This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
File:                     Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer (raw, json)
Hash identifier:          x7ZQ1giQDWfBVFc6hc6m+aRupXDYv5GOca/QJ+SpfiA=
Subject key identifier:   52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027671
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 19 Nov 2025 21:16:25 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 139834
                          IP: 103.145.232.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 06:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161393 (0x27671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 19 21:16:25 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:ba:02:33:47:f2:69:b4:5c:5c:2e:46:1d:
                    ee:58:d1:4a:26:12:72:42:10:a1:77:89:b5:c8:3d:
                    c8:f5:60:31:13:1c:96:51:8e:dc:eb:2b:94:62:56:
                    17:a6:d7:cb:a9:fd:44:3d:1c:df:d3:15:10:09:e1:
                    9d:00:78:3d:7c:a7:15:8c:03:e5:16:4a:0b:68:26:
                    3e:79:c0:65:6b:8e:f6:0d:f3:b8:49:db:5b:c7:0f:
                    6d:96:fb:41:49:fd:2a:d5:85:ea:f9:2d:69:26:8d:
                    11:68:20:d1:53:5b:bf:92:83:c1:a0:2d:7f:52:f4:
                    fd:d1:ec:de:d9:d8:ea:a7:88:f6:d6:09:fe:69:5a:
                    f7:1d:8e:02:a6:06:1e:28:e1:9c:ed:a5:46:83:23:
                    17:47:9e:50:d4:25:26:05:ab:54:06:5c:bc:1a:0a:
                    a7:90:c6:3b:ba:eb:ad:da:96:ba:8f:36:67:44:8e:
                    9c:2e:eb:fc:d1:fa:26:44:a0:e0:a9:de:16:3e:8e:
                    37:04:36:87:4f:f6:af:27:6e:de:f7:61:9d:9f:e4:
                    41:67:f5:17:d1:f5:9c:c1:66:25:76:2f:d2:ce:49:
                    98:df:c0:29:f1:d3:0b:c6:84:3d:b9:2f:d8:a9:5c:
                    7f:f5:ed:ee:47:97:31:82:de:6b:51:69:a4:8f:95:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139834

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:4b:ea:53:82:a4:18:70:84:f0:b6:e1:30:6e:a4:70:50:
         bd:f3:0f:98:25:a7:0c:17:8f:dd:ac:37:ef:6e:e0:8d:9e:aa:
         74:9a:49:76:1b:2e:54:eb:67:24:2d:0f:b4:d8:c0:6c:ab:e4:
         c9:35:c6:2c:40:cf:5e:af:39:51:93:6d:11:73:68:80:7b:49:
         89:4e:e6:b9:40:13:2c:c8:74:c9:78:dd:67:7e:6a:d7:f8:5a:
         fc:d7:97:ff:cd:d4:ee:64:18:33:86:c2:e0:73:11:b8:46:53:
         f0:a8:42:16:51:58:ab:19:39:aa:cf:50:31:7a:1f:8f:4e:87:
         d7:15:a8:f2:0c:14:6c:9a:16:b8:e7:bf:09:43:81:cb:30:9e:
         57:77:a0:04:6e:d8:90:47:be:0d:8c:f7:53:5c:1e:ad:07:52:
         f3:10:f7:7f:cc:f2:d9:8f:16:b1:98:f5:ac:2c:36:4d:61:23:
         ca:49:2e:0a:c8:65:a1:81:23:d2:3d:b1:2d:18:6f:e9:7a:e7:
         e5:eb:e3:5a:42:3f:d6:ef:26:39:2d:31:64:fc:5d:e7:5f:56:
         30:de:20:8e:1d:43:c9:47:c2:79:04:6b:13:c9:57:a4:66:7a:
         54:70:ff:d9:88:ed:d0:b7:26:50:be:5c:21:03:60:d9:69:cb:
         cd:eb:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:36:47 2025 by rpki-client