This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer
File:                     Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer (raw, json)
Hash identifier:          zjCqDk8OaSj9iM6cwFUb48gLKcZHTeOMxu8yq6U2Bwo=
Subject key identifier:   0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02658E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Sep 2025 19:18:10 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    AS: 137985
                          IP: 103.119.100.0/22
Validation:               Failed, certificate revoked on Thu 09 Oct 2025 19:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157070 (0x2658e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 15 19:18:10 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A91CC1BE, serialNumber=0A37EC91E827E169C862B44CD876B1D376413734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:48:bd:64:9a:09:31:04:65:7a:d0:54:4e:
                    d0:3a:c0:67:9b:a3:b4:7c:72:c1:22:55:8c:bb:c1:
                    0a:e3:f2:1a:9d:20:33:99:ff:83:6c:b6:1d:e3:b4:
                    b4:6a:79:45:cf:64:c0:12:24:c0:26:65:e8:cf:59:
                    ff:23:c5:55:2f:c0:c7:09:74:0b:f4:69:85:95:da:
                    b5:2a:1a:76:bc:dd:32:d9:13:78:82:3c:2d:17:78:
                    14:40:34:8b:58:6f:61:69:c2:0d:33:ed:dd:63:65:
                    5b:60:b8:4d:9f:a7:c1:8d:6a:ac:3a:65:46:92:75:
                    d9:49:90:ae:d6:0c:75:8a:88:44:bd:41:fd:5e:13:
                    fb:80:5d:44:07:55:63:3f:f8:38:45:ee:b8:a0:54:
                    5c:85:b0:68:3c:2b:60:2a:7f:37:31:3c:dc:05:55:
                    c9:1b:e6:ce:9f:68:7d:ab:24:34:2b:8e:12:b8:e2:
                    1e:b6:a3:59:33:c9:76:d1:ea:74:87:89:56:88:37:
                    aa:64:f9:19:7e:5b:a3:d5:e1:d2:68:89:84:a8:d5:
                    07:22:c0:0c:91:7d:8d:2f:d3:6c:e9:86:f9:6e:0b:
                    fb:dd:9c:d2:9d:86:68:47:be:a8:2f:24:06:ec:32:
                    5f:f4:df:4d:49:fb:a6:6e:44:ee:5e:81:9e:58:95:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137985

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:37:66:53:78:de:cb:62:23:84:78:74:ff:08:48:1d:a7:3f:
         8b:3a:88:9d:71:b9:c7:ee:40:ce:c3:fc:e1:42:64:7d:1d:dc:
         29:4d:7b:53:b8:02:7a:17:e5:c0:8e:f5:13:52:67:06:63:80:
         4a:51:86:7a:bd:7a:71:8c:7a:1a:f9:d5:0d:d4:dd:20:45:a4:
         d6:e5:cc:de:8f:b3:b4:c9:9d:86:70:68:16:9c:48:14:2f:d7:
         d9:3c:da:13:05:e5:97:62:a1:1e:4f:ec:92:de:56:a5:77:ff:
         90:e4:7a:5b:be:ff:47:f3:56:20:ef:7e:c4:f8:24:40:bc:6d:
         60:91:f9:96:dc:e4:08:47:75:48:dd:a5:bf:63:0f:cd:7b:96:
         16:72:44:2f:66:70:46:2a:e6:ac:e5:fa:b8:1e:9f:2d:f8:35:
         75:2d:40:7d:29:56:91:67:0a:18:8a:91:e5:f8:5f:8d:e1:2b:
         d5:69:75:3d:b6:66:03:49:e8:f8:2d:e8:ec:0c:11:a0:68:58:
         3b:90:72:98:b9:f0:66:b9:f2:d8:b3:23:ea:db:db:8c:49:d7:
         df:28:6f:69:aa:92:25:66:fb:f6:c4:c6:6d:11:2d:2f:3c:5a:
         42:f9:8c:b7:84:74:d4:50:ef:f6:bc:31:56:1d:35:35:9c:6e:
         08:93:07:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----