This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer File: LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer (raw, json) Hash identifier: hdiJ7zkm9wb7C4Nwlw1GcOn2N4yCpAsZc3vtDAU2GB0= Subject key identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02875B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 20 Jan 2026 04:27:49 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 132617 IP: 103.245.23.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165723 (0x2875b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 20 04:27:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:20:a8:6d:c0:bf:6b:a7:49:04:b7:fa:0b: 3f:6c:b8:9d:9f:b9:42:4b:d9:03:6f:53:60:63:ca: 93:6c:a9:05:af:98:8b:8f:25:7e:26:74:ba:86:5f: 43:14:f5:aa:39:c7:f7:be:7c:38:0a:da:15:d5:29: 96:78:49:f7:7f:2e:47:b1:02:d7:3c:98:90:56:52: 5e:ac:5b:62:46:76:7a:3b:cb:e7:e0:33:a0:dd:e0: 22:3c:af:eb:cf:24:fd:6a:24:ab:92:d6:76:5a:a3: b7:78:35:bc:a7:da:b2:08:de:17:b1:32:56:fc:34: e4:31:97:72:4e:1d:d8:a0:fe:ea:46:d8:0b:4f:43: d2:fc:73:60:b5:5d:c9:3c:33:d8:ac:e4:73:6b:39: 1c:0a:09:d4:10:8e:66:98:21:f6:07:86:10:2a:04: 0a:07:81:3f:52:5d:48:01:1d:e3:31:d6:2a:39:56: 40:96:66:39:7d:e2:73:ec:4b:cc:63:a0:88:76:a7: e2:df:f1:01:ef:9e:6a:84:a5:e9:11:71:a1:fe:73: 3b:56:55:86:3d:ff:6c:e5:b1:3c:98:1d:01:51:00: 13:ff:56:1d:b2:60:3f:55:13:c4:0f:ec:62:80:8d: f0:f7:00:fe:80:62:ad:9f:98:94:ec:2f:ab:aa:73: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 132617 sbgp-ipAddrBlock: critical IPv4: 103.245.23.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:7e:95:7c:b2:c3:b1:3b:9a:16:5f:41:db:b3:52:ee:a6:7a: 17:0b:b2:bc:3f:d0:8d:5c:09:a4:4e:21:cc:d5:5d:62:f9:83: 3c:b6:19:65:be:70:bd:24:c0:77:84:a0:3c:64:4e:26:9c:71: 22:99:1c:de:8d:9f:32:fb:73:51:22:9a:f1:31:3f:0d:80:c5: 65:da:c1:9a:98:f5:e6:4e:c5:f3:6c:18:5e:af:73:6d:5a:e4: 11:d7:7b:28:ed:ea:b6:8e:da:35:fd:b9:1d:e3:4b:5d:a9:1f: 11:fa:43:48:55:19:06:89:52:8e:a2:69:25:ee:61:72:cd:39: 39:85:ff:dd:90:22:6d:d1:d5:0b:2f:4b:45:a7:d9:5b:2a:98: 1e:aa:31:32:47:63:bf:bf:ad:ee:8b:0b:7a:bc:80:16:a4:22: fa:90:c4:33:0f:c4:d6:18:50:64:bb:da:3f:43:35:b8:95:e3: ac:ed:0f:53:50:fa:ab:a1:93:ed:ea:93:30:a1:c4:3f:57:a3: a4:ec:0a:42:4f:a9:03:8c:5c:86:1a:e2:ed:07:4b:58:7e:3d: 00:bb:c9:f5:6a:70:f0:6b:f4:b3:e5:6d:13:dc:e3:65:39:6b: e7:2b:71:54:42:84:8f:5d:23:83:4f:56:3d:3a:e4:99:c2:29: 4c:9d:4d:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIDAodbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMDA0Mjc0OVoXDTI3MDMzMTAwMDAwMFowSjEVMBMG A1UEAwwMQTkxOEM0MjUwMDAwMTEwLwYDVQQFEygyRUU0N0UzQzgxODc0QTAxODNB OERBRjQyREVEOUFEOTk0QzQ3N0NGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAtaAgqG3Av2unSQS3+gs/bLidn7lCS9kDb1NgY8qTbKkFr5iLjyV+JnS6 hl9DFPWqOcf3vnw4CtoV1SmWeEn3fy5HsQLXPJiQVlJerFtiRnZ6O8vn4DOg3eAi PK/rzyT9aiSrktZ2WqO3eDW8p9qyCN4XsTJW/DTkMZdyTh3YoP7qRtgLT0PS/HNg tV3JPDPYrORzazkcCgnUEI5mmCH2B4YQKgQKB4E/Ul1IAR3jMdYqOVZAlmY5feJz 7EvMY6CIdqfi3/EB755qhKXpEXGh/nM7VlWGPf9s5bE8mB0BUQAT/1YdsmA/VRPE D+xigI3w9wD+gGKtn5iU7C+rqnNbdQIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFC7k fjyBh0oBg6ja9C3tmtmUxHfPMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1 MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBAQYIKwYBBQUHAQsEgfQwgfEwQgYIKwYB BQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM4NTcx ODc2NDkyOTAyNS8wLzBuBggrBgEFBQcwCoZicnN5bmM6Ly9ycGtpLXJwcy5jbm5p Yy5jbi9yZXBvL0ExMDU1Mzg1NzE4NzY0OTI5MDI1LzAvMkVFNDdFM0M4MTg3NEEw MTgzQThEQUY0MkRFRDlBRDk5NEM0NzdDRi5tZnQwOwYIKwYBBQUHMA2GL2h0dHBz Oi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3RpZmljYXRpb24ueG1sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwIGCTAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGf1FzANBgkqhkiG9w0BAQsFAAOCAQEAjX6VfLLDsTuaFl9B27NS7qZ6Fwuy vD/QjVwJpE4hzNVdYvmDPLYZZb5wvSTAd4SgPGROJpxxIpkc3o2fMvtzUSKa8TE/ DYDFZdrBmpj15k7F82wYXq9zbVrkEdd7KO3qto7aNf25HeNLXakfEfpDSFUZBolS jqJpJe5hcs05OYX/3ZAibdHVCy9LRafZWyqYHqoxMkdjv7+t7osLeryAFqQi+pDE Mw/E1hhQZLvaP0M1uJXjrO0PU1D6q6GT7eqTMKHEP1ejpOwKQk+pA4xchhri7QdL WH49ALvJ9Wpw8Gv0s+VtE9zjZTlr5ytxVEKEj10jg09WPTrkmcIpTJ1N/w== -----END CERTIFICATE-----Generated at Sun Jan 25 04:16:38 2026 by rpki-client