This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer File: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer (raw, json) Hash identifier: aDwmNPrdfJQ2us/ujT8WKZlN8BCqlFMOK3m3w0P9uIE= Subject key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02782B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 03:24:20 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: AS: 135356 AS: 135510 AS: 140542 IP: 45.251.104.0/21 IP: 103.150.28.0/24 IP: 103.215.0.0/22 IP: 103.220.72.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161835 (0x2782b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 03:24:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:99:b7:38:c3:0e:a1:ef:23:c7:9e:d4:0e: df:79:2f:e8:1a:7d:8d:a9:fc:85:81:a5:cb:b9:3f: 83:ba:27:2e:b4:39:48:17:6c:6b:f7:1b:8e:c1:5e: 08:91:5b:89:87:7e:56:a9:b9:88:a4:5c:4d:6f:7b: 18:f1:db:d0:8d:72:fc:a3:27:31:15:bf:98:89:31: 7b:46:9a:bd:ef:dc:bc:b0:1c:99:9e:0c:30:1d:d5: 1e:7f:c1:4f:b2:b7:7d:75:24:23:6b:99:2e:72:2b: 7a:48:49:96:bf:8e:0f:27:ab:b2:36:d9:fe:af:9f: 12:39:07:cf:cc:4b:04:06:64:6a:fa:e6:ca:53:a1: 77:7b:b2:9b:c7:d1:0f:e6:5a:29:26:3d:c6:e3:e8: 0f:28:61:db:5f:35:9d:ed:35:29:52:55:0e:1d:91: 4e:c2:72:00:8e:5b:4a:af:c2:cf:37:2b:f5:e2:c7: 3b:1b:ec:9a:6c:76:a7:72:0f:a6:33:f7:1d:f4:63: 79:18:34:b1:1b:ac:12:6f:0a:af:a7:96:38:55:2b: 89:1a:7f:05:a8:9f:2e:49:06:3d:70:58:28:32:11: e4:e3:1e:49:1b:05:82:fe:15:f8:1b:45:f4:d6:7d: 84:24:6f:b9:ca:58:37:21:45:fc:cb:62:09:19:23: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135356 135510 140542 sbgp-ipAddrBlock: critical IPv4: 45.251.104.0/21 103.150.28.0/24 103.215.0.0/22 103.220.72.0/21 Signature Algorithm: sha256WithRSAEncryption c6:59:d8:95:75:7c:c9:ef:b4:4c:3c:8b:86:15:53:63:35:27: 5a:63:e5:fd:3f:9f:3c:aa:d2:5d:9c:95:ce:59:22:b5:c1:23: 75:85:46:77:5b:77:6c:44:18:1f:66:ae:28:66:da:aa:24:eb: dc:4e:46:23:1b:52:78:03:2c:23:b4:88:6f:bc:02:11:7b:32: 8d:e1:10:11:93:5a:a8:bb:ce:f7:a0:aa:14:04:85:da:86:06: 90:27:6d:f6:03:d6:05:51:3a:dc:f3:43:68:00:ee:12:42:6f: 6a:b3:45:92:62:b6:70:0c:0a:b7:14:4b:39:a7:5e:37:31:38: 1c:b9:30:38:ff:0c:a4:0d:56:87:04:ca:f2:14:11:21:79:e0: 61:43:4a:9f:e9:64:3b:c8:0f:ae:01:aa:a4:ee:98:8b:94:d8: 60:23:5f:62:14:9d:a9:c8:15:ff:45:9c:a3:0f:ed:27:41:9c: 34:72:f6:48:d5:b8:87:6d:dc:60:52:f4:ee:8d:f6:a3:78:ea: 73:f5:d9:85:63:d3:0e:95:a3:c1:89:bb:53:da:68:8f:b5:f2: 00:1e:0e:ac:1d:b8:10:75:7f:83:fe:36:0a:a3:c2:1e:03:f6: 83:51:ee:16:e8:9e:98:a4:f9:3c:83:44:7a:fe:50:5a:f3:33: 65:18:a2:30 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIDAngrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjAzMjQyMFoXDTI2MDgzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTE4ODcxMTAvBgNVBAUTKEUwRTlCOTM5OUI4QTRBNUZEQ0RFMjA5 RkM1QkVDMDc4QUY5NUNGN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9vJm3OMMOoe8jx57UDt95L+gafY2p/IWBpcu5P4O6Jy60OUgXbGv3G47BXgiR W4mHflapuYikXE1vexjx29CNcvyjJzEVv5iJMXtGmr3v3LywHJmeDDAd1R5/wU+y t311JCNrmS5yK3pISZa/jg8nq7I22f6vnxI5B8/MSwQGZGr65spToXd7spvH0Q/m WikmPcbj6A8oYdtfNZ3tNSlSVQ4dkU7CcgCOW0qvws83K/Xixzsb7JpsdqdyD6Yz 9x30Y3kYNLEbrBJvCq+nljhVK4kafwWony5JBj1wWCgyEeTjHkkbBYL+FfgbRfTW fYQkb7nKWDchRfzLYgkZIxODAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQU4Om5OZuK Sl/c3iCfxb7AeK+Vz3swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUxODg3Lzg0RUU4QjYwMzU1MTExRUI5RjQxOTUwRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMTg4Ny84NEVFOEI2MDM1NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1 S1NsX2MzaUNmeGI3QWVLLVZ6M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAhC8AgMCEVYCAwIk/jAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAME Ay37aAMEAGeWHAMEAmfXAAMEA2fcSDANBgkqhkiG9w0BAQsFAAOCAQEAxlnYlXV8 ye+0TDyLhhVTYzUnWmPl/T+fPKrSXZyVzlkitcEjdYVGd1t3bEQYH2auKGbaqiTr 3E5GIxtSeAMsI7SIb7wCEXsyjeEQEZNaqLvO96CqFASF2oYGkCdt9gPWBVE63PND aADuEkJvarNFkmK2cAwKtxRLOadeNzE4HLkwOP8MpA1WhwTK8hQRIXngYUNKn+lk O8gPrgGqpO6Yi5TYYCNfYhSdqcgV/0Wcow/tJ0GcNHL2SNW4h23cYFL07o32o3jq c/XZhWPTDpWjwYm7U9poj7XyAB4OrB24EHV/g/42CqPCHgP2g1HuFuiemKT5PINE ev5QWvMzZRiiMA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:46 2025 by rpki-client