This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer File: A2exVIJlFyUqY-y0w4aTXLe9NA4.cer (raw, json) Hash identifier: QpvfzJh6IN3GwMm+6UYEtp70Dg00mMZGXqOWkE2JYlE= Subject key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027539 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft caRepository: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 14 Nov 2025 13:28:36 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 148988 IP: 103.175.123.0/24 IP: 2001:df7:f480::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161081 (0x27539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 14 13:28:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:4a:9c:21:2f:fc:e4:31:11:b9:38:d7:79: 99:05:3a:97:21:58:d9:e6:68:39:84:7a:f2:43:07: 11:39:50:12:1b:21:e6:53:55:b6:37:44:dc:bc:39: 91:66:c9:43:64:c3:c1:f7:db:ce:ae:e4:30:f2:d7: d3:d4:52:59:ea:34:f6:bd:37:29:01:f0:cc:cd:e7: 3d:51:38:61:d0:2c:e4:cd:3f:af:d2:c8:da:33:41: 73:22:23:ed:3a:37:03:9d:b5:8b:11:0d:37:61:4f: 5b:2e:15:0c:c9:83:e0:a0:34:7b:e8:f7:4e:c8:94: 1c:83:3d:e8:03:63:08:79:cf:f3:59:bf:a1:3a:3d: 3c:16:67:89:e4:4b:f7:72:eb:94:1f:eb:28:d2:6b: 4f:2e:b0:d2:c6:02:d0:a8:f9:ee:52:4b:2b:27:03: a5:0d:9e:ce:2e:8c:4d:a4:ea:a5:a2:fb:78:d8:93: c5:72:2f:60:ab:d6:d4:74:54:5f:b1:69:0c:2e:7b: 52:c9:d1:a2:a8:fb:a9:c2:5f:c5:8d:00:59:9a:4a: fb:16:1c:fb:bb:cf:e1:22:e8:ca:dd:bc:a3:52:9b: ea:73:85:a5:5c:2c:43:9b:b2:cc:fe:e5:44:a0:22: e5:b9:2a:1f:a2:05:3f:c0:7b:75:e9:5c:c4:49:98: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 148988 sbgp-ipAddrBlock: critical IPv4: 103.175.123.0/24 IPv6: 2001:df7:f480::/48 Signature Algorithm: sha256WithRSAEncryption 18:a6:a0:8b:db:16:ad:72:19:a2:88:0e:12:2f:2f:e9:5e:d5: aa:cd:a4:21:55:34:b2:69:7f:f3:d3:2f:08:57:be:b0:b3:2b: 85:7e:8f:72:93:b9:25:ef:91:86:3a:12:6b:0b:71:ea:78:7a: 38:5e:10:2f:a4:93:81:02:83:ad:31:4f:83:54:14:cc:0e:05: 92:b3:33:47:7e:f9:92:d3:e5:d7:e5:07:2b:24:8b:ef:63:5e: ce:1e:91:bd:63:13:7d:84:7f:fd:a2:b8:45:46:a4:8b:75:1d: 83:93:a4:a0:1c:51:09:17:90:e5:86:1d:f1:88:fd:15:a6:97: 35:f4:81:a9:98:8a:39:d7:ec:32:02:af:dc:a1:5c:27:4c:b3: df:c2:c6:1b:4e:e4:dd:15:7d:fd:1d:1b:26:90:7d:cf:b6:fa: 4a:55:48:78:08:1d:e1:1d:85:25:52:52:50:21:d8:72:31:ec: 89:3e:5d:4a:f1:ec:b5:b6:9e:07:1a:af:42:db:ae:14:d4:37: 2b:9d:19:3e:38:50:b6:a9:26:ef:1c:d2:27:7e:19:70:d7:d4: 38:2b:33:ba:85:8c:69:28:86:75:ad:47:3f:f4:bd:b6:17:11: 71:bb:a9:6e:84:8f:41:18:0f:fa:b5:6c:3d:a9:36:b7:6d:73: 73:4e:75:63 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnU5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNDEzMjgzNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNC NEMzODY5MzVDQjdCRDM0MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnYkqcIS/85DERuTjXeZkFOpchWNnmaDmEevJDBxE5UBIbIeZTVbY3RNy8OZFm yUNkw8H3286u5DDy19PUUlnqNPa9NykB8MzN5z1ROGHQLOTNP6/SyNozQXMiI+06 NwOdtYsRDTdhT1suFQzJg+CgNHvo907IlByDPegDYwh5z/NZv6E6PTwWZ4nkS/dy 65Qf6yjSa08usNLGAtCo+e5SSysnA6UNns4ujE2k6qWi+3jYk8VyL2Cr1tR0VF+x aQwue1LJ0aKo+6nCX8WNAFmaSvsWHPu7z+Ei6MrdvKNSm+pzhaVcLEObssz+5USg IuW5Kh+iBT/Ae3XpXMRJmNoNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUA2exVIJl FyUqY+y0w4aTXLe9NA4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNDQTkwLzI1RTNCQkI0NTJFQjExRUM4OTY5RTc0NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzQ0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklK bEZ5VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkX8MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ697MA8EAgAC MAkDBwAgAQ339IAwDQYJKoZIhvcNAQELBQADggEBABimoIvbFq1yGaKIDhIvL+le 1arNpCFVNLJpf/PTLwhXvrCzK4V+j3KTuSXvkYY6EmsLcep4ejheEC+kk4ECg60x T4NUFMwOBZKzM0d++ZLT5dflByski+9jXs4ekb1jE32Ef/2iuEVGpIt1HYOTpKAc UQkXkOWGHfGI/RWmlzX0gamYijnX7DICr9yhXCdMs9/CxhtO5N0Vff0dGyaQfc+2 +kpVSHgIHeEdhSVSUlAh2HIx7Ik+XUrx7LW2ngcar0LbrhTUNyudGT44ULapJu8c 0id+GXDX1DgrM7qFjGkohnWtRz/0vbYXEXG7qW6Ej0EYD/q1bD2pNrdtc3NOdWM= -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:20 2025 by rpki-client