This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer File: 1BO-Gf_T9trcEjTNxhmyQy6oA08.cer (raw, json) Hash identifier: r+d3t5Zx3xzZViGADP9au67RGK7Fqs0LynkY0GpnB9U= Subject key identifier: D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279F5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft caRepository: rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 07:51:02 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 147297 IP: 2402:3be0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162293 (0x279f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 07:51:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91913D7, serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:5c:a6:e4:a3:74:49:fa:ce:c7:9c:92:fa: e5:c4:e7:49:2c:05:f3:82:5c:10:76:f7:84:62:34: b0:9d:00:bb:2c:e3:8f:7b:69:3f:f9:3a:65:0a:fd: 8c:fc:d3:da:b5:d2:97:32:bb:88:cd:9e:7c:b7:a3: 9c:c9:bd:9a:48:1e:bc:70:7f:7b:aa:8c:da:99:84: 68:2b:9d:18:e0:0c:69:b9:62:3e:02:07:4f:ca:b9: d0:8a:04:50:c3:11:07:62:ce:cf:5a:00:20:dd:94: 52:ad:77:69:a8:be:e3:5e:35:6d:3b:a8:9e:3f:9a: ca:a3:e9:05:a7:3f:3e:6e:b2:03:25:ea:64:4a:bb: 25:28:1a:68:25:8a:1e:25:9b:64:55:40:03:0f:c5: 95:3a:50:9e:7c:7b:3c:33:11:04:a5:20:5b:b7:dd: 10:72:ba:66:4d:51:e4:e5:80:3c:cb:f9:ad:eb:64: 5e:00:4e:75:57:49:8c:d8:18:03:42:c4:c0:9b:69: 0b:9f:40:e4:b6:7c:9c:f0:3b:98:97:e9:27:15:b5: bf:7c:2f:ee:8f:7d:7b:38:b4:81:a6:c6:67:2f:c3: 38:e1:73:ea:54:8e:e9:65:76:d3:2a:fa:0f:9f:73: 04:33:00:b9:b2:60:54:e4:82:a6:05:74:ab:69:82: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 147297 sbgp-ipAddrBlock: critical IPv6: 2402:3be0::/32 Signature Algorithm: sha256WithRSAEncryption 23:b4:e2:87:e7:b7:ea:b5:40:90:fb:c3:7f:b5:50:77:5b:1a: 74:61:25:59:d3:40:17:29:6e:7a:cb:0d:c7:f7:d2:5b:22:d6: ae:2a:75:a8:36:9d:03:14:01:48:96:1e:1e:68:c0:61:51:dd: 44:6a:6a:d1:db:e5:31:bd:d9:26:62:31:be:e4:0f:74:d3:6d: a4:23:8b:d6:2b:c2:10:78:97:37:dc:9b:b7:97:10:3b:d1:a3: 6e:99:4a:1d:60:fd:30:3d:73:81:4d:09:c7:a2:d2:1f:60:5e: 16:00:a2:8a:18:28:70:39:8b:66:db:09:d3:2a:e4:a8:07:f4: d1:aa:e9:8c:61:a2:0a:cc:90:b3:bc:ea:94:2b:45:e8:30:7a: cc:da:6f:2d:ae:b6:58:bf:cb:7e:7d:47:c8:2a:e9:54:e5:7e: e5:9f:9c:ff:0f:02:48:74:18:84:77:e1:73:36:b6:c8:46:30: b5:f6:1e:44:3c:1c:64:21:ab:45:77:48:75:e9:f6:8b:ea:4c: 8b:b3:c2:9c:5e:e5:b6:e4:02:56:55:ee:a4:77:cf:96:29:7f: 57:32:0f:32:a1:d6:a1:86:e0:54:58:ff:88:8d:c4:63:2a:62: a2:fd:c3:81:4b:01:88:d9:25:c4:4d:6c:41:0a:44:4a:44:14: ee:67:f3:84 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnn1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTA3NTEwMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTEzRDcxMTAvBgNVBAUTKEQ0MTNCRTE5RkZEM0Y2REFEQzEyMzRD REM2MTlCMjQzMkVBODAzNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk3lym5KN0SfrOx5yS+uXE50ksBfOCXBB294RiNLCdALss4497aT/5OmUK/Yz8 09q10pcyu4jNnny3o5zJvZpIHrxwf3uqjNqZhGgrnRjgDGm5Yj4CB0/KudCKBFDD EQdizs9aACDdlFKtd2movuNeNW07qJ4/msqj6QWnPz5usgMl6mRKuyUoGmglih4l m2RVQAMPxZU6UJ58ezwzEQSlIFu33RByumZNUeTlgDzL+a3rZF4ATnVXSYzYGANC xMCbaQufQOS2fJzwO5iX6ScVtb98L+6PfXs4tIGmxmcvwzjhc+pUjulldtMq+g+f cwQzALmyYFTkgqYFdKtpgrMlAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU1BO+Gf/T 9trcEjTNxhmyQy6oA08wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkxM0Q3Lzc5MTMyNEI4Q0U4QTExRjBBQjRCRDc2OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5MTNENy83OTEzMjRCOENFOEExMUYwQUI0QkQ3NjlDNEY5QUUwMi8xQk8tR2Zf VDl0cmNFalROeGhteVF5Nm9BMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAj9hMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAI74DANBgkq hkiG9w0BAQsFAAOCAQEAI7Tih+e36rVAkPvDf7VQd1sadGElWdNAFyluessNx/fS WyLWrip1qDadAxQBSJYeHmjAYVHdRGpq0dvlMb3ZJmIxvuQPdNNtpCOL1ivCEHiX N9ybt5cQO9GjbplKHWD9MD1zgU0Jx6LSH2BeFgCiihgocDmLZtsJ0yrkqAf00arp jGGiCsyQs7zqlCtF6DB6zNpvLa62WL/Lfn1HyCrpVOV+5Z+c/w8CSHQYhHfhcza2 yEYwtfYeRDwcZCGrRXdIden2i+pMi7PCnF7ltuQCVlXupHfPlil/VzIPMqHWoYbg VFj/iI3EYypiov3DgUsBiNklxE1sQQpESkQU7mfzhA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:54 2025 by rpki-client