This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer File: Satd0R3JItzI8j3VqSxplN1wNQQ.cer (raw, json) Hash identifier: xZ5A8tZLXYxbpe4mExVq2JzeQN0QoahvNKhpRZ4aTVo= Subject key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BF3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 15:39:58 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 23869 AS: 38037 AS: 38064 AS: 45285 AS: 45809 AS: 133532 AS: 133745 IP: 103.70.24.0/22 IP: 202.46.176.0/20 IP: 2001:dce::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162803 (0x27bf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 15:39:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:7d:48:3f:82:1f:0f:69:94:1e:b8:a7:2b: 68:f4:a9:7a:9f:a1:c8:62:c3:60:c0:e6:7d:8c:a8: 1a:21:8e:b5:c2:19:c9:72:41:bf:2c:6b:dd:6d:c2: 4f:b5:bc:e4:37:8a:25:a8:d0:d3:12:36:1f:86:36: 2a:73:ee:01:42:f7:7f:d4:a0:86:40:2d:59:39:bf: ae:8d:d1:79:6f:86:9d:f1:fb:f6:53:c2:60:12:c2: 63:fa:b1:2b:20:eb:64:21:50:26:ab:4e:ae:21:e1: e0:98:0d:56:a7:00:34:74:7f:09:42:fb:0a:18:bd: ac:a9:e3:0e:f2:2c:2f:92:ee:7b:d9:1d:d7:14:79: 56:b6:92:60:1c:60:f2:8b:82:3b:76:b0:cb:18:c4: 77:9f:ef:fb:41:04:24:cd:40:6a:d9:85:5a:28:7a: 5a:f5:fc:7c:91:74:3c:3a:3c:29:9a:b9:de:e8:91: f1:71:ca:17:d6:79:44:11:57:43:cf:fa:10:2e:e0: 8c:46:da:5f:73:4a:ce:e9:9f:63:ba:76:02:22:97: aa:f6:ed:3f:e0:32:93:4c:7d:2c:20:c9:13:46:6d: f6:95:bf:27:c5:20:1c:de:6a:a6:51:f9:76:0d:90: f1:a8:ff:24:d5:0f:05:59:3e:bf:83:57:ee:dc:32: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23869 38037 38064 45285 45809 133532 133745 sbgp-ipAddrBlock: critical IPv4: 103.70.24.0/22 202.46.176.0/20 IPv6: 2001:dce::/32 Signature Algorithm: sha256WithRSAEncryption c3:28:4f:42:7a:31:28:fd:f0:c4:a2:4d:ca:bf:81:83:22:e9: 9b:10:69:8c:40:ae:f8:2c:95:ea:97:bb:97:63:2a:5f:8f:62: 4b:06:4c:86:03:b3:6e:6f:6d:2d:e2:5d:73:23:41:32:17:b4: 6b:08:44:31:24:2b:0a:4a:0b:c4:b8:bf:1b:c1:44:4d:0a:61: ca:49:5f:17:0e:03:c4:a9:03:bd:aa:57:7e:30:cd:23:0b:71: 18:08:a0:71:ea:f9:07:a5:fb:16:d2:05:bf:f5:f0:12:72:87: 9e:6f:1c:9b:2f:04:6e:3c:d0:ae:2e:45:e7:3b:38:0b:a4:d2: 2a:71:f1:65:62:46:90:e2:15:88:db:73:8e:69:c7:35:13:6f: 3f:82:83:b5:27:d6:ca:73:b1:35:39:b1:f3:35:bf:91:e5:69: ee:15:97:cd:c5:bf:12:9c:cb:5a:21:ee:87:47:73:d5:8f:7e: d2:a9:65:98:7a:d3:ff:c3:3f:68:b9:34:cf:15:65:1c:87:ef: 44:8a:59:32:fb:b1:f5:90:b4:2e:06:cd:47:87:81:af:70:90: cf:3b:ff:1f:61:2f:86:94:f7:79:78:82:9f:26:91:82:91:94: 67:81:b9:5f:6e:0a:78:a5:fd:39:2b:77:62:0f:5b:50:df:ed: 6b:be:7a:6f -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIDAnvzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDE1Mzk1OFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RE NUE5MkM2OTk0REQ3MDM1MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX5H1IP4IfD2mUHrinK2j0qXqfochiw2DA5n2MqBohjrXCGclyQb8sa91twk+1 vOQ3iiWo0NMSNh+GNipz7gFC93/UoIZALVk5v66N0Xlvhp3x+/ZTwmASwmP6sSsg 62QhUCarTq4h4eCYDVanADR0fwlC+woYvayp4w7yLC+S7nvZHdcUeVa2kmAcYPKL gjt2sMsYxHef7/tBBCTNQGrZhVooelr1/HyRdDw6PCmaud7okfFxyhfWeUQRV0PP +hAu4IxG2l9zSs7pn2O6dgIil6r27T/gMpNMfSwgyRNGbfaVvyfFIBzeaqZR+XYN kPGo/yTVDwVZPr+DV+7cMnuLAgMBAAGjggNBMIIDPTAdBgNVHQ4EFgQUSatd0R3J ItzI8j3VqSxplN1wNQQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1OTNCLzEwM0M3RDFDQkI3QTExRUM4MjlFRTgwREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIz Skl0ekk4ajNWcVN4cGxOMXdOUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQgBAf8EKDAm oCQwIgICXT0CAwCUlQIDAJSwAgMAsOUCAwCy8QIDAgmcAgMCCnEwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJnRhgDBATKLrAwDQQCAAIwBwMFACABDc4wDQYJ KoZIhvcNAQELBQADggEBAMMoT0J6MSj98MSiTcq/gYMi6ZsQaYxArvgsleqXu5dj Kl+PYksGTIYDs25vbS3iXXMjQTIXtGsIRDEkKwpKC8S4vxvBRE0KYcpJXxcOA8Sp A72qV34wzSMLcRgIoHHq+Qel+xbSBb/18BJyh55vHJsvBG480K4uRec7OAuk0ipx 8WViRpDiFYjbc45pxzUTbz+Cg7Un1spzsTU5sfM1v5Hlae4Vl83FvxKcy1oh7odH c9WPftKpZZh60//DP2i5NM8VZRyH70SKWTL7sfWQtC4GzUeHga9wkM87/x9hL4aU 93l4gp8mkYKRlGeBuV9uCnil/Tkrd2IPW1Df7Wu+em8= -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:44 2025 by rpki-client