This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer (raw, json) Hash identifier: kYb1uKssGI5vaoT3WqZ82GaAMFevmcLt3GP8lopG6pc= Subject key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0284A0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft caRepository: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 12:53:54 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 135357 IP: 103.20.192.0/22 IP: 103.27.176.0/22 IP: 103.30.4.0/22 IP: 103.226.152.0/22 IP: 202.8.120.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165024 (0x284a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 8 12:53:54 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d3:66:26:4f:d4:84:88:eb:c1:dd:2b:eb:d1: 91:c4:b3:ea:6a:22:f4:53:10:79:a1:c4:f0:e7:54: 53:b4:38:df:00:0b:a8:86:00:be:a5:e6:bd:26:73: ec:df:9d:9d:b8:ed:1e:2d:6a:04:86:fa:a6:0f:78: 10:5f:e7:ca:ed:1c:36:d9:ff:a8:a3:18:6a:07:c4: 4d:0b:e5:ab:b8:8a:c1:3d:b1:a0:9c:ae:d3:9b:84: 3b:98:ad:b0:a4:7d:ad:38:11:c0:59:31:22:9a:22: a0:6a:17:1b:80:2e:79:6d:81:30:d2:56:71:df:25: 2f:d2:a9:94:db:c4:7f:05:65:6a:56:a3:cd:53:ce: 51:cc:a2:1f:5d:9f:40:3f:2a:ce:59:61:f1:78:46: db:37:5a:b3:1b:0e:1b:ab:3b:97:91:0f:1e:9a:74: 3b:bd:61:60:cd:87:47:4d:ae:f8:34:c8:26:90:97: d8:06:a9:fb:e5:14:a6:08:ba:53:1d:ed:24:47:bd: c1:71:4c:b3:14:27:1f:f3:c3:b6:8a:7c:62:bc:a1: 48:08:2d:5c:9a:7b:f9:4e:3c:04:7d:af:a4:80:cd: 65:6d:bf:c4:ff:ad:69:bd:49:d3:b3:6d:89:8e:eb: 14:56:b2:1e:ce:8b:25:c5:4e:fe:c8:88:66:2e:7d: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135357 sbgp-ipAddrBlock: critical IPv4: 103.20.192.0/22 103.27.176.0/22 103.30.4.0/22 103.226.152.0/22 202.8.120.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:66:79:eb:1b:5a:57:63:97:fc:a2:fa:75:cb:2b:b6:20:56: 97:ab:3a:ba:c2:1c:b9:8c:83:5f:ae:0d:3d:d5:6f:23:cb:9c: be:04:a9:bc:6f:af:a6:e9:0f:94:64:b5:e4:a1:43:71:3c:33: c9:0d:46:09:4b:61:50:40:ff:8c:84:c0:97:27:34:fd:f8:db: 85:29:42:08:4a:5b:5a:10:a5:29:55:91:b3:2a:53:3a:58:74: c6:12:21:2c:a8:ce:5c:98:0a:f1:35:b4:56:da:ba:66:13:0f: 5c:a2:85:b8:7b:fb:72:61:87:a0:4d:3b:86:7c:18:65:5e:d9: 65:6e:96:63:32:eb:ef:ff:13:db:5f:c0:b5:db:1e:eb:8d:1f: a3:2b:1f:f1:f4:dc:0f:53:cb:8a:d1:a6:d1:80:0b:0c:df:13: 8b:31:f9:f8:a2:dc:f5:19:ee:63:02:4f:f0:6d:89:db:3f:74: 00:17:04:3b:7d:21:c9:8d:d9:11:e2:6e:d4:59:b5:f6:cc:b7: 59:95:10:f2:52:0e:b4:59:24:6e:5b:55:a3:b7:c9:c9:78:e6: 61:ce:20:6d:78:ef:35:ed:c0:2f:f1:7c:1c:87:91:bc:cf:eb: 05:35:ef:15:f0:bc:e4:e0:12:ee:9a:b0:f4:e4:aa:14:92:95: 5d:c1:09:d5 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIDAoSgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwODEyNTM1NFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDEyNzQxMTAvBgNVBAUTKDY5NThBMUFCM0FDRjdGOTVFREE1QUQ5 QzlFNDFFNDQ5QjZEMTE3RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD602YmT9SEiOvB3Svr0ZHEs+pqIvRTEHmhxPDnVFO0ON8AC6iGAL6l5r0mc+zf nZ247R4tagSG+qYPeBBf58rtHDbZ/6ijGGoHxE0L5au4isE9saCcrtObhDuYrbCk fa04EcBZMSKaIqBqFxuALnltgTDSVnHfJS/SqZTbxH8FZWpWo81TzlHMoh9dn0A/ Ks5ZYfF4Rts3WrMbDhurO5eRDx6adDu9YWDNh0dNrvg0yCaQl9gGqfvlFKYIulMd 7SRHvcFxTLMUJx/zw7aKfGK8oUgILVyae/lOPAR9r6SAzWVtv8T/rWm9SdOzbYmO 6xRWsh7OiyXFTv7IiGYufc39AgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUaVihqzrP f5Xtpa2cnkHkSbbRF/IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQxMjc0L0Q5OUYzQUZBRkIyMzExRUY5RjE1Qzc0QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0MTI3NC9EOTlGM0FGQUZCMjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpy UGY1WHRwYTJjbmtIa1NiYlJGX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhC9MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCZxTAAwQCZxuw AwQCZx4EAwQCZ+KYAwQCygh4MA0GCSqGSIb3DQEBCwUAA4IBAQBKZnnrG1pXY5f8 ovp1yyu2IFaXqzq6why5jINfrg091W8jy5y+BKm8b6+m6Q+UZLXkoUNxPDPJDUYJ S2FQQP+MhMCXJzT9+NuFKUIISltaEKUpVZGzKlM6WHTGEiEsqM5cmArxNbRW2rpm Ew9cooW4e/tyYYegTTuGfBhlXtllbpZjMuvv/xPbX8C12x7rjR+jKx/x9NwPU8uK 0abRgAsM3xOLMfn4otz1Ge5jAk/wbYnbP3QAFwQ7fSHJjdkR4m7UWbX2zLdZlRDy Ug60WSRuW1Wjt8nJeOZhziBteO817cAv8Xwch5G8z+sFNe8V8Lzk4BLumrD05KoU kpVdwQnV -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:32 2026 by rpki-client