This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer (raw, json) Hash identifier: cLpaXWE3HayLs/6UJDTmzWqpNLQOWhgm0H8NoIkCTxE= Subject key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0287ED Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 22 Jan 2026 12:55:06 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 151484 IP: 103.230.244.0/23 IP: 2001:df2:a340::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165869 (0x287ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 22 12:55:06 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e6:18:63:e8:b0:c7:51:5f:0e:31:85:e9:6a: c7:ec:d4:28:1e:4d:09:38:68:5f:99:fc:c0:eb:a1: b1:0e:6a:e2:a7:42:82:27:8e:de:f2:70:c7:e8:35: 5e:e7:52:73:0e:24:7e:51:55:95:e8:5c:2f:62:d7: 11:ea:7b:55:74:a8:2f:2d:21:71:47:18:91:88:fb: 5b:79:4b:79:67:4b:64:2d:9d:55:43:f6:fa:b0:c3: b3:e8:e4:79:8f:f5:5c:5b:a0:22:58:af:3d:68:74: 3f:0e:21:7b:2e:ff:ac:bf:c7:7a:f3:29:0a:9c:43: 6c:54:92:78:26:9a:cc:0a:ae:90:d3:e7:99:53:a5: 52:76:c3:6a:d5:e5:18:f5:d0:2a:18:d3:b1:6c:0b: a2:b6:98:05:61:cf:e9:e6:ea:94:cd:f4:c7:90:5a: bb:02:49:38:65:a8:0a:66:3f:ae:b5:cc:55:8e:58: 5a:7a:31:af:bb:b3:a1:4e:de:a2:47:77:fa:ee:4c: f6:97:ea:04:4b:c3:1e:25:f7:89:bd:68:50:77:e4: 9d:8d:8c:f8:a4:69:91:88:a1:dc:f8:a4:ea:15:ab: 97:60:dd:ea:54:6e:1d:78:bf:71:27:01:eb:b6:3b: f1:78:01:f2:91:bc:8a:16:9e:33:59:1e:d3:2a:a6: d3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151484 sbgp-ipAddrBlock: critical IPv4: 103.230.244.0/23 IPv6: 2001:df2:a340::/48 Signature Algorithm: sha256WithRSAEncryption c7:03:a8:51:a8:4c:e7:a1:0f:37:11:5c:56:22:b7:5c:27:83: 33:44:3e:5f:b4:67:64:ee:8a:1f:ab:f0:26:31:6f:7c:6c:c0: 27:76:5f:6d:03:2a:b6:08:eb:e2:57:cb:9f:e4:af:54:fd:03: 2c:b7:bb:da:3c:14:8b:36:84:d8:5c:d8:45:47:c0:1e:95:fd: d2:b2:62:b0:b7:27:08:4e:10:c3:f7:a8:66:a5:33:d3:0c:e7: 18:92:9f:0d:e6:59:78:d4:82:d5:1e:f8:55:8b:a8:59:f1:fb: 10:7c:2f:1e:b1:d2:61:c6:93:71:d0:2f:10:9a:fa:8a:4c:0e: 40:29:23:c8:e4:e7:18:02:94:4f:a8:b1:b8:fc:e6:bb:5e:86: ef:64:16:d6:c9:b9:f1:04:93:a6:13:29:cb:d4:3f:80:ba:91: 53:a7:b8:00:c0:8d:04:52:a9:4a:af:70:cb:2b:c6:7b:44:33: 7f:46:49:f1:46:71:fa:cb:d7:de:da:1b:a8:44:d1:0e:f8:04: 56:71:cc:ad:08:7f:63:84:fd:62:46:22:70:7b:cc:6c:73:fb: 81:9d:bb:c6:2c:f1:b2:f0:b8:55:89:a3:3d:56:a8:92:d0:5c: 92:51:2b:2f:c8:d5:2e:8e:5e:74:e1:6e:9b:d4:6b:c0:6d:ad: 79:ea:c2:72 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoftMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMjEyNTUwNloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2 NjQ1NkM5QTQ1RjJDRkMxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe5hhj6LDHUV8OMYXpasfs1CgeTQk4aF+Z/MDrobEOauKnQoInjt7ycMfoNV7n UnMOJH5RVZXoXC9i1xHqe1V0qC8tIXFHGJGI+1t5S3lnS2QtnVVD9vqww7Po5HmP 9VxboCJYrz1odD8OIXsu/6y/x3rzKQqcQ2xUkngmmswKrpDT55lTpVJ2w2rV5Rj1 0CoY07FsC6K2mAVhz+nm6pTN9MeQWrsCSThlqApmP661zFWOWFp6Ma+7s6FO3qJH d/ruTPaX6gRLwx4l94m9aFB35J2NjPikaZGIodz4pOoVq5dg3epUbh14v3EnAeu2 O/F4AfKRvIoWnjNZHtMqptPNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUOno3+7pJ xGmtq1JmRWyaRfLPwYgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ2M0VEL0I3NkUwNjYwMUQ3QTExRUVBRDlGOEUwQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdw SnhHbXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAk+8MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ+b0MA8EAgAC MAkDBwAgAQ3yo0AwDQYJKoZIhvcNAQELBQADggEBAMcDqFGoTOehDzcRXFYit1wn gzNEPl+0Z2Tuih+r8CYxb3xswCd2X20DKrYI6+JXy5/kr1T9Ayy3u9o8FIs2hNhc 2EVHwB6V/dKyYrC3JwhOEMP3qGalM9MM5xiSnw3mWXjUgtUe+FWLqFnx+xB8Lx6x 0mHGk3HQLxCa+opMDkApI8jk5xgClE+osbj85rtehu9kFtbJufEEk6YTKcvUP4C6 kVOnuADAjQRSqUqvcMsrxntEM39GSfFGcfrL197aG6hE0Q74BFZxzK0If2OE/WJG InB7zGxz+4Gdu8Ys8bLwuFWJoz1WqJLQXJJRKy/I1S6OXnThbpvUa8BtrXnqwnI= -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:43 2026 by rpki-client