This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer File: ShiOMYfOxdNsNowk6U9DHQQlO3s.cer (raw, json) Hash identifier: U+Qj8cgYnvfLflMBmYMzQkSLsEZfVgE9mQlBEcC5jY0= Subject key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279CE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 23:47:46 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 150390 IP: 103.29.180.0/23 IP: 2001:df1:77c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162254 (0x279ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 23:47:46 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:d2:5e:db:85:2e:2e:21:d0:56:51:72:db: 56:37:4a:fb:40:27:3b:ca:1a:34:b5:cf:d7:8f:bf: 47:66:d8:0b:ce:45:40:e1:7a:2b:4a:8a:f5:67:da: 81:4c:e9:f8:7b:40:b6:5f:da:12:30:fd:aa:bb:78: ac:8b:de:8f:4f:d6:24:6d:f7:5f:b5:ef:93:13:3b: a6:42:e9:6c:dd:3e:63:a2:da:30:88:23:0d:e4:42: 9f:57:e9:ca:ca:d7:4c:9c:b5:7a:4e:e2:fb:b6:63: 3d:07:8a:09:36:30:08:4f:55:25:37:26:0f:9b:7c: 0a:9e:4d:b0:33:04:7a:9f:03:69:e7:36:22:25:26: 83:66:99:a8:4d:b6:25:e7:00:9d:d8:ca:33:23:25: cf:1d:fa:bf:a6:cc:f1:dd:c8:80:c0:39:8a:6c:0c: db:ea:f1:63:bf:a0:46:22:3b:80:69:f8:dc:8a:5a: 0c:3f:06:eb:be:3a:c0:3e:af:fc:72:76:81:ad:33: 6b:45:9a:bc:4a:5f:f5:0c:1e:ec:3d:ca:22:12:83: 94:55:0b:21:d4:30:66:04:4b:6d:ca:62:44:80:58: e7:07:2f:b5:81:74:d6:e4:ff:e2:b5:a1:88:1f:09: bc:04:a5:bb:54:16:f7:b3:cf:3d:e3:19:89:f2:9f: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150390 sbgp-ipAddrBlock: critical IPv4: 103.29.180.0/23 IPv6: 2001:df1:77c0::/48 Signature Algorithm: sha256WithRSAEncryption a6:04:70:c0:d5:28:7d:68:42:89:76:af:a5:b2:89:b8:83:3d: 45:ae:b2:a0:a2:39:fa:36:95:48:01:86:e8:b8:4c:e3:ba:6b: 88:6e:88:59:76:67:b3:3d:17:c0:7f:de:b3:50:5d:b1:1a:00: 48:e6:dd:87:eb:ad:d4:2f:ad:35:07:dc:ef:90:dc:2a:d0:f0: 00:e1:38:a5:f6:3b:3b:59:85:48:12:d2:a0:25:1d:44:8f:8a: 29:46:41:42:9d:8f:b1:20:53:de:29:ea:c9:62:ca:2c:85:2d: d5:74:13:a2:f4:89:1b:e3:e4:54:36:1f:3c:b1:5d:35:3b:51: 6c:1c:69:65:31:2b:68:b3:f6:f2:fb:d3:05:39:42:5d:28:4d: 29:e0:da:f7:53:f8:fd:29:4d:87:34:0f:c5:ea:f5:62:eb:38: ee:b2:0b:27:66:98:44:d0:d0:b7:c5:22:d3:c2:bf:26:36:34: f0:02:06:5e:f2:c4:98:bd:c2:a5:ba:b7:6b:74:52:68:70:98: e0:ac:1a:cc:02:2b:7e:62:e3:72:c0:fa:5a:67:78:4e:87:b5: 57:55:6e:e2:e2:55:34:0f:a9:44:d0:9e:40:3f:e9:cc:f2:a2: d9:b2:b8:ad:0d:a2:56:a4:8e:61:26:99:b9:56:0f:b8:b8:52: 1d:39:45:bf -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnnOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDIzNDc0NloXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMy NEU5NEY0MzFEMDQyNTNCN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIHtJe24UuLiHQVlFy21Y3SvtAJzvKGjS1z9ePv0dm2AvORUDheitKivVn2oFM 6fh7QLZf2hIw/aq7eKyL3o9P1iRt91+175MTO6ZC6WzdPmOi2jCIIw3kQp9X6crK 10yctXpO4vu2Yz0Higk2MAhPVSU3Jg+bfAqeTbAzBHqfA2nnNiIlJoNmmahNtiXn AJ3YyjMjJc8d+r+mzPHdyIDAOYpsDNvq8WO/oEYiO4Bp+NyKWgw/Buu+OsA+r/xy doGtM2tFmrxKX/UMHuw9yiISg5RVCyHUMGYES23KYkSAWOcHL7WBdNbk/+K1oYgf CbwEpbtUFvezzz3jGYnyn3mnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUShiOMYfO xdNsNowk6U9DHQQlO3swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY1MjQ2LzM4Qzk3MDhBQjEwODExRURBODg1NDIxN0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlm T3hkTnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkt2MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZx20MA8EAgAC MAkDBwAgAQ3xd8AwDQYJKoZIhvcNAQELBQADggEBAKYEcMDVKH1oQol2r6WyibiD PUWusqCiOfo2lUgBhui4TOO6a4huiFl2Z7M9F8B/3rNQXbEaAEjm3YfrrdQvrTUH 3O+Q3CrQ8ADhOKX2OztZhUgS0qAlHUSPiilGQUKdj7EgU94p6sliyiyFLdV0E6L0 iRvj5FQ2HzyxXTU7UWwcaWUxK2iz9vL70wU5Ql0oTSng2vdT+P0pTYc0D8Xq9WLr OO6yCydmmETQ0LfFItPCvyY2NPACBl7yxJi9wqW6t2t0UmhwmOCsGswCK35i43LA +lpneE6HtVdVbuLiVTQPqUTQnkA/6czyotmyuK0NolakjmEmmblWD7i4Uh05Rb8= -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:48 2025 by rpki-client