This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer File: IcuqoETeGlZkRp9Bi80Id7ITlzo.cer (raw, json) Hash identifier: 5qnIm1eCRcK74nmDrsguLgCXMGa6QE9vKeWjHIaljak= Subject key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279DD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft caRepository: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 02:01:58 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 151838 IP: 103.240.1.0/24 IP: 2001:df2:fcc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162269 (0x279dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 02:01:58 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:42:5c:9d:48:4b:f6:c9:1d:14:8a:52:05: e7:68:2d:6d:40:78:fa:ae:db:23:f3:94:9f:fd:0e: 14:7e:5f:7c:3c:8c:da:ce:c2:7c:4f:f9:6d:8a:0b: 23:68:53:e1:d1:1d:d1:16:62:e6:5a:07:40:06:ac: 82:4b:bd:0a:0a:4d:ee:55:da:61:91:4d:53:ba:ab: 6a:b0:de:b7:ff:26:b6:76:44:16:91:28:d6:74:97: a4:e1:d6:be:1e:5c:8c:38:97:1d:04:44:f3:06:07: b2:89:9a:cd:c2:5c:c1:26:88:3f:51:6a:8e:85:0c: ac:52:81:da:db:31:ee:9a:4d:9f:54:b2:18:4f:ae: cb:9d:4d:9b:db:86:63:22:72:81:c3:19:42:ea:c8: bd:51:91:9c:76:ea:f3:b7:2e:8d:5f:e2:95:a8:5b: 39:81:dd:6c:eb:ac:b7:b6:04:0a:fc:de:ad:33:5a: 01:f3:72:d9:3c:1c:fa:06:c0:8e:96:ff:23:96:9b: be:1e:32:37:66:5b:0b:c8:02:3d:b0:99:9f:e8:f6: db:75:ef:2d:ba:e9:7e:c5:01:ad:21:2b:1f:f1:fa: ed:95:72:69:ad:61:c8:85:b6:5e:15:a8:83:01:19: 80:0a:8f:9f:cc:8a:5d:22:e6:1b:aa:88:a8:e5:48: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151838 sbgp-ipAddrBlock: critical IPv4: 103.240.1.0/24 IPv6: 2001:df2:fcc0::/48 Signature Algorithm: sha256WithRSAEncryption 56:c4:a2:79:f6:21:6f:bf:81:3c:62:2a:d4:20:df:d0:0d:ea: de:3d:2c:0e:1d:25:28:51:66:c9:5d:78:80:ce:8d:14:fe:20: a7:19:06:5a:2b:19:82:75:45:44:60:35:d7:47:c7:d8:9d:c3: b6:1f:5d:3f:b9:86:56:8f:ca:e3:a5:9c:35:a1:68:30:c2:ec: 0c:c9:5f:a6:20:d8:08:57:b5:72:b1:f0:82:3a:e8:77:4b:4f: 2c:62:c1:e8:3f:75:00:ab:ce:41:e3:15:b5:da:a7:e2:81:02: f6:eb:e8:b9:95:35:79:e0:d1:d9:9d:28:f9:c5:fe:91:ba:82: 6f:5a:c9:6b:b5:ef:cc:6c:0d:e7:f4:05:fd:0f:ff:f5:04:d3: fa:ff:82:06:37:96:42:4a:58:93:f0:d7:ad:99:33:5b:cd:97: a9:09:b4:e0:1d:b8:7a:30:56:54:cf:2b:bd:e7:8b:f8:c5:e7: 29:45:6f:4f:6c:1e:d7:b2:e1:80:d0:fd:c1:8e:7a:6d:46:45: c0:6c:6d:db:4f:7d:6b:a7:b5:03:da:d4:86:5d:4a:79:e7:2f: 50:91:ff:88:b1:f4:f0:ef:f4:16:05:4a:99:c4:a8:8e:41:a8: b6:28:66:a7:54:c3:81:40:4a:80:fa:7c:bf:dc:20:d3:a3:a1: 24:3b:23:83 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnndMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTAyMDE1OFoXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0 MThCQ0QwODc3QjIxMzk3M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg3UJcnUhL9skdFIpSBedoLW1AePqu2yPzlJ/9DhR+X3w8jNrOwnxP+W2KCyNo U+HRHdEWYuZaB0AGrIJLvQoKTe5V2mGRTVO6q2qw3rf/JrZ2RBaRKNZ0l6Th1r4e XIw4lx0ERPMGB7KJms3CXMEmiD9Rao6FDKxSgdrbMe6aTZ9UshhPrsudTZvbhmMi coHDGULqyL1RkZx26vO3Lo1f4pWoWzmB3WzrrLe2BAr83q0zWgHzctk8HPoGwI6W /yOWm74eMjdmWwvIAj2wmZ/o9tt17y266X7FAa0hKx/x+u2VcmmtYciFtl4VqIMB GYAKj5/Mil0i5huqiKjlSFHPAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUIcuqoETe GlZkRp9Bi80Id7ITlzowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEzOTNCLzY3RDA4QkE4NjI4QzExRUU5NTY1QjU2OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExMzkzQi82N0QwOEJBODYyOEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VU ZUdsWmtScDlCaTgwSWQ3SVRsem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlEeMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ/ABMA8EAgAC MAkDBwAgAQ3y/MAwDQYJKoZIhvcNAQELBQADggEBAFbEonn2IW+/gTxiKtQg39AN 6t49LA4dJShRZsldeIDOjRT+IKcZBlorGYJ1RURgNddHx9idw7YfXT+5hlaPyuOl nDWhaDDC7AzJX6Yg2AhXtXKx8II66HdLTyxiweg/dQCrzkHjFbXap+KBAvbr6LmV NXng0dmdKPnF/pG6gm9ayWu178xsDef0Bf0P//UE0/r/ggY3lkJKWJPw162ZM1vN l6kJtOAduHowVlTPK73ni/jF5ylFb09sHtey4YDQ/cGOem1GRcBsbdtPfWuntQPa 1IZdSnnnL1CR/4ix9PDv9BYFSpnEqI5BqLYoZqdUw4FASoD6fL/cINOjoSQ7I4M= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:50 2025 by rpki-client