This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer File: C9usFSJfG_m2FLKjR6G5bEoPlpw.cer (raw, json) Hash identifier: oYz1H7thARGJgiyPp8jKWgHifmptlnoh/4+JZcsjkJU= Subject key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A22 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft caRepository: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 17:01:28 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 38305 IP: 202.14.106.0/24 IP: 202.27.239.0/24 IP: 202.37.99.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162338 (0x27a22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 17:01:28 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:20:a3:49:89:f2:52:d5:e8:be:12:5f:99: d9:0c:0d:fc:dd:c8:29:55:57:77:1f:39:a9:15:52: 4a:3b:74:fe:ef:eb:61:ea:35:9f:22:c0:45:a8:ec: bf:63:16:ff:be:10:c4:b9:00:27:08:89:c7:55:f2: 70:5d:2d:c0:0c:13:c0:ef:6d:06:0a:80:f8:a9:37: af:a6:6d:21:26:34:cc:2f:57:07:ca:bc:08:be:2c: 80:18:27:d7:2b:26:c7:88:35:47:f7:69:c6:ae:6d: 8c:c9:64:03:ee:ff:1e:82:28:f8:a3:2b:9d:1c:78: b3:20:80:9f:80:1d:ed:84:c4:aa:37:ab:da:c1:6c: 7e:7a:cd:fb:51:fb:d5:44:70:52:b5:2a:86:e1:07: 35:0b:01:50:82:4e:70:ba:15:ad:6e:18:0d:d0:68: e8:d4:20:79:40:56:2f:92:74:04:4e:24:95:eb:3a: 86:5d:07:51:52:37:1b:c7:e0:24:6c:13:57:b0:22: 65:ed:0c:d5:55:d5:d5:03:8c:6c:9f:11:32:3a:57: 8e:14:cb:5e:a0:e5:d0:26:5d:5f:a3:7c:07:d5:74: 69:3c:45:31:b5:02:5e:0e:fd:6d:a8:fd:fe:4e:88: f2:c4:95:b8:a4:13:7b:c9:ae:ff:26:97:ae:f0:ba: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38305 sbgp-ipAddrBlock: critical IPv4: 202.14.106.0/24 202.27.239.0/24 202.37.99.0/24 Signature Algorithm: sha256WithRSAEncryption 45:31:79:a2:5b:ac:57:4a:e9:9e:40:19:e9:d6:ae:69:64:81: 5e:b8:e2:73:22:0b:f6:59:f9:93:3f:4f:62:ff:64:a7:03:bf: 08:7c:db:d6:78:7c:ec:57:09:71:2f:ce:13:7e:1b:42:d3:6d: f3:07:ec:9f:cb:87:e9:07:ff:ec:f8:f1:28:12:13:67:50:c6: c1:c5:a3:77:0e:3b:1d:db:ad:ee:12:9a:6a:2f:f0:ed:22:5e: 20:44:8d:f6:a4:a1:08:09:47:72:d6:37:88:63:9f:dc:49:43: e9:e7:c4:1d:65:19:00:cb:fb:64:f8:62:96:7e:15:ef:9c:70: 44:f1:97:8d:1d:09:96:a9:af:6c:be:5c:0b:22:cb:e5:69:d1: 80:bc:6d:e3:9e:b1:97:08:ba:18:91:f7:bb:82:b0:e4:ff:b3: 01:ea:1e:15:bc:90:7f:94:2f:f1:ed:7e:6e:2a:a4:23:39:24: c4:fd:6d:77:32:82:f6:7a:73:4d:be:50:c7:74:e5:f2:7a:45: c0:6f:37:b7:23:df:c6:72:97:85:81:bd:c0:3c:70:95:78:28: 13:86:7e:3e:6c:e8:31:3e:34:ab:18:04:2f:3a:a1:2f:b2:35: 9d:a4:4e:3b:a0:71:6d:33:34:4d:39:49:ea:02:69:00:b3:d4: 79:60:8a:7e -----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgIDAnoiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTE3MDEyOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJB MzQ3QTFCOTZDNEEwRjk2OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWoiCjSYnyUtXovhJfmdkMDfzdyClVV3cfOakVUko7dP7v62HqNZ8iwEWo7L9j Fv++EMS5ACcIicdV8nBdLcAME8DvbQYKgPipN6+mbSEmNMwvVwfKvAi+LIAYJ9cr JseINUf3acaubYzJZAPu/x6CKPijK50ceLMggJ+AHe2ExKo3q9rBbH56zftR+9VE cFK1KobhBzULAVCCTnC6Fa1uGA3QaOjUIHlAVi+SdAROJJXrOoZdB1FSNxvH4CRs E1ewImXtDNVV1dUDjGyfETI6V44Uy16g5dAmXV+jfAfVdGk8RTG1Al4O/W2o/f5O iPLElbikE3vJrv8ml67wugx1AgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQUC9usFSJf G/m2FLKjR6G5bEoPlpwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVGREE3LzRGNDgxQUM4RkQyOTExRUVBNjI5QUU2MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNK ZkdfbTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJWhMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAyg5qAwQAyhvv AwQAyiVjMA0GCSqGSIb3DQEBCwUAA4IBAQBFMXmiW6xXSumeQBnp1q5pZIFeuOJz Igv2WfmTP09i/2SnA78IfNvWeHzsVwlxL84TfhtC023zB+yfy4fpB//s+PEoEhNn UMbBxaN3Djsd263uEppqL/DtIl4gRI32pKEICUdy1jeIY5/cSUPp58QdZRkAy/tk +GKWfhXvnHBE8ZeNHQmWqa9svlwLIsvladGAvG3jnrGXCLoYkfe7grDk/7MB6h4V vJB/lC/x7X5uKqQjOSTE/W13MoL2enNNvlDHdOXyekXAbze3I9/GcpeFgb3APHCV eCgThn4+bOgxPjSrGAQvOqEvsjWdpE47oHFtMzRNOUnqAmkAs9R5YIp+ -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:07 2025 by rpki-client