This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer File: BYQh3nB4BzBHPlzFRboK5dubTAo.cer (raw, json) Hash identifier: mso1/cxlewoJroibday8VKgBRXDKyTiVX6OS4v1cgXY= Subject key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273E6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 15:43:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 137470 IP: 202.3.0.0 -- 202.3.5.255 IP: 203.13.216.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160742 (0x273e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 15:43:45 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:0f:9a:d4:8f:17:fb:38:ca:ab:f1:6b:e6: 1b:9f:5c:71:2b:d9:8b:22:b1:c2:d3:40:fd:af:3f: 60:c0:76:93:9b:ce:d6:2a:d6:a1:f3:2c:34:ae:0e: 46:30:31:2a:9d:81:9b:d0:6e:a2:df:6c:f3:1d:fa: 12:e4:b3:2a:d7:a2:22:06:92:ca:29:15:b4:16:83: d5:dd:9a:95:66:84:7f:6c:19:2f:ba:22:6c:a5:b3: 24:45:5d:ed:cd:f2:4d:ca:45:6b:7f:fc:08:18:69: d1:12:c1:c8:2e:2e:21:a3:65:f4:9c:7c:00:5a:d1: d4:c8:c0:64:b9:88:bc:5f:46:40:13:bf:42:a8:9b: 21:ec:86:1d:fa:10:80:a2:2b:ce:96:c7:b7:40:12: 1e:3b:1d:e3:9f:87:fe:99:8c:d1:04:ca:f2:79:1e: 25:cb:a6:00:c3:63:e4:8d:55:4e:c0:9e:46:bc:72: 7a:e6:0b:4c:6b:0c:54:b0:69:d7:09:b3:79:c1:c8: a3:72:58:9f:ad:ae:52:50:d4:36:a9:de:31:fd:d1: 46:0d:6b:3e:81:7f:e2:57:7f:a1:bd:f9:1d:d5:82: 49:fb:01:1d:1c:4c:f7:e8:48:79:0c:54:ab:41:b4: 87:d2:4b:c1:bc:d9:d8:61:aa:f5:30:14:0b:41:09: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137470 sbgp-ipAddrBlock: critical IPv4: 202.3.0.0-202.3.5.255 203.13.216.0/22 Signature Algorithm: sha256WithRSAEncryption 15:c5:e1:02:74:ab:e5:88:b3:29:36:5a:01:f0:40:56:3f:6b: b7:55:cb:ce:a7:f8:5b:78:63:c8:c5:43:86:13:07:b8:89:11: 13:e8:df:7c:13:ca:3a:dc:89:dd:55:39:49:51:88:f7:63:fe: d6:79:05:dd:34:08:ce:21:e1:aa:c9:cf:e3:d2:da:74:87:c1: 89:b8:a8:5b:6b:85:05:51:2f:a9:23:45:17:40:b5:b7:88:26: 9f:e1:e9:49:f4:17:ed:58:08:53:0c:ad:26:fd:9c:39:1b:94: a6:63:08:c5:fa:2d:e9:8a:b4:22:e6:0c:f6:c5:d6:ba:bb:f1: 83:2d:04:5f:72:b6:80:ca:46:32:7e:14:af:d1:bb:a7:b5:54: b9:29:07:fa:77:ca:a1:89:c9:2c:b5:5b:6d:5d:cd:50:c6:97: 1e:84:0b:e0:42:b5:61:ef:b3:ce:c5:0a:f7:1d:52:09:bb:05: 8c:89:3a:40:fa:fe:11:b3:17:d5:1e:5a:d3:69:8d:0c:57:06: 4e:e9:d5:cc:72:bf:e9:6d:9b:5e:64:69:81:9b:de:0d:03:e1: b8:8c:85:66:d9:5d:1e:e6:2f:2b:ff:39:d3:b7:ef:9d:0d:c2: 7e:be:6a:5f:24:1c:48:a3:dc:65:3a:f4:35:3b:0c:a2:0b:70: da:14:f5:a1 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgIDAnPmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzE1NDM0NVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUND NTQ1QkEwQUU1REI5QjRDMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLuA+a1I8X+zjKq/Fr5hufXHEr2YsiscLTQP2vP2DAdpObztYq1qHzLDSuDkYw MSqdgZvQbqLfbPMd+hLksyrXoiIGksopFbQWg9XdmpVmhH9sGS+6ImylsyRFXe3N 8k3KRWt//AgYadESwcguLiGjZfScfABa0dTIwGS5iLxfRkATv0KomyHshh36EICi K86Wx7dAEh47HeOfh/6ZjNEEyvJ5HiXLpgDDY+SNVU7Anka8cnrmC0xrDFSwadcJ s3nByKNyWJ+trlJQ1Dap3jH90UYNaz6Bf+JXf6G9+R3Vgkn7AR0cTPfoSHkMVKtB tIfSS8G82dhhqvUwFAtBCXUZAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUBYQh3nB4 BzBHPlzFRboK5dubTAowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg2MkY3LzVFQUM2MTQ0OEZBNjExRUE5QUNCN0U3RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25C NEJ6QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhj+MCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwDKAwMEAcoD BAMEAssN2DANBgkqhkiG9w0BAQsFAAOCAQEAFcXhAnSr5YizKTZaAfBAVj9rt1XL zqf4W3hjyMVDhhMHuIkRE+jffBPKOtyJ3VU5SVGI92P+1nkF3TQIziHhqsnP49La dIfBibioW2uFBVEvqSNFF0C1t4gmn+HpSfQX7VgIUwytJv2cORuUpmMIxfot6Yq0 IuYM9sXWurvxgy0EX3K2gMpGMn4Ur9G7p7VUuSkH+nfKoYnJLLVbbV3NUMaXHoQL 4EK1Ye+zzsUK9x1SCbsFjIk6QPr+EbMX1R5a02mNDFcGTunVzHK/6W2bXmRpgZve DQPhuIyFZtldHuYvK/8507fvnQ3Cfr5qXyQcSKPcZTr0NTsMogtw2hT1oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:08 2025 by rpki-client