This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer File: J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer (raw, json) Hash identifier: 0YvYqL/q/EeO6utNW0j9K9YksVDYse4Wpk6GsYD4bIc= Subject key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277E7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft caRepository: rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 15:45:47 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 142540 IP: 103.21.222.0/23 IP: 2001:df1:6b40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161767 (0x277e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 15:45:47 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A915F55C, serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a5:36:d0:0c:69:90:81:e2:ee:c6:b1:02:d8: ac:c2:24:85:0e:ac:17:58:91:d3:8f:6a:58:b2:04: 5e:e1:95:03:60:f1:1d:81:d1:fc:ee:26:8c:d7:2a: 1a:9c:15:54:8d:64:fd:6c:73:16:23:8e:4e:f4:cd: 2b:3d:f8:2f:12:e4:22:65:8a:22:7b:31:01:d1:cf: 68:04:d7:b1:1c:ac:20:9d:50:a2:6a:33:ff:58:5c: c4:70:ab:63:85:8c:5a:5f:00:9e:b9:50:a8:82:78: 23:ac:dc:87:af:23:19:eb:c6:bf:d4:f7:60:fa:91: ec:90:3b:95:09:64:64:67:2f:a9:26:cb:20:55:d4: ed:88:1c:45:5d:31:fa:b0:d6:ac:a9:4b:70:cc:fc: af:34:cd:aa:55:bb:db:e5:3c:dd:c3:d2:4a:bb:75: 9b:87:a0:3a:d7:c1:9c:e6:0c:17:9d:d2:48:14:6c: e7:50:ff:46:4a:f3:38:20:e2:b7:92:46:51:58:6f: 49:c5:56:bc:30:8a:4e:6a:d1:1f:14:f2:23:01:0a: 90:78:10:3e:f8:59:a4:3f:79:67:b3:75:25:ef:ac: a3:f3:1a:aa:7e:c0:15:37:4f:d1:97:9c:9f:98:09: c1:b9:ed:7f:2c:da:35:77:d5:46:d1:b7:06:02:b6: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142540 sbgp-ipAddrBlock: critical IPv4: 103.21.222.0/23 IPv6: 2001:df1:6b40::/48 Signature Algorithm: sha256WithRSAEncryption 84:82:4f:32:70:58:36:e7:70:bb:4e:a2:0e:74:94:6f:81:01: b8:c7:10:9a:8b:39:de:2b:bd:c0:ab:41:f4:5a:40:01:34:1e: bc:5a:b3:c4:70:49:76:9d:cf:68:71:38:60:5c:e4:4e:5f:7a: ca:94:58:42:09:55:cb:20:cd:c1:eb:e3:41:d5:e9:86:5d:a5: 3b:e5:77:84:99:06:89:e7:d4:08:fa:44:c4:00:d9:fe:40:98: 4d:9a:3b:f0:f2:04:cd:fd:09:dc:0d:42:bf:5d:8d:4f:7e:6f: 57:db:6e:88:6d:ac:8a:be:d5:ae:9c:35:b8:25:8c:e8:56:ef: df:9c:bf:ee:a9:60:5f:5c:c7:bb:0a:0f:d9:9f:43:b3:d9:3b: 8d:64:0e:24:bc:bd:9c:02:f7:11:0b:78:cf:54:fa:29:b9:05: 05:36:aa:1c:94:d4:ac:23:40:15:66:a2:cd:4c:0f:f8:9c:ec: 0c:f7:62:a4:92:99:8f:79:1b:5f:ca:63:b1:26:be:fa:d4:4f: 4e:33:2c:2d:ea:1f:80:3c:05:bb:00:fa:b6:82:d8:01:1f:3d: db:a0:d4:ad:df:78:fc:25:82:c4:cc:38:b0:c7:68:44:e1:22: 08:c0:00:61:bb:5e:82:cf:23:09:a3:34:72:47:87:de:95:5b: b0:ad:1a:50 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnfnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTE1NDU0N1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUY1NUMxMTAvBgNVBAUTKDI3REEwMDU0Q0ZCQUIzRTNEQjA2M0ZD MjNEMzM1QjM3Qjg5RTQxOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5pTbQDGmQgeLuxrEC2KzCJIUOrBdYkdOPaliyBF7hlQNg8R2B0fzuJozXKhqc FVSNZP1scxYjjk70zSs9+C8S5CJliiJ7MQHRz2gE17EcrCCdUKJqM/9YXMRwq2OF jFpfAJ65UKiCeCOs3IevIxnrxr/U92D6keyQO5UJZGRnL6kmyyBV1O2IHEVdMfqw 1qypS3DM/K80zapVu9vlPN3D0kq7dZuHoDrXwZzmDBed0kgUbOdQ/0ZK8zgg4reS RlFYb0nFVrwwik5q0R8U8iMBCpB4ED74WaQ/eWezdSXvrKPzGqp+wBU3T9GXnJ+Y CcG57X8s2jV31UbRtwYCtlDhAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJ9oAVM+6 s+PbBj/CPTNbN7ieQZUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVGNTVDLzM0OTgwMEJFNjMzNjExRURBNjRGRDk0NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1RjU1Qy8zNDk4MDBCRTYzMzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0t NnMtUGJCal9DUFROYk43aWVRWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAizMMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZxXeMA8EAgAC MAkDBwAgAQ3xa0AwDQYJKoZIhvcNAQELBQADggEBAISCTzJwWDbncLtOog50lG+B AbjHEJqLOd4rvcCrQfRaQAE0Hrxas8RwSXadz2hxOGBc5E5fesqUWEIJVcsgzcHr 40HV6YZdpTvld4SZBonn1Aj6RMQA2f5AmE2aO/DyBM39CdwNQr9djU9+b1fbboht rIq+1a6cNbgljOhW79+cv+6pYF9cx7sKD9mfQ7PZO41kDiS8vZwC9xELeM9U+im5 BQU2qhyU1KwjQBVmos1MD/ic7Az3YqSSmY95G1/KY7EmvvrUT04zLC3qH4A8BbsA +raC2AEfPdug1K3fePwlgsTMOLDHaEThIgjAAGG7XoLPIwmjNHJHh96VW7CtGlA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:37 2025 by rpki-client