This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer File: CiozEuCLqcQb5-D7WKpkLG0BuHU.cer (raw, json) Hash identifier: nwh5GV6g6K0aiOyTfWyRs7n6s/ejHhCgww9mvM3Bf/k= Subject key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028788 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 20 Jan 2026 13:59:18 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 45586 IP: 203.171.223.0/24 IP: 2001:df0:f0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165768 (0x28788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 20 13:59:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:1b:ff:e4:0e:8e:81:7c:46:bc:fe:cf:7e: 5f:60:6b:3a:ad:0c:e5:6f:c6:6d:67:7c:e0:27:02: 42:82:59:33:00:98:21:23:6a:2d:3f:32:dd:85:36: 18:80:44:80:34:d0:8e:71:56:9d:ef:05:76:4b:3c: f9:4f:79:ee:4c:de:c4:a5:cb:a7:50:50:91:e8:7c: f5:bc:72:e5:c8:6c:82:20:f7:cf:7d:ee:84:35:3b: 83:ef:0d:93:9e:45:de:1f:7e:b0:cc:6d:81:c3:20: e9:26:fc:9e:7e:a0:e5:23:d1:03:9e:c8:b0:19:50: 2f:2d:cf:01:6d:5b:ce:27:26:8c:7e:1e:f3:11:35: 04:d4:9e:ec:7c:09:b0:cf:90:f6:05:c8:f7:0e:d9: 6b:21:29:9f:a2:ae:22:96:05:c9:e0:ef:30:51:c1: 74:40:c2:24:93:e8:e4:ce:4b:ba:a8:a2:7c:8e:75: 49:0d:69:e3:97:35:a1:1f:22:45:8a:07:d0:0c:18: 7e:6b:09:3d:18:c0:39:23:f0:de:1b:f2:7d:54:24: 98:62:c7:1e:21:d7:a9:d7:0d:b6:f0:f1:96:9b:72: 5f:21:e3:65:c7:12:c3:5c:6d:24:bd:03:8f:ea:ad: 5b:f7:fc:65:fd:ba:c7:74:66:42:0d:33:59:4b:81: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45586 sbgp-ipAddrBlock: critical IPv4: 203.171.223.0/24 IPv6: 2001:df0:f0::/48 Signature Algorithm: sha256WithRSAEncryption 60:79:51:1b:28:d4:af:0f:4c:01:b1:ee:0b:9f:9f:0a:12:18: 01:ed:df:5c:be:d3:fd:8b:bb:88:10:3a:62:98:63:3f:2c:06: f6:5e:e4:7a:60:cc:af:3f:a7:44:73:f5:8c:2c:4d:bd:0a:fc: 7e:b1:3b:76:d3:78:04:e9:ae:c7:47:f3:de:f1:fd:5d:b1:5c: 5c:d8:69:16:aa:5e:df:ef:a6:52:b6:b1:2c:a0:69:2e:df:23: 24:29:f2:f7:f9:c5:f8:02:59:d9:9a:ca:0f:60:d8:5a:6c:fc: 32:a1:f0:e3:b8:68:56:b9:a5:eb:0d:f1:2b:bc:79:4e:d3:1b: fb:ea:c1:8c:ed:aa:a3:66:f4:a1:6f:81:7e:8b:2a:f3:41:3a: b1:40:94:38:2b:c5:02:25:fa:e7:bd:ed:aa:c9:42:74:62:b2: 9e:30:76:a8:86:39:b5:97:be:90:db:1e:81:31:81:06:ce:ec: 6d:00:f9:2b:bb:b1:8d:47:60:7a:45:3a:d9:62:43:12:97:43: 4c:f6:4f:0c:86:96:e3:b3:7c:ca:80:9a:f4:39:56:66:b4:39: aa:bd:13:51:90:7e:f4:67:b7:45:e5:4b:2b:63:c9:02:34:c2: 58:92:da:56:17:a8:1f:2e:e7:d7:e3:7e:6a:23:ec:67:bb:a1: 64:2c:b7:8a -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoeIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMDEzNTkxOFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjdEQ0IxMTAvBgNVBAUTKDBBMkEzMzEyRTA4QkE5QzQxQkU3RTBG QjU4QUE2NDJDNkQwMUI4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0GRv/5A6OgXxGvP7Pfl9gazqtDOVvxm1nfOAnAkKCWTMAmCEjai0/Mt2FNhiA RIA00I5xVp3vBXZLPPlPee5M3sSly6dQUJHofPW8cuXIbIIg98997oQ1O4PvDZOe Rd4ffrDMbYHDIOkm/J5+oOUj0QOeyLAZUC8tzwFtW84nJox+HvMRNQTUnux8CbDP kPYFyPcO2WshKZ+iriKWBcng7zBRwXRAwiST6OTOS7qoonyOdUkNaeOXNaEfIkWK B9AMGH5rCT0YwDkj8N4b8n1UJJhixx4h16nXDbbw8Zabcl8h42XHEsNcbSS9A4/q rVv3/GX9usd0ZkINM1lLgbVRAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUCiozEuCL qcQb5+D7WKpkLG0BuHUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI3RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCN0RDQi8wMTUwNUEzMDI5NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVD THFjUWI1LUQ3V0twa0xHMEJ1SFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALISMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAy6vfMA8EAgAC MAkDBwAgAQ3wAPAwDQYJKoZIhvcNAQELBQADggEBAGB5URso1K8PTAGx7gufnwoS GAHt31y+0/2Lu4gQOmKYYz8sBvZe5HpgzK8/p0Rz9YwsTb0K/H6xO3bTeATprsdH 897x/V2xXFzYaRaqXt/vplK2sSygaS7fIyQp8vf5xfgCWdmayg9g2Fps/DKh8OO4 aFa5pesN8Su8eU7TG/vqwYztqqNm9KFvgX6LKvNBOrFAlDgrxQIl+ue97arJQnRi sp4wdqiGObWXvpDbHoExgQbO7G0A+Su7sY1HYHpFOtliQxKXQ0z2TwyGluOzfMqA mvQ5Vma0Oaq9E1GQfvRnt0XlSytjyQI0wliS2lYXqB8u59fjfmoj7Ge7oWQst4o= -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:24 2026 by rpki-client