This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer File: CViGFDhyEOi2mtPDGnNhnXVe0MA.cer (raw, json) Hash identifier: BDtvOdmxlEwnJuXZW5yGzg3wMUBZO7Kgm0+5b4C7e0Y= Subject key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A14 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft caRepository: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 15:06:25 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 137027 IP: 203.145.50.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162324 (0x27a14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 15:06:25 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:5c:2f:49:90:c0:4c:24:d8:5d:2f:b4:b5: 9a:68:b0:00:b3:2d:bb:9e:aa:3f:b7:c9:02:a4:3e: 01:40:34:9d:49:78:84:76:19:1c:63:eb:30:89:f8: 31:14:39:02:95:21:c6:54:b3:08:77:39:1b:e4:8b: 7f:f8:a0:9a:08:8d:6f:d9:cd:23:79:ca:a5:50:f3: 8e:e8:bb:66:80:98:54:b7:e9:66:d0:22:60:00:b3: b2:bd:f2:d7:f0:dd:81:07:58:be:f2:cd:1d:53:7c: 09:39:38:93:b1:79:18:5b:3d:8d:22:47:92:51:ff: 82:01:9a:57:9f:31:8e:2f:1c:b7:f0:a9:4d:64:5d: 1b:2b:6e:25:e5:e6:d9:07:b7:46:fa:1a:20:72:7f: 33:f5:fe:4f:ca:0f:3b:23:e9:04:4f:f0:2f:b4:4e: 66:96:f2:05:9a:e1:7e:f7:39:af:30:b9:6a:79:10: 31:87:d2:ab:d9:b6:77:00:9e:3a:52:d9:ff:a8:ec: 79:47:8e:9b:28:b1:8e:08:46:55:ca:e8:34:23:7c: 85:04:1f:a1:50:d3:a6:84:aa:74:97:9b:4b:19:e4: 6a:54:b1:67:ea:db:13:08:8f:84:cf:e6:85:c6:a1: f5:6b:ae:40:3e:19:61:cd:76:99:aa:73:9e:03:7b: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137027 sbgp-ipAddrBlock: critical IPv4: 203.145.50.0/23 Signature Algorithm: sha256WithRSAEncryption b3:0a:9a:dd:a1:d7:38:ea:24:bd:a7:7f:e9:ef:41:5d:4b:f0: b7:db:1c:d9:d1:51:6a:53:99:da:ce:93:b0:35:45:84:ea:72: 56:fc:1e:6a:6a:8d:9e:df:24:ce:54:09:08:70:ed:c1:18:96: 87:6e:d7:d2:59:89:d0:3c:df:21:98:0a:c8:af:7b:2e:30:93: 46:22:24:3b:fe:4c:c4:1f:b5:f5:82:d8:e6:bd:61:da:a2:a9: c9:48:10:09:37:67:3c:b9:f8:af:d9:3e:96:c7:89:2c:0b:1f: 25:76:ac:e9:f9:14:af:46:2d:23:b8:9d:e6:67:73:24:0d:db: 2a:3c:43:89:31:33:09:bf:5c:7f:db:4a:54:ba:d8:db:5b:a7: d1:bd:8b:06:04:38:70:8a:cc:e5:3b:2c:42:28:6b:a1:1a:92: 51:09:44:42:8e:3c:60:4e:68:4e:39:74:bd:3c:e9:02:a1:d7: f9:2f:b4:15:1a:7f:ab:ca:72:b7:fd:bf:e4:46:00:6d:45:53: 4d:e3:11:be:c0:c7:4a:15:87:1a:0c:a9:e4:ba:98:c5:f8:40: fc:2e:51:da:e9:ac:13:92:0c:21:3c:9c:06:30:4f:f8:cc:ee: 98:47:79:3a:d3:07:df:8e:28:95:b5:c5:5e:40:fb:41:de:4a: a7:07:0b:72 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnoUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTE1MDYyNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDND MzFBNzM2MTlENzU1RUQwQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgmFwvSZDATCTYXS+0tZposACzLbueqj+3yQKkPgFANJ1JeIR2GRxj6zCJ+DEU OQKVIcZUswh3ORvki3/4oJoIjW/ZzSN5yqVQ847ou2aAmFS36WbQImAAs7K98tfw 3YEHWL7yzR1TfAk5OJOxeRhbPY0iR5JR/4IBmlefMY4vHLfwqU1kXRsrbiXl5tkH t0b6GiByfzP1/k/KDzsj6QRP8C+0TmaW8gWa4X73Oa8wuWp5EDGH0qvZtncAnjpS 2f+o7HlHjpsosY4IRlXK6DQjfIUEH6FQ06aEqnSXm0sZ5GpUsWfq2xMIj4TP5oXG ofVrrkA+GWHNdpmqc54De+MvAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUCViGFDhy EOi2mtPDGnNhnXVe0MAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRDQjIyLzY2MDJFOTc4OENEMTExRUVCNjFGQzYzOEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRo eUVPaTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhdDMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy5EyMA0GCSqG SIb3DQEBCwUAA4IBAQCzCprdodc46iS9p3/p70FdS/C32xzZ0VFqU5nazpOwNUWE 6nJW/B5qao2e3yTOVAkIcO3BGJaHbtfSWYnQPN8hmArIr3suMJNGIiQ7/kzEH7X1 gtjmvWHaoqnJSBAJN2c8ufiv2T6Wx4ksCx8ldqzp+RSvRi0juJ3mZ3MkDdsqPEOJ MTMJv1x/20pUutjbW6fRvYsGBDhwiszlOyxCKGuhGpJRCURCjjxgTmhOOXS9POkC odf5L7QVGn+rynK3/b/kRgBtRVNN4xG+wMdKFYcaDKnkupjF+ED8LlHa6awTkgwh PJwGME/4zO6YR3k60wffjiiVtcVeQPtB3kqnBwty -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:05 2025 by rpki-client