This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer (raw, json) Hash identifier: 4xXm/VvXWoywERxtCOiVD6dCXrWwObInWH8QupvWLho= Subject key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0272EA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 04 Nov 2025 15:30:54 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 133075 IP: 103.72.208.0/23 IP: 103.242.68.0/22 IP: 220.158.212.0/22 IP: 2407:f100::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160490 (0x272ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 15:30:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91D3102, serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:3c:07:c6:03:d2:5f:86:97:90:f2:e6:84: e7:fb:d0:2c:4b:75:f5:1e:64:c4:de:29:bb:49:5f: 23:a9:83:ed:3a:30:3f:ca:79:0b:26:51:c2:68:de: d0:9c:c2:5a:d6:85:67:49:7d:62:b6:45:99:b2:f7: a7:f1:a7:81:fa:e3:3e:be:d0:96:4e:7a:e8:02:57: 07:58:9b:2d:13:a5:61:e1:b2:f6:fa:e8:75:3b:8c: 6a:18:ad:da:58:06:d7:ec:96:c9:9c:70:56:72:a1: be:af:c6:7c:b0:69:a6:51:6e:50:36:4e:b7:18:8a: 41:8b:b4:a0:55:a5:32:8c:29:a9:32:60:44:28:8b: 8e:84:dc:22:28:f1:75:69:c9:51:e4:7c:af:84:9e: 8b:ea:86:c2:24:35:24:f0:3a:f6:d7:3d:1e:cb:fa: 83:74:1b:24:1b:6c:46:76:04:65:f6:60:eb:4d:4e: 87:03:19:55:25:8e:7c:2d:74:53:7f:b0:5e:13:9c: 4d:ef:76:65:ea:61:e1:43:b7:9b:b2:77:9f:87:b5: 66:b4:29:30:29:88:a2:29:3e:d3:ba:e9:80:77:e5: 3a:74:d7:8f:30:ef:8a:9c:32:d7:4f:f1:d3:05:05: aa:af:0b:cd:26:79:65:6c:6a:0d:eb:46:bb:53:ce: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133075 sbgp-ipAddrBlock: critical IPv4: 103.72.208.0/23 103.242.68.0/22 220.158.212.0/22 IPv6: 2407:f100::/32 Signature Algorithm: sha256WithRSAEncryption da:67:9d:25:28:f5:f4:7c:a9:47:f4:fc:9e:f3:29:6f:50:07: 26:46:e4:0d:f5:f6:c1:a6:74:6c:a2:0a:f3:05:61:37:9d:0f: 9d:c8:ea:b0:6f:33:80:04:af:27:61:e4:de:b5:cc:b6:e0:74: eb:22:48:12:dd:37:45:24:31:4f:9b:d7:7c:e3:b8:ff:8e:bb: f7:ba:81:5d:cb:90:94:ff:c3:95:55:f5:cc:4b:bb:90:9a:95: 19:91:34:b6:97:eb:63:7e:63:19:23:de:ac:49:10:96:57:aa: 25:9a:33:05:41:47:55:58:00:05:77:5f:6c:8a:af:83:45:f9: 7e:dc:de:b8:b1:03:60:1a:98:71:00:09:98:91:c0:dc:26:48: 13:e9:1c:71:3c:99:15:31:71:94:b5:d8:d4:4d:e8:cb:66:57: 19:4f:56:66:93:10:57:ba:b2:b3:c6:5c:3f:4d:94:69:b5:78: f7:80:6b:1e:75:4c:79:2b:ea:38:f7:e5:1e:cc:af:ea:63:69: 8e:c2:c1:81:a8:61:50:6a:33:22:2b:e7:a3:b2:b4:0a:ed:15: 98:91:08:eb:e1:6c:76:77:82:e9:32:dd:c5:5a:b0:d5:f2:c5: 2e:df:e9:94:ca:51:e6:20:eb:73:8e:88:b3:3a:8a:09:45:97: 52:2d:c6:f3 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAnLqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNDE1MzA1NFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYy MkE0NTNCQ0ExQTNCQTZDRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+qzwHxgPSX4aXkPLmhOf70CxLdfUeZMTeKbtJXyOpg+06MD/KeQsmUcJo3tCc wlrWhWdJfWK2RZmy96fxp4H64z6+0JZOeugCVwdYmy0TpWHhsvb66HU7jGoYrdpY BtfslsmccFZyob6vxnywaaZRblA2TrcYikGLtKBVpTKMKakyYEQoi46E3CIo8XVp yVHkfK+EnovqhsIkNSTwOvbXPR7L+oN0GyQbbEZ2BGX2YOtNTocDGVUljnwtdFN/ sF4TnE3vdmXqYeFDt5uyd5+HtWa0KTApiKIpPtO66YB35Tp0148w74qcMtdP8dMF BaqvC80meWVsag3rRrtTziDPAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQU+Ro6mDFD hMQDqP8ipFO8oaO6bNgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQzMTAyL0Q0QUVFMkM4NzY4RTExRTM5OUE5NTc0NTU5MTFFQTMyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEMzEwMi9ENEFFRTJDODc2OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURG RGhNUURxUDhpcEZPOG9hTzZiTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgfTMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBZ0jQAwQCZ/JE AwQC3J7UMA0EAgACMAcDBQAkB/EAMA0GCSqGSIb3DQEBCwUAA4IBAQDaZ50lKPX0 fKlH9Pye8ylvUAcmRuQN9fbBpnRsogrzBWE3nQ+dyOqwbzOABK8nYeTetcy24HTr IkgS3TdFJDFPm9d847j/jrv3uoFdy5CU/8OVVfXMS7uQmpUZkTS2l+tjfmMZI96s SRCWV6olmjMFQUdVWAAFd19siq+DRfl+3N64sQNgGphxAAmYkcDcJkgT6RxxPJkV MXGUtdjUTejLZlcZT1ZmkxBXurKzxlw/TZRptXj3gGsedUx5K+o49+UezK/qY2mO wsGBqGFQajMiK+ejsrQK7RWYkQjr4Wx2d4LpMt3FWrDV8sUu3+mUylHmIOtzjoiz OooJRZdSLcbz -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:57 2025 by rpki-client