This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
File:                     GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer (raw, json)
Hash identifier:          CGrocjwocq7jlCMph0xg6nN1FgrwyB/+G4MqR0LOyO4=
Subject key identifier:   18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0285C8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 04:58:43 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 132221
                          IP: 2001:df4:d740::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165320 (0x285c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 13 04:58:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:8d:8e:0c:fc:ec:9a:1c:36:54:ff:4f:1b:
                    16:11:3c:bf:52:ca:ce:45:d2:f4:6b:7d:93:28:32:
                    f2:89:ff:6f:aa:c4:eb:1e:04:a9:f5:c2:e5:ed:81:
                    8d:c9:eb:5c:a0:b2:e4:3b:c3:81:5d:0f:65:61:9e:
                    14:55:19:d4:86:ec:c6:4b:41:cb:5c:2e:d0:57:66:
                    25:2d:c8:ce:cc:7d:2b:bb:da:cc:d0:5c:2d:9b:57:
                    25:b8:14:8e:d4:72:cb:d4:88:c4:0e:11:d8:aa:95:
                    33:e0:32:cf:82:44:bd:24:21:a4:1a:31:5b:4d:e0:
                    73:8f:05:97:f9:ca:57:9b:2d:a1:2e:47:54:47:5d:
                    35:7e:bc:51:68:5e:26:44:d4:76:0a:92:e0:d5:4c:
                    b8:d6:c9:7b:65:30:36:d2:e6:6c:16:58:f9:54:72:
                    0e:8f:d5:71:6b:0f:26:5e:fe:1b:5d:0f:d7:8f:86:
                    e8:bb:78:fd:52:44:3c:12:c5:c3:8e:42:b1:23:f8:
                    4a:e6:4e:d2:3d:14:52:61:5d:79:5b:b9:94:a1:b7:
                    2d:49:a8:b4:b8:f6:47:25:e7:02:87:f1:78:6c:37:
                    7d:3a:b5:6f:9c:7f:07:97:a1:19:e0:d0:6f:66:a2:
                    db:3c:ac:90:f7:d7:c0:46:a9:a5:32:dc:34:00:6b:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132221

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:d740::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:ce:f4:c7:0c:5b:0a:a4:6f:bf:53:55:4d:c7:f6:92:94:72:
         ee:ad:4e:16:d0:1e:f3:e9:c5:7f:1c:40:76:18:f6:85:0f:ac:
         ab:b8:48:99:5f:9d:07:6c:47:b8:3f:d1:c5:81:68:ea:cc:47:
         c1:c3:fe:62:90:2c:49:1d:d7:5d:b6:b7:cc:db:63:79:d5:b1:
         a7:1b:02:0f:65:88:04:3a:a5:81:71:1f:8c:5a:56:39:5a:51:
         f2:13:6f:61:d4:b3:3d:4a:72:ab:b0:23:a0:2f:6f:86:4e:00:
         12:c7:f2:38:c3:46:b5:a9:2d:2f:a5:23:e3:22:34:f9:74:88:
         e4:81:41:0a:02:14:be:82:6b:20:34:09:f7:a9:c6:38:4c:f1:
         8c:3e:76:44:44:8f:58:c6:99:3c:86:ff:6e:41:eb:18:8a:ca:
         60:8f:5c:65:10:b6:90:21:20:ea:cc:53:37:0d:fb:bc:b5:bd:
         ae:a1:8b:36:45:ae:d0:5f:37:8d:ef:4b:90:f5:9b:f3:80:4f:
         d6:6d:74:c5:9b:93:3b:be:1c:fd:81:96:11:b4:c3:4a:47:3e:
         45:ab:1e:5d:2b:c8:4e:d3:61:47:bc:7d:2c:8d:89:fd:94:58:
         a1:ca:b1:99:94:77:af:83:fa:ce:bd:12:3a:82:50:d2:7e:a8:
         c9:3d:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:13:50 2026 by rpki-client