This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer
File:                     DKQH8N1TBy-ooGCBaRkpbmV31oI.cer (raw, json)
Hash identifier:          wtOpvdYU9ooniV0oTFFb8S9Ibxt302gdin42IiBnYCY=
Subject key identifier:   0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0285C5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 04:52:13 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 139756
                          AS: 142203
                          IP: 103.144.151.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 09:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165317 (0x285c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 13 04:52:13 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:8e:a5:24:51:a6:80:d4:b9:e5:14:09:14:
                    3e:0f:0d:2a:b9:8a:a1:37:3f:c3:ca:f1:bd:87:45:
                    67:4e:6e:d4:46:c5:73:03:93:a6:6c:25:25:ef:c9:
                    60:78:1d:1e:91:a4:a7:2e:0d:78:74:8f:a8:1e:30:
                    02:74:63:72:67:f8:e8:c5:44:38:37:54:11:6d:f2:
                    40:67:7d:ec:89:b2:53:b5:22:a2:c5:ea:31:c0:53:
                    d0:41:ba:88:0e:08:fe:e7:42:aa:a9:e7:18:92:5a:
                    28:30:d7:41:5e:b8:64:a5:85:64:39:fe:f5:45:cd:
                    d0:78:8e:7b:82:7c:49:f8:7a:e3:81:68:cf:a3:ff:
                    eb:f5:47:28:9d:26:9d:6c:d6:b7:b1:a3:09:99:98:
                    fd:66:db:48:a5:1b:c9:1f:57:bf:2e:bc:aa:aa:16:
                    06:69:5d:5e:e0:fb:d4:7e:73:75:a1:85:33:bc:ab:
                    cf:e9:5d:29:6f:a0:64:cd:10:4d:f8:b5:4f:03:c3:
                    b7:8c:78:c6:d2:a9:d9:97:40:b4:ab:de:21:ac:9b:
                    05:3b:5a:44:a5:85:44:cd:05:0a:3e:6e:2e:de:6d:
                    63:bd:58:fb:74:14:9f:0b:4e:09:5c:ee:80:4d:d3:
                    b5:65:1b:e7:4b:53:f9:26:df:e6:c0:f7:c5:bf:b0:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139756
                  142203

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:be:b2:41:00:fe:51:7e:47:63:9c:ee:f5:3d:a0:1f:d0:
         4a:08:8d:4a:a5:65:f6:87:cd:0a:3a:66:bd:7b:b2:54:ae:4a:
         6f:64:5f:58:c7:9d:e2:9f:16:06:9a:af:da:8a:15:9c:32:28:
         ce:a0:2c:3b:b6:89:ab:d1:32:54:6e:a9:0d:18:02:ce:12:a3:
         76:65:26:67:fe:34:dd:56:34:c8:3c:53:64:40:40:41:cb:55:
         c1:6f:23:3b:26:c6:b1:10:89:db:0f:f4:f3:95:d4:15:d9:fb:
         e2:0e:ca:ba:13:74:ce:f8:b7:ad:0d:34:06:7b:6d:9a:2d:59:
         23:22:ed:dd:e8:00:16:9f:1f:c2:40:d9:3a:a9:20:48:59:b9:
         81:0e:3a:92:5f:89:9f:bf:ef:ff:20:26:91:0c:5c:b6:9c:f7:
         7a:3b:00:67:c8:20:0d:e3:15:82:95:9b:5c:f0:4b:83:ad:b4:
         1e:29:2d:28:d7:8f:d1:a6:0c:45:c5:46:d7:de:6a:6c:06:92:
         98:f9:7e:63:7d:71:30:50:8d:28:6d:37:af:44:56:c9:9d:3f:
         94:82:e0:d7:21:e2:0a:ae:94:0a:dd:9e:4a:ac:b0:2d:3a:01:
         86:61:79:40:a6:92:29:f4:44:50:98:49:fd:80:fe:69:ac:fc:
         0b:6d:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:13 2026 by rpki-client