This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer File: 0Iw24m8k-51RTztAqON6mgS1gCU.cer (raw, json) Hash identifier: lEvjDqyAMWiRbf8bc42+TxyJ6H7BoR7HF5hnjRpkjQI= Subject key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278FD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft caRepository: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 13:46:36 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45500 IP: 123.108.104.0/22 IP: 203.89.156.0/22 IP: 203.118.243.0/24 IP: 203.217.141.0/24 IP: 2402:ee00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162045 (0x278fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 28 13:46:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A913E03C, serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:a9:72:59:fb:a3:93:83:54:f9:25:65:1b: 5b:34:7a:63:f2:7b:b4:6e:e1:75:78:e5:c2:ac:de: 03:67:83:42:f4:3b:bf:77:07:67:d8:45:26:19:21: e2:b2:a3:85:b4:48:45:d5:2d:e1:fd:a0:4d:af:a0: f8:84:88:c4:4a:3d:5d:de:96:57:70:ca:d8:48:91: 42:79:8d:1c:f8:6e:2c:3d:05:af:fc:fb:10:df:75: e4:20:1f:f0:bf:be:b6:6f:f3:c1:29:f2:7d:74:15: ce:a1:15:01:a2:1e:bb:57:e1:2e:68:e4:86:e6:f3: ec:4b:14:e3:4a:88:9b:9d:69:be:37:b5:c1:68:f9: 47:d8:56:ab:51:9a:92:92:ac:c2:29:7d:7f:45:f2: b4:99:6e:64:97:27:c6:22:5f:56:f1:03:0d:5b:ca: b0:b7:62:e4:32:7c:e1:8e:92:3e:de:1f:ea:82:6c: f5:44:64:95:0e:86:ec:e4:9f:03:c1:91:c9:63:f4: 7f:78:60:1f:09:4d:6b:76:d7:97:11:95:f3:dd:70: ac:9a:7b:78:12:67:75:23:8e:57:fd:5f:cf:42:55: 61:93:e1:23:44:24:18:ec:f2:9c:bb:89:49:34:da: d7:74:51:6c:b5:2b:f0:17:0f:20:ce:55:7e:eb:97: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45500 sbgp-ipAddrBlock: critical IPv4: 123.108.104.0/22 203.89.156.0/22 203.118.243.0/24 203.217.141.0/24 IPv6: 2402:ee00::/32 Signature Algorithm: sha256WithRSAEncryption b9:1b:05:13:97:8c:22:38:5d:68:13:4c:1b:96:3e:81:e2:9e: f7:6e:60:b8:82:2e:6b:6e:88:f7:42:96:e4:48:13:7c:8a:a7: 0c:9d:a0:d2:21:82:b0:f6:c4:2e:9d:ab:13:73:50:bc:a9:09: be:01:92:3c:46:e1:2b:50:07:a3:c6:c5:7c:bb:72:db:8d:dd: 86:18:b1:fa:73:3f:7f:b8:c8:aa:74:e0:b5:e6:a1:21:26:02: 16:45:d3:0d:44:e6:0b:c3:ac:88:f9:2e:ee:59:0b:b5:a7:c3: 1b:24:e0:46:da:74:d9:54:e5:63:bd:8c:a4:27:59:51:d9:ef: db:12:6c:df:bc:87:72:d4:0e:db:5a:95:d2:07:32:5c:5c:bf: 77:ef:02:a4:dc:03:7f:67:a3:aa:72:db:3d:83:77:23:bf:a6: f6:1a:37:ed:4d:d5:a2:c2:b3:82:cc:c8:77:7c:88:ca:66:a4: d8:2c:ec:a3:ce:69:ab:f6:7a:61:42:23:73:e2:78:1a:ea:1c: 05:ef:33:5a:08:a5:af:61:a9:e1:9d:52:ee:44:aa:cb:fd:8c: 69:8a:d9:62:c2:7c:b5:5a:b0:ef:8c:9a:71:ac:ad:14:a8:3c: 83:d8:ac:ea:65:16:bf:7e:51:8b:a8:be:bd:5c:5c:e8:74:15: 28:64:b5:0b -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAnj9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyODEzNDYzNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0UwM0MxMTAvBgNVBAUTKEQwOEMzNkUyNkYyNEZCOUQ1MTRGM0I0 MEE4RTM3QTlBMDRCNTgwMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBD6lyWfujk4NU+SVlG1s0emPye7Ru4XV45cKs3gNng0L0O793B2fYRSYZIeKy o4W0SEXVLeH9oE2voPiEiMRKPV3elldwythIkUJ5jRz4biw9Ba/8+xDfdeQgH/C/ vrZv88Ep8n10Fc6hFQGiHrtX4S5o5Ibm8+xLFONKiJudab43tcFo+UfYVqtRmpKS rMIpfX9F8rSZbmSXJ8YiX1bxAw1byrC3YuQyfOGOkj7eH+qCbPVEZJUOhuzknwPB kclj9H94YB8JTWt215cRlfPdcKyae3gSZ3Ujjlf9X89CVWGT4SNEJBjs8py7iUk0 2td0UWy1K/AXDyDOVX7rl0rpAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQU0Iw24m8k +51RTztAqON6mgS1gCUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNFMDNDL0I2RTBGNEFBMUQ5QTExRTI4OTIxMjk4ODA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzRTAzQy9CNkUwRjRBQTFEOUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04 ay01MVJUenRBcU9ONm1nUzFnQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALG8MEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCe2xoAwQCy1mc AwQAy3bzAwQAy9mNMA0EAgACMAcDBQAkAu4AMA0GCSqGSIb3DQEBCwUAA4IBAQC5 GwUTl4wiOF1oE0wblj6B4p73bmC4gi5rboj3QpbkSBN8iqcMnaDSIYKw9sQunasT c1C8qQm+AZI8RuErUAejxsV8u3Lbjd2GGLH6cz9/uMiqdOC15qEhJgIWRdMNROYL w6yI+S7uWQu1p8MbJOBG2nTZVOVjvYykJ1lR2e/bEmzfvIdy1A7bWpXSBzJcXL93 7wKk3AN/Z6Oqcts9g3cjv6b2GjftTdWiwrOCzMh3fIjKZqTYLOyjzmmr9nphQiNz 4nga6hwF7zNaCKWvYanhnVLuRKrL/Yxpitliwny1WrDvjJpxrK0UqDyD2KzqZRa/ flGLqL69XFzodBUoZLUL -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:29 2025 by rpki-client