This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer File: DKQH8N1TBy-ooGCBaRkpbmV31oI.cer (raw, json) Hash identifier: oApJA5M069cpvkMC4uq41a8CqVFlB2UIvNj/gcOBAkA= Subject key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276B6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 17:51:17 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 139756 IP: 103.144.151.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161462 (0x276b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 17:51:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:8e:a5:24:51:a6:80:d4:b9:e5:14:09:14: 3e:0f:0d:2a:b9:8a:a1:37:3f:c3:ca:f1:bd:87:45: 67:4e:6e:d4:46:c5:73:03:93:a6:6c:25:25:ef:c9: 60:78:1d:1e:91:a4:a7:2e:0d:78:74:8f:a8:1e:30: 02:74:63:72:67:f8:e8:c5:44:38:37:54:11:6d:f2: 40:67:7d:ec:89:b2:53:b5:22:a2:c5:ea:31:c0:53: d0:41:ba:88:0e:08:fe:e7:42:aa:a9:e7:18:92:5a: 28:30:d7:41:5e:b8:64:a5:85:64:39:fe:f5:45:cd: d0:78:8e:7b:82:7c:49:f8:7a:e3:81:68:cf:a3:ff: eb:f5:47:28:9d:26:9d:6c:d6:b7:b1:a3:09:99:98: fd:66:db:48:a5:1b:c9:1f:57:bf:2e:bc:aa:aa:16: 06:69:5d:5e:e0:fb:d4:7e:73:75:a1:85:33:bc:ab: cf:e9:5d:29:6f:a0:64:cd:10:4d:f8:b5:4f:03:c3: b7:8c:78:c6:d2:a9:d9:97:40:b4:ab:de:21:ac:9b: 05:3b:5a:44:a5:85:44:cd:05:0a:3e:6e:2e:de:6d: 63:bd:58:fb:74:14:9f:0b:4e:09:5c:ee:80:4d:d3: b5:65:1b:e7:4b:53:f9:26:df:e6:c0:f7:c5:bf:b0: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139756 sbgp-ipAddrBlock: critical IPv4: 103.144.151.0/24 Signature Algorithm: sha256WithRSAEncryption 98:55:6d:da:00:eb:28:bc:7f:fc:4e:cd:64:5e:75:b8:1f:35: 60:60:5d:f6:bb:d3:06:d9:09:03:44:26:8a:7e:33:5d:d2:1e: f8:78:4e:f7:f4:c4:23:96:e7:38:68:c3:cb:f6:27:47:8f:9a: 7d:77:95:cf:76:d2:57:ae:9f:57:d6:c7:f0:1b:04:29:84:a4: 86:9b:d5:47:bb:c5:fe:87:e4:77:03:97:91:d8:1f:11:a7:fc: 92:0d:95:05:21:25:2a:8f:1d:30:a6:43:ed:7c:a3:d1:e0:8c: 2e:d7:6b:7f:c4:4c:5a:21:65:d1:a2:5f:cb:83:b9:c3:a0:11: d6:b6:4c:a4:b5:16:a1:7d:ac:b1:10:29:f8:58:fd:a6:66:5f: b4:06:08:5e:d5:f2:d5:e8:15:cd:aa:bf:7f:7c:39:4d:7d:41: d2:22:89:65:64:1a:2f:55:d8:cb:eb:e9:a7:9b:25:7c:63:d5: 5e:46:66:a8:51:fd:9d:0c:21:87:45:85:47:b7:4d:f0:9f:68: 8c:92:c8:0c:ec:5a:cf:c9:f5:0e:07:01:44:77:ce:44:ea:d2: 88:31:8b:01:7f:c0:3f:41:8e:90:43:c6:b4:e6:f5:36:3c:fc: 20:32:f0:8f:e0:5d:f4:32:67:a7:86:ef:46:e6:42:7a:9f:c2: df:de:05:ac -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAna2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDE3NTExN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4 MTY5MTkyOTZFNjU3N0Q2ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDLo6lJFGmgNS55RQJFD4PDSq5iqE3P8PK8b2HRWdObtRGxXMDk6ZsJSXvyWB4 HR6RpKcuDXh0j6geMAJ0Y3Jn+OjFRDg3VBFt8kBnfeyJslO1IqLF6jHAU9BBuogO CP7nQqqp5xiSWigw10FeuGSlhWQ5/vVFzdB4jnuCfEn4euOBaM+j/+v1RyidJp1s 1rexowmZmP1m20ilG8kfV78uvKqqFgZpXV7g+9R+c3WhhTO8q8/pXSlvoGTNEE34 tU8Dw7eMeMbSqdmXQLSr3iGsmwU7WkSlhUTNBQo+bi7ebWO9WPt0FJ8LTglc7oBN 07VlG+dLU/km3+bA98W/sPJjAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUDKQH8N1T By+ooGCBaRkpbmV31oIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYzQkRFLzUwQTkwRTM2MDgxNDExRUE4RUI1RjgxMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGM0JERS81MEE5MEUzNjA4MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4x VEJ5LW9vR0NCYVJrcGJtVjMxb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiHsMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5CXMA0GCSqG SIb3DQEBCwUAA4IBAQCYVW3aAOsovH/8Ts1kXnW4HzVgYF32u9MG2QkDRCaKfjNd 0h74eE739MQjluc4aMPL9idHj5p9d5XPdtJXrp9X1sfwGwQphKSGm9VHu8X+h+R3 A5eR2B8Rp/ySDZUFISUqjx0wpkPtfKPR4Iwu12t/xExaIWXRol/Lg7nDoBHWtkyk tRahfayxECn4WP2mZl+0Bghe1fLV6BXNqr9/fDlNfUHSIollZBovVdjL6+mnmyV8 Y9VeRmaoUf2dDCGHRYVHt03wn2iMksgM7FrPyfUOBwFEd85E6tKIMYsBf8A/QY6Q Q8a05vU2PPwgMvCP4F30Mmenhu9G5kJ6n8Lf3gWs -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:41 2025 by rpki-client