This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer (raw, json) Hash identifier: v3xTrPKlUP8UxsOYE9BPiLpcRntiaTedBOTKzW+uTGo= Subject key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0281E0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 13:51:12 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 152139 IP: 210.87.70.0/23 IP: 2001:df3:3e40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164320 (0x281e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 30 13:51:12 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:a8:c3:19:54:b8:a7:fc:4b:4b:19:dc:a9: 36:81:c8:b1:48:e3:5c:d2:46:2f:50:51:47:2c:c9: 5c:c3:fa:cd:f0:d8:0f:72:aa:1f:4d:19:46:bd:34: d5:37:40:73:a3:2e:41:2b:f8:d1:50:96:f7:01:a5: 9c:5d:3b:ac:db:dc:ab:55:1a:70:f6:4f:8b:e1:70: 7f:c4:eb:4a:d7:0f:7a:87:ca:13:aa:a1:60:93:54: 54:a8:71:de:f4:0e:b9:f9:75:33:6a:cb:83:a7:23: a3:2d:ed:e6:0c:9d:5c:39:f1:bd:2c:11:e9:65:a2: 6a:2c:1f:30:5f:07:72:87:81:b6:bd:ec:a0:0d:8a: c0:ab:b7:26:8c:f3:0e:6d:a3:23:10:ab:4b:36:95: 08:41:25:3b:c1:ab:ee:e2:70:7d:67:93:08:27:a8: 42:4a:2a:39:4e:b3:aa:33:23:5e:ce:01:82:5b:8e: c7:ef:dc:5b:3f:00:28:f4:16:b0:8d:10:2d:46:b6: 2e:c1:7e:89:d5:a6:ea:63:6c:80:93:74:7c:ae:a5: 63:c2:65:98:ce:dd:f8:0b:54:88:26:1f:ae:6c:e5: 64:97:45:77:66:e0:49:0d:74:1b:b8:33:32:5f:60: c8:e6:47:cf:77:ae:34:40:ff:85:09:72:bf:4a:5b: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152139 sbgp-ipAddrBlock: critical IPv4: 210.87.70.0/23 IPv6: 2001:df3:3e40::/48 Signature Algorithm: sha256WithRSAEncryption c1:dd:46:4d:5d:d3:7f:15:bd:3c:10:03:fc:7b:80:aa:df:db: 2e:04:ab:df:af:f2:45:4f:15:4d:60:2f:c6:80:65:d9:3a:e4: 17:e2:77:29:fa:1b:83:4c:dd:7c:0f:bd:97:b0:bc:67:70:a7: 39:f4:45:4c:e2:03:23:24:9f:28:c8:6e:25:0b:87:90:44:1d: 24:8e:2f:84:3c:03:44:29:9f:d9:43:e9:f2:2c:af:cc:61:f3: d2:40:67:c0:22:07:8e:3d:64:d4:9d:74:df:3a:b7:8e:7f:aa: 3c:03:47:f5:0d:18:46:45:6c:be:6d:25:1a:02:3b:10:67:91: 09:5f:9c:26:41:a5:30:27:c8:09:a1:05:8b:f3:23:2f:4c:ac: 18:12:94:16:7e:43:fc:6f:df:f3:8b:ed:7c:27:d4:44:8e:cb: a9:60:f9:28:e1:ca:e0:58:2d:f5:3d:99:c4:17:2e:f7:cd:0e: 90:c0:0e:e5:b6:d9:8f:16:c5:df:b1:d4:1d:e5:a0:41:73:f2: 3b:de:0f:d1:e5:b4:a3:c1:85:df:da:73:f7:91:68:7f:34:4c: eb:47:5c:09:e7:69:64:4a:27:d8:c0:96:2c:45:42:57:a0:2b: 76:f6:a9:0a:7e:62:aa:cc:70:b8:01:84:5f:af:43:b8:42:2c: eb:2a:5e:49 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoHgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMDEzNTExMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQTJDNUQxMTAvBgNVBAUTKDA4Nzc3RkEzODFCRjI1OEUwQ0FDMzdE NTA5RUYwQkFDNzA2NjQ4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuUajDGVS4p/xLSxncqTaByLFI41zSRi9QUUcsyVzD+s3w2A9yqh9NGUa9NNU3 QHOjLkEr+NFQlvcBpZxdO6zb3KtVGnD2T4vhcH/E60rXD3qHyhOqoWCTVFSocd70 Drn5dTNqy4OnI6Mt7eYMnVw58b0sEellomosHzBfB3KHgba97KANisCrtyaM8w5t oyMQq0s2lQhBJTvBq+7icH1nkwgnqEJKKjlOs6ozI17OAYJbjsfv3Fs/ACj0FrCN EC1Gti7BfonVpupjbICTdHyupWPCZZjO3fgLVIgmH65s5WSXRXdm4EkNdBu4MzJf YMjmR893rjRA/4UJcr9KW01tAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUCHd/o4G/ JY4MrDfVCe8LrHBmSEQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEyQzVELzNCOURENDEwOTJDNDExRUVCNTIxQkI0OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBMkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRH X0pZNE1yRGZWQ2U4THJIQm1TRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlJLMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB0ldGMA8EAgAC MAkDBwAgAQ3zPkAwDQYJKoZIhvcNAQELBQADggEBAMHdRk1d038VvTwQA/x7gKrf 2y4Eq9+v8kVPFU1gL8aAZdk65Bfidyn6G4NM3XwPvZewvGdwpzn0RUziAyMknyjI biULh5BEHSSOL4Q8A0Qpn9lD6fIsr8xh89JAZ8AiB449ZNSddN86t45/qjwDR/UN GEZFbL5tJRoCOxBnkQlfnCZBpTAnyAmhBYvzIy9MrBgSlBZ+Q/xv3/OL7Xwn1ESO y6lg+SjhyuBYLfU9mcQXLvfNDpDADuW22Y8Wxd+x1B3loEFz8jveD9HltKPBhd/a c/eRaH80TOtHXAnnaWRKJ9jAlixFQlegK3b2qQp+YqrMcLgBhF+vQ7hCLOsqXkk= -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:50 2026 by rpki-client