This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer File: TTExNNGjpXdD2_A2ocHu_FlQPbw.cer (raw, json) Hash identifier: geyBLKCV2+1kg55ZDNGHlk3xFrMUNZ8aBRYJFNKOwD0= Subject key identifier: 4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279EE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 05:09:04 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 203.24.163.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162286 (0x279ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 05:09:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91516DE, serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:25:bf:f1:54:91:89:35:04:ce:71:99:4c: 37:ae:6a:00:eb:20:97:61:f7:82:09:b6:73:17:8b: 1a:9f:64:e4:21:ef:db:f4:1f:3a:02:73:db:b2:21: 9e:4a:3f:85:b4:53:26:08:4c:1c:a6:1b:b2:e3:2c: dd:5c:aa:3c:e9:27:e0:ab:fe:99:cf:3d:7e:ce:73: c7:5b:60:ff:8e:59:5e:74:27:55:67:99:c1:42:62: fa:5d:cc:46:f9:69:5f:6a:62:ab:01:eb:fb:82:4c: 90:df:af:28:b8:c9:73:a5:03:27:ee:be:5e:d4:94: 53:8c:e4:a0:72:62:8f:da:02:c0:3b:cd:8d:ff:5e: 5a:6c:33:f7:ab:58:7b:16:8b:34:83:45:c3:9a:74: 5e:50:12:54:63:f0:0f:18:e9:db:16:05:58:fc:48: 3e:10:a8:07:ef:68:7c:fd:17:d5:79:1f:d1:e8:17: 43:8a:d4:c0:31:58:40:f2:44:fb:a8:e6:81:22:01: ee:9e:f1:27:1b:04:77:71:fb:ee:1e:b2:9e:82:78: 3b:b5:85:fb:e2:9b:96:4d:6a:0f:ea:4a:80:c6:b1: 3f:0e:16:d9:bf:8f:ab:6c:f4:bd:f1:1f:9f:6e:3f: c4:4c:eb:67:ee:70:73:1b:cc:1c:64:16:37:26:e1: 59:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.24.163.0/24 Signature Algorithm: sha256WithRSAEncryption 45:2a:0a:30:29:a0:a5:f2:db:51:db:82:21:9c:94:2d:7a:f1: 88:73:f2:d1:36:53:f3:72:6d:4c:16:3f:69:5e:cd:3f:68:90: e7:99:54:fc:98:12:17:39:29:5f:b4:c5:1d:d9:c5:d4:86:86: fd:67:49:69:aa:0d:58:28:2a:51:4f:49:95:4b:73:f7:1c:2e: 5b:ae:51:20:a3:b4:34:a9:59:ed:29:d3:08:eb:2d:a1:5e:56: d7:9f:5f:17:f7:9d:dc:d7:d6:8c:5d:52:db:2e:c9:9c:39:90: a8:48:c7:8d:de:44:84:1b:66:27:80:03:fa:8f:82:0f:1a:d8: 75:af:68:cb:56:7b:33:54:0d:75:a6:ab:d5:02:e7:8a:5a:73: ca:1b:23:d6:15:87:0d:f0:12:ca:5d:ab:4c:4b:40:ef:89:95: 19:6c:5c:51:48:e9:de:e2:9e:fd:e8:8f:08:2e:ae:67:72:5c: 68:b8:c4:4e:a4:02:d6:15:be:a0:3c:94:b2:ba:d8:7a:83:5e: 5c:9d:e6:c0:dc:e1:c3:26:83:cc:ce:ac:1c:76:a8:00:a0:ec: a1:66:d2:ed:34:da:79:29:fc:f8:b2:6f:17:96:dd:a7:b1:e6: 5e:c2:56:93:6a:30:ea:71:65:d6:a6:4c:40:f5:9c:65:3d:87: 32:01:28:13 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnnuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTA1MDkwNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTE2REUxMTAvBgNVBAUTKDREMzEzMTM0RDFBM0E1Nzc0M0RCRjAz NkExQzFFRUZDNTk1MDNEQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC30iW/8VSRiTUEznGZTDeuagDrIJdh94IJtnMXixqfZOQh79v0HzoCc9uyIZ5K P4W0UyYITBymG7LjLN1cqjzpJ+Cr/pnPPX7Oc8dbYP+OWV50J1VnmcFCYvpdzEb5 aV9qYqsB6/uCTJDfryi4yXOlAyfuvl7UlFOM5KByYo/aAsA7zY3/XlpsM/erWHsW izSDRcOadF5QElRj8A8Y6dsWBVj8SD4QqAfvaHz9F9V5H9HoF0OK1MAxWEDyRPuo 5oEiAe6e8ScbBHdx++4esp6CeDu1hfvim5ZNag/qSoDGsT8OFtm/j6ts9L3xH59u P8RM62fucHMbzBxkFjcm4VnpAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUTTExNNGj pXdD2/A2ocHu/FlQPbwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUxNkRFLzM3OURCMDcwMUE4QTExRjBBRjBGMzM3Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1MTZERS8zNzlEQjA3MDFBOEExMUYwQUYwRjMzN0NDNEY5QUUwMi9UVEV4Tk5H anBYZEQyX0Eyb2NIdV9GbFFQYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLGKMwDQYJKoZIhvcNAQELBQADggEBAEUqCjApoKXy21HbgiGc lC168Yhz8tE2U/NybUwWP2lezT9okOeZVPyYEhc5KV+0xR3ZxdSGhv1nSWmqDVgo KlFPSZVLc/ccLluuUSCjtDSpWe0p0wjrLaFeVtefXxf3ndzX1oxdUtsuyZw5kKhI x43eRIQbZieAA/qPgg8a2HWvaMtWezNUDXWmq9UC54pac8obI9YVhw3wEspdq0xL QO+JlRlsXFFI6d7inv3ojwgurmdyXGi4xE6kAtYVvqA8lLK62HqDXlyd5sDc4cMm g8zOrBx2qACg7KFm0u002nkp/PiybxeW3aex5l7CVpNqMOpxZdamTED1nGU9hzIB KBM= -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:52 2025 by rpki-client