This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer File: ORjYC8twLsrPhMt6yogPh4oU_kg.cer (raw, json) Hash identifier: Wi/Kz/jURhleWpJK8XPqEjqNUZCUWD2dGCoGAyNjOYQ= Subject key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BE2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 13:57:28 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 55832 IP: 27.123.216.0/22 IP: 45.64.12.0/22 IP: 103.4.208.0/22 IP: 120.88.176.0/20 IP: 2407:2a00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162786 (0x27be2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 13:57:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:86:d3:19:d4:d5:aa:8a:24:05:cc:ed:1b: 49:ea:f4:6d:f1:d8:74:b6:db:14:c1:e1:80:a4:c0: b2:b6:e6:bd:f8:96:29:c3:b2:7f:db:ac:ba:c8:92: eb:13:01:c2:05:29:d1:35:7b:24:d5:da:09:83:bc: d7:54:11:1e:5f:56:49:95:b8:ae:00:01:58:6c:24: 69:d6:8c:4e:82:ae:74:50:e7:66:9e:5b:c3:cd:36: ed:2c:1a:f5:14:5c:8e:d7:fb:d9:14:58:d1:b7:94: 3e:60:a2:b1:0e:74:6c:bd:1f:8e:eb:0a:c7:3c:d0: ee:09:ae:bb:e7:84:66:ac:1c:2b:44:d1:37:db:e5: be:4d:a1:11:37:30:ad:40:0f:b7:3e:f1:a2:b8:a0: 33:cb:03:26:14:00:8e:c1:47:42:f3:0c:58:87:aa: fd:11:89:02:71:b0:75:a8:ca:c9:ba:8b:c9:e0:85: d7:c1:97:cb:bf:0b:c9:10:44:25:9b:01:c4:b8:07: ea:91:82:08:50:4f:cf:b1:93:f0:32:1b:27:25:ec: bc:72:17:f8:be:e2:49:27:2c:08:d3:68:70:40:e9: f2:11:68:bd:f1:5d:2c:c3:33:6c:cf:b3:86:0d:5e: 3f:24:73:80:da:14:5d:25:55:aa:f3:5c:b9:b2:23: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55832 sbgp-ipAddrBlock: critical IPv4: 27.123.216.0/22 45.64.12.0/22 103.4.208.0/22 120.88.176.0/20 IPv6: 2407:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 53:95:9d:b7:15:9c:6e:a4:d2:eb:6b:fb:99:3f:7d:ec:e1:de: a2:f1:8c:4a:21:cb:fa:59:62:d9:52:33:8b:64:ad:9b:7c:11: 7e:2e:95:4b:08:e8:4b:1b:87:68:e5:6c:fc:9a:a7:60:7a:9e: 9f:bd:59:74:ca:54:bd:5c:40:77:a5:22:59:df:12:07:6b:9c: 47:8e:08:b4:d8:9e:92:ad:94:16:1b:dc:5c:e9:57:8b:cf:82: 9f:af:50:14:07:98:ad:e7:89:76:17:19:bc:c3:69:41:68:f5: 8d:56:a5:eb:32:05:6a:57:c1:ea:d7:b0:2c:27:c7:78:57:6d: d9:1a:89:a9:5e:2c:31:58:61:84:3a:c2:73:e7:2c:06:78:5c: e8:0a:78:5a:78:7d:b6:5a:5c:87:e7:d6:c7:9e:74:95:85:3d: 35:9b:1f:2d:7f:4c:df:ef:59:b7:5a:df:61:7f:29:2c:38:a8: 29:fe:73:2b:e2:34:77:91:d8:29:a4:e3:7e:17:e9:05:ed:a7: 79:f9:36:0c:b9:e3:89:8e:b2:10:6d:90:2a:a8:b7:f2:de:20: 39:ce:d9:dd:eb:65:5d:aa:43:70:af:28:c6:14:f2:83:6e:ad: 6b:1c:9c:ac:8f:82:73:03:43:6f:fd:19:53:27:47:f5:be:db: ab:18:9d:de -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAnviMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDEzNTcyOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3 QUNBODgwRjg3OEExNEZFNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqKobTGdTVqookBcztG0nq9G3x2HS22xTB4YCkwLK25r34linDsn/brLrIkusT AcIFKdE1eyTV2gmDvNdUER5fVkmVuK4AAVhsJGnWjE6CrnRQ52aeW8PNNu0sGvUU XI7X+9kUWNG3lD5gorEOdGy9H47rCsc80O4JrrvnhGasHCtE0Tfb5b5NoRE3MK1A D7c+8aK4oDPLAyYUAI7BR0LzDFiHqv0RiQJxsHWoysm6i8nghdfBl8u/C8kQRCWb AcS4B+qRgghQT8+xk/AyGycl7LxyF/i+4kknLAjTaHBA6fIRaL3xXSzDM2zPs4YN Xj8kc4DaFF0lVarzXLmyIxVTAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUORjYC8tw LsrPhMt6yogPh4oU/kgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ2QjI0L0I0NzNDNEJFOTMzMDExRUU4MjMwODA1OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0 d0xzclBoTXQ2eW9nUGg0b1Vfa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANoYMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCG3vYAwQCLUAM AwQCZwTQAwQEeFiwMA0EAgACMAcDBQAkByoAMA0GCSqGSIb3DQEBCwUAA4IBAQBT lZ23FZxupNLra/uZP33s4d6i8YxKIcv6WWLZUjOLZK2bfBF+LpVLCOhLG4do5Wz8 mqdgep6fvVl0ylS9XEB3pSJZ3xIHa5xHjgi02J6SrZQWG9xc6VeLz4Kfr1AUB5it 54l2Fxm8w2lBaPWNVqXrMgVqV8Hq17AsJ8d4V23ZGompXiwxWGGEOsJz5ywGeFzo CnhaeH22WlyH59bHnnSVhT01mx8tf0zf71m3Wt9hfyksOKgp/nMr4jR3kdgppON+ F+kF7ad5+TYMueOJjrIQbZAqqLfy3iA5ztnd62VdqkNwryjGFPKDbq1rHJysj4Jz A0Nv/RlTJ0f1vturGJ3e -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:26 2025 by rpki-client