This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer
File:                     3gyPQrygWy9Vgea8y0wUpuZxthk.cer (raw, json)
Hash identifier:          qWwGgkc+4HJZuwHzWcoYJZSlbxUIRE2Bj5eGLT3F3Cs=
Subject key identifier:   DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6F3D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 01 Dec 2025 19:54:39 +0000
Certificate not after:    Wed 01 Apr 2026 00:00:00 +0000
Subordinate resources:    IP: 192.248.0.0/17
Validation:               Failed, certificate revoked on Thu 04 Dec 2025 17:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28477 (0x6f3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec  1 19:54:39 2025 GMT
            Not After : Apr  1 00:00:00 2026 GMT
        Subject: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:a5:0f:82:73:44:57:5d:db:75:1e:49:95:
                    92:f7:0e:cb:40:34:4b:33:57:4d:26:6f:a8:b5:f7:
                    6a:7d:f2:2b:4e:ee:02:2d:bc:c0:ce:30:f4:90:47:
                    76:86:af:2f:2b:76:b0:48:91:16:d3:4b:73:e0:c8:
                    e7:e3:30:a5:3d:3f:f9:0a:44:a2:ff:62:b4:d9:e3:
                    25:81:40:d2:96:9d:04:7a:25:24:9a:26:5b:ed:c1:
                    25:e3:83:f9:37:5a:e7:58:1c:1c:1e:6e:e3:1d:8d:
                    5f:68:15:ab:8f:a7:69:a9:5a:6f:2f:a9:31:c3:85:
                    c2:a1:07:47:3f:6b:5e:f6:be:77:f3:0b:dd:5a:0c:
                    e7:8e:7b:5f:d1:17:8c:eb:d7:08:cd:58:7d:9a:fa:
                    76:c4:5a:3e:87:14:4e:45:07:fb:6d:26:2e:28:2e:
                    92:dd:4a:cc:7a:d0:db:c0:1b:48:df:24:aa:3d:09:
                    1a:a2:8f:d4:b7:9e:b7:6e:48:50:ae:4a:f2:c8:52:
                    ee:61:ec:f7:bd:58:de:01:09:42:0c:88:76:f7:a1:
                    e7:e4:a4:15:34:28:bf:b3:d5:3a:aa:64:52:f8:34:
                    0e:38:15:77:0c:ab:e2:ca:99:b3:37:1b:5c:a2:16:
                    6c:bb:a7:ba:7c:84:73:3d:c9:38:f2:89:9a:85:94:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.248.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         26:db:6a:2c:d9:f4:1f:b9:ae:2b:1d:3f:31:4a:3c:f4:6a:fa:
         8a:7c:c5:f3:2e:ae:99:ac:be:e3:31:d9:5c:f4:bf:a9:08:2d:
         6e:e5:fd:7f:a3:f2:13:0f:1d:ca:9a:f5:61:32:57:bb:8d:8a:
         f4:9b:9d:01:c6:ab:7f:8e:32:ff:f6:04:cc:37:80:93:73:d0:
         2b:21:0a:e9:28:54:d0:03:1a:92:03:e9:5c:b5:2e:01:3a:56:
         16:5e:c9:77:40:aa:55:d8:99:f8:70:35:f8:c1:b1:de:66:bf:
         e4:cf:34:17:66:62:78:e9:b9:76:45:cf:dc:42:8a:ea:3b:42:
         67:8d:cf:3f:5a:04:7d:3f:4f:9e:63:b5:78:d2:59:5f:30:f4:
         69:53:c9:24:f6:18:b8:a4:d2:4b:f8:79:d1:a3:95:e0:32:de:
         6f:77:47:ad:f9:13:e1:ed:a0:63:96:17:ff:57:fc:39:72:0d:
         72:c1:50:0f:2b:a7:10:ea:21:25:0d:96:6c:07:39:6e:4a:8e:
         82:08:b9:6a:15:fa:df:d4:e3:53:4a:b2:d8:e2:71:69:b1:41:
         31:98:73:b4:e3:34:10:0a:59:72:4c:b3:46:b5:62:d6:d4:d2:
         29:0c:cc:07:77:70:de:c0:e1:4c:93:35:c3:2a:8c:0b:22:80:
         56:ac:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----