This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.cer (raw, json) Hash identifier: mHCdqk6q4umil8haOB7qvTLfu7KAcp05gswT3rustuM= Subject key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276BE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 23:05:49 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 150801 IP: 103.108.50.0/24 IP: 2001:df7:bc80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161470 (0x276be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 23:05:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:a2:03:a6:59:f6:f1:00:9f:6b:85:5e:26: e4:31:5c:dd:30:b1:b1:80:10:ea:41:4c:b7:d0:e6: bc:b5:fa:2e:67:f5:99:ca:92:93:05:dc:76:b7:0d: c1:2c:b8:22:07:2c:de:15:67:08:b0:a0:6c:50:06: 85:cd:88:ee:5e:11:95:70:67:d6:ca:d9:d1:c6:fa: ef:76:f3:53:36:60:e5:ef:a3:cd:6e:a7:9f:9e:a0: c8:16:34:22:4a:53:46:d0:02:c1:0a:2c:a1:db:a0: 4a:2c:9c:1e:ce:eb:03:78:71:f0:72:51:d3:e2:e8: 02:65:da:bb:8b:a8:83:b2:15:29:83:2b:d8:12:4e: 66:6b:e3:84:78:b0:4f:06:fe:52:b3:da:f3:ca:ed: d5:92:2f:90:ea:bf:fb:1b:fb:69:d6:3a:0f:fd:cf: a0:0b:47:23:27:cf:92:b9:5a:65:fc:d8:fc:b9:26: 94:6d:2c:32:16:d0:bc:fa:a6:c2:c6:16:c7:cf:1c: cf:44:82:34:da:4d:aa:5f:e0:1f:13:37:80:50:6b: 60:0c:48:62:9d:b3:57:70:af:b8:58:56:65:fc:36: d8:6e:6f:e6:82:5f:a4:5d:b6:92:45:c1:02:f3:09: 0b:b9:14:dc:d3:b9:58:87:9e:ec:ff:41:65:3f:af: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150801 sbgp-ipAddrBlock: critical IPv4: 103.108.50.0/24 IPv6: 2001:df7:bc80::/48 Signature Algorithm: sha256WithRSAEncryption 91:9a:33:87:7d:77:bb:ee:9f:21:cf:f2:66:c3:04:bf:16:72: 3d:bd:62:7b:cb:b6:08:b1:4f:6e:4d:02:4a:e9:18:9d:ce:6a: 5c:f0:54:f8:df:9e:5c:2a:41:39:95:80:78:6b:a8:da:64:62: d0:a9:c0:ea:dd:f0:3a:da:0e:ad:72:6e:d2:17:be:d9:ab:8d: 43:a9:0c:e8:a3:1d:86:59:fc:0b:c4:84:61:6a:9f:0d:c7:97: 71:8f:56:8f:c5:6b:d3:0a:82:26:57:a2:a9:33:de:ef:06:a2: 9f:69:16:95:f8:11:b0:72:ab:b8:a4:3b:0c:9a:fe:33:b5:6d: 96:e2:1a:49:8c:61:e1:27:e6:ff:a8:9f:1a:f2:77:fe:cc:eb: 77:13:58:18:e4:8c:7b:4c:c8:2e:20:1e:0d:8b:25:9a:f6:d2: c0:46:12:60:a2:c5:36:ba:63:c0:2d:9d:69:1a:01:6e:9f:40: bf:e4:d4:9f:6f:d2:2e:99:03:f8:81:4b:fd:7d:f1:a3:c3:15: 2c:3f:fc:70:ad:24:0a:b6:ec:f9:17:ac:10:bf:2b:48:70:9a: b6:d7:40:2f:9a:8e:b9:a0:c1:74:c2:5e:8c:4a:a4:40:3b:47: 87:2b:ba:96:e5:d6:24:5a:ac:9f:9d:63:6e:f4:50:15:4f:2e: ff:66:84:9a -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAna+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDIzMDU0OVoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTk4QjExMTAvBgNVBAUTKEUzMjY1RjQxMURDQkIwRjExNzQ4NTIz ODZFODE3RkUyNzhEMkY5MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz3aIDpln28QCfa4VeJuQxXN0wsbGAEOpBTLfQ5ry1+i5n9ZnKkpMF3Ha3DcEs uCIHLN4VZwiwoGxQBoXNiO5eEZVwZ9bK2dHG+u9281M2YOXvo81up5+eoMgWNCJK U0bQAsEKLKHboEosnB7O6wN4cfByUdPi6AJl2ruLqIOyFSmDK9gSTmZr44R4sE8G /lKz2vPK7dWSL5Dqv/sb+2nWOg/9z6ALRyMnz5K5WmX82Py5JpRtLDIW0Lz6psLG FsfPHM9EgjTaTapf4B8TN4BQa2AMSGKds1dwr7hYVmX8Nthub+aCX6RdtpJFwQLz CQu5FNzTuViHnuz/QWU/ryphAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU4yZfQR3L sPEXSFI4boF/4njS+Q4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU5OEIxLzcyMDI3NkIwQzY2NTExRjA5QTkwM0UzN0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1OThCMS83MjAyNzZCMEM2NjUxMUYwOUE5MDNFMzdDNEY5QUUwMi80eVpmUVIz THNQRVhTRkk0Ym9GXzRualMtUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAk0RMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ2wyMA8EAgAC MAkDBwAgAQ33vIAwDQYJKoZIhvcNAQELBQADggEBAJGaM4d9d7vunyHP8mbDBL8W cj29YnvLtgixT25NAkrpGJ3OalzwVPjfnlwqQTmVgHhrqNpkYtCpwOrd8DraDq1y btIXvtmrjUOpDOijHYZZ/AvEhGFqnw3Hl3GPVo/Fa9MKgiZXoqkz3u8Gop9pFpX4 EbByq7ikOwya/jO1bZbiGkmMYeEn5v+onxryd/7M63cTWBjkjHtMyC4gHg2LJZr2 0sBGEmCixTa6Y8AtnWkaAW6fQL/k1J9v0i6ZA/iBS/198aPDFSw//HCtJAq27PkX rBC/K0hwmrbXQC+ajrmgwXTCXoxKpEA7R4crupbl1iRarJ+dY270UBVPLv9mhJo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:35:53 2025 by rpki-client