This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer File: 3oFz59KP6tHsOpLJdljacyhQk-U.cer (raw, json) Hash identifier: fpX8velzwFikp4FC6+lXkKsY9O7w3c1ju3q6FL+HL2k= Subject key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286CA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft caRepository: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 16 Jan 2026 13:22:25 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134474 IP: 103.160.66.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165578 (0x286ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 16 13:22:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A917C11A, serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:14:19:1d:17:86:2f:67:c3:9a:63:1d:46: dd:a0:4a:a1:3c:44:38:9c:72:1f:58:33:94:66:f8: 80:ec:9a:d9:0f:39:cb:e6:88:51:39:2c:0c:1e:e6: 76:49:02:03:60:d9:88:87:cd:0c:1b:37:50:3f:2c: c7:29:c4:a6:30:91:e7:59:78:40:93:27:d5:94:a4: 2e:88:d6:9c:e0:1b:36:38:68:8a:87:3b:5d:cd:39: 4b:45:65:ad:b4:4f:95:c5:92:1b:f5:cd:fb:0a:1f: e0:70:bf:eb:e1:ff:17:32:27:5f:e0:ad:4e:16:6d: 3e:4c:6a:02:44:e3:6c:54:87:e9:4f:a5:d9:a0:25: 4c:67:d3:a9:97:b5:5b:dd:27:ca:93:da:97:60:95: 23:1f:8f:d1:9e:ba:0f:f9:ca:39:75:0f:b4:b3:af: b2:da:5d:f4:96:69:b0:39:b4:d3:85:18:cb:2c:b1: b6:66:e3:a6:02:25:24:e8:a6:72:77:43:79:d5:54: 79:29:0f:94:b5:f4:ee:9b:61:16:c9:26:14:f4:62: 74:41:18:e4:e1:d1:2a:35:61:24:39:63:fb:c9:4e: a2:42:73:d3:ea:59:4f:c2:0e:32:09:9d:7f:de:c8: a0:1f:9b:22:c0:7a:e1:b0:1b:1f:70:09:4f:65:d4: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134474 sbgp-ipAddrBlock: critical IPv4: 103.160.66.0/23 Signature Algorithm: sha256WithRSAEncryption 34:90:e5:fb:b5:c0:82:ef:60:53:7a:4e:9d:52:57:16:e2:7c: 98:8a:54:13:9d:9a:1f:6f:0f:f7:ae:d4:f3:99:e4:d8:cf:ca: 17:d2:e6:43:f8:16:5c:bc:31:f8:ef:e2:e9:11:b2:95:22:0f: 76:a0:50:7b:cf:f4:97:72:8e:01:dd:03:60:0d:9c:1e:02:a4: 83:ca:7c:19:9c:fb:fa:77:9c:7f:8c:3c:3b:b3:dd:80:25:66: a5:5f:12:6a:f5:8e:b6:ce:ce:a2:0c:a6:2a:91:dc:d6:4b:6b: f3:17:46:31:a3:b1:6b:99:38:2b:50:ee:54:f9:f5:03:25:03: 4b:43:07:4b:00:cd:ab:de:96:e5:9d:63:c9:eb:e9:6e:94:f0: 45:22:29:31:b6:0e:27:e5:2a:0e:31:c9:da:cc:3f:13:f6:4c: 2a:42:b4:b3:bf:cb:91:32:1e:32:be:f2:c0:fa:49:27:6b:41: fe:75:7d:49:26:52:87:9e:b1:76:57:56:55:1a:dd:bd:cd:cb: bf:c8:98:0a:37:24:f9:e2:a0:98:df:7e:36:7f:b8:00:83:dd: d0:8f:0a:23:0c:0e:d8:c2:e8:81:bf:c2:b5:e4:48:0c:c2:d5: e8:01:5a:f6:ee:45:67:ce:d2:ac:29:16:19:bf:2d:69:64:34: 0f:e8:27:10 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAobKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNjEzMjIyNVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxN0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJD OTc2NThEQTczMjg1MDkzRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4UhQZHReGL2fDmmMdRt2gSqE8RDicch9YM5Rm+IDsmtkPOcvmiFE5LAwe5nZJ AgNg2YiHzQwbN1A/LMcpxKYwkedZeECTJ9WUpC6I1pzgGzY4aIqHO13NOUtFZa20 T5XFkhv1zfsKH+Bwv+vh/xcyJ1/grU4WbT5MagJE42xUh+lPpdmgJUxn06mXtVvd J8qT2pdglSMfj9Geug/5yjl1D7Szr7LaXfSWabA5tNOFGMsssbZm46YCJSTopnJ3 Q3nVVHkpD5S19O6bYRbJJhT0YnRBGOTh0So1YSQ5Y/vJTqJCc9PqWU/CDjIJnX/e yKAfmyLAeuGwGx9wCU9l1HypAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU3oFz59KP 6tHsOpLJdljacyhQk+UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdDMTFBL0MwODZFQTk4NUEzOTExRUI4RTU5QzI2NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlL UDZ0SHNPcExKZGxqYWN5aFFrLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg1KMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6BCMA0GCSqG SIb3DQEBCwUAA4IBAQA0kOX7tcCC72BTek6dUlcW4nyYilQTnZofbw/3rtTzmeTY z8oX0uZD+BZcvDH47+LpEbKVIg92oFB7z/SXco4B3QNgDZweAqSDynwZnPv6d5x/ jDw7s92AJWalXxJq9Y62zs6iDKYqkdzWS2vzF0Yxo7FrmTgrUO5U+fUDJQNLQwdL AM2r3pblnWPJ6+lulPBFIikxtg4n5SoOMcnazD8T9kwqQrSzv8uRMh4yvvLA+kkn a0H+dX1JJlKHnrF2V1ZVGt29zcu/yJgKNyT54qCY3342f7gAg93QjwojDA7YwuiB v8K15EgMwtXoAVr27kVnztKsKRYZvy1pZDQP6CcQ -----END CERTIFICATE-----Generated at Sun Jan 25 02:52:02 2026 by rpki-client