This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer File: RoxqeSq7PkX-7iIo0o54AxNytFU.cer (raw, json) Hash identifier: WcZMDUIgx31OBagVAGCibuqofV/8MNdQV/2hcJIlmyU= Subject key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FAA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft caRepository: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 13:16:57 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 161.152.0.0/16 IP: 192.112.215.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28586 (0x6faa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 5 13:16:57 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e2:b5:d3:02:07:2f:71:52:c0:2a:9c:76:4f: 4b:16:37:45:48:cb:fe:e5:d9:b6:fb:33:f3:1a:5c: 28:a4:2d:f2:24:6c:5a:bb:eb:97:60:37:6b:07:64: 76:cf:1c:26:dd:51:ce:9d:00:9d:8f:8b:59:28:c0: ea:b8:61:4a:2f:0a:60:04:b3:1e:82:52:9a:36:43: 0f:79:fd:31:cf:4f:64:bd:40:f0:30:9a:04:03:13: de:41:8e:ee:3b:96:1e:ef:b6:ab:a7:5f:7c:fa:98: 7a:da:df:bb:5b:d0:16:9c:e2:10:4d:45:9d:6e:3b: d8:9f:a6:4a:04:e6:c5:fc:53:10:45:ef:f6:c4:9f: 21:77:9f:83:bf:b6:8b:8e:82:88:1e:b1:d5:bb:40: 67:18:e2:1a:c9:06:9a:5e:be:ce:94:70:be:00:05: 81:15:d4:69:13:da:76:d6:cb:c0:07:ef:0a:bc:99: 8b:e9:07:1c:e4:0d:db:69:94:b7:e0:de:48:8a:0c: f9:84:f0:23:2a:3e:b2:14:88:1c:0a:ba:f5:2d:4f: 8f:3a:40:12:ab:33:2b:1b:1b:02:3f:00:9f:ca:f1: 36:e4:27:96:03:ef:3f:db:6e:5d:e2:05:46:8f:4a: fe:32:59:dc:ff:0b:34:2a:b6:7d:a8:7d:ac:1e:cc: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.152.0.0/16 192.112.215.0/24 Signature Algorithm: sha256WithRSAEncryption 05:55:82:56:2a:c6:ac:bd:a2:cf:3f:97:0c:bb:f5:c0:79:64: f0:a8:ab:ef:01:c2:33:74:97:0d:31:65:1b:cc:e8:8b:0e:20: 9c:00:5b:5e:92:5b:d3:35:19:30:b7:b4:59:2b:aa:72:57:b9: 71:7a:5b:1a:1e:51:b2:dc:ba:15:c9:56:3f:95:5b:e1:d2:61: cf:42:d1:d8:b4:22:38:b4:9b:a7:c2:1f:f9:0f:a2:80:6a:42: 87:45:a9:50:f7:a0:10:84:4a:68:f5:91:91:8c:c1:ea:2b:7f: e8:c3:77:99:c6:eb:28:35:7d:3e:db:0e:04:92:d7:49:25:f4: 4e:61:68:ed:28:ed:f5:95:4f:30:16:6c:6b:6e:3b:7a:60:a5: 8e:a7:81:ed:25:7c:f2:b9:34:bd:f0:d6:60:4c:1a:50:18:f4: 96:8b:bd:27:cd:90:c0:48:75:91:4c:f7:f3:d2:19:37:61:48: c5:86:bc:ed:68:ea:57:17:2b:a3:a2:aa:61:b4:c7:1b:20:1f: 4b:90:c9:68:07:04:32:c7:dd:a9:b2:a8:ef:92:f9:95:6d:87: 81:9e:14:04:70:58:fb:32:dd:be:28:09:66:ed:93:e4:fb:ac: 2e:ff:7a:e5:99:f5:cf:38:38:93:0e:d2:93:a3:99:16:5e:55: 7a:2a:a3:77 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICb6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjA1MTMxNjU3WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyREQxNTExMC8GA1UEBRMoNDY4QzZBNzkyQUJCM0U0NUZFRUUyMjI4 RDI4RTc4MDMxMzcyQjQ1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN7itdMCBy9xUsAqnHZPSxY3RUjL/uXZtvsz8xpcKKQt8iRsWrvrl2A3awdkds8c Jt1Rzp0AnY+LWSjA6rhhSi8KYASzHoJSmjZDD3n9Mc9PZL1A8DCaBAMT3kGO7juW Hu+2q6dffPqYetrfu1vQFpziEE1FnW472J+mSgTmxfxTEEXv9sSfIXefg7+2i46C iB6x1btAZxjiGskGml6+zpRwvgAFgRXUaRPadtbLwAfvCryZi+kHHOQN22mUt+De SIoM+YTwIyo+shSIHAq69S1PjzpAEqszKxsbAj8An8rxNuQnlgPvP9tuXeIFRo9K /jJZ3P8LNCq2fah9rB7MODsCAwEAAaOCAvgwggL0MB0GA1UdDgQWBBRGjGp5Krs+ Rf7uIijSjngDE3K0VTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkREMTUvQkRBREE4NjBDQzUyMTFFREE4MjkxRDEwQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJERDE1L0JEQURBODYwQ0M1MjExRURBODI5MUQxMEM0RjlBRTAyL1JveHFlU3E3 UGtYLTdpSW8wbzU0QXhOeXRGVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw EQQCAAEwCwMDAKGYAwQAwHDXMA0GCSqGSIb3DQEBCwUAA4IBAQAFVYJWKsasvaLP P5cMu/XAeWTwqKvvAcIzdJcNMWUbzOiLDiCcAFteklvTNRkwt7RZK6pyV7lxelsa HlGy3LoVyVY/lVvh0mHPQtHYtCI4tJunwh/5D6KAakKHRalQ96AQhEpo9ZGRjMHq K3/ow3eZxusoNX0+2w4EktdJJfROYWjtKO31lU8wFmxrbjt6YKWOp4HtJXzyuTS9 8NZgTBpQGPSWi70nzZDASHWRTPfz0hk3YUjFhrztaOpXFyujoqphtMcbIB9LkMlo BwQyx92psqjvkvmVbYeBnhQEcFj7Mt2+KAlm7ZPk+6wu/3rlmfXPODiTDtKTo5kW XlV6KqN3 -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:54 2025 by rpki-client