9QcKh8l/353pgCs8aTAMI GXjIvPLju+jcPcVZCevKpjkB4RcVExP6Bk3fUUeVSGSrFeWehbcKqjE8hteEHIyu JNj65jso6siUcYAYte8Oq6xJqKUYlFyGPXMGsZVXx5Mn+OgZ4+6sQhD74nuawY5u 0/WFBYJ0u+akXdx1ZA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:49 2025 by rpki-client