This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer File: aaSG-_IUhPFBL7ioCieKJIzvvrI.cer (raw, json) Hash identifier: dZ1C5hj+aVNjFfk4rw+jBRCBoRWokN6THFmIt6Ta5Zc= Subject key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282CB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:10:07 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 138004 IP: 180.94.20.0/23 IP: 2401:51e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164555 (0x282cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 03:10:07 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:62:8f:8a:b0:13:8a:2a:18:90:61:f6:2e: df:95:e6:7b:99:7b:ec:48:be:e2:45:83:f5:9c:11: 7d:30:f1:5e:a2:6d:79:93:48:7f:57:cb:15:76:07: ba:20:a4:78:f2:ba:c5:f1:fc:e4:0b:f0:f7:7e:a4: 3d:82:ef:c0:a4:d5:1a:0f:dc:56:82:b5:bf:9d:05: 40:8a:63:e0:15:ea:01:e3:84:d1:2e:94:9b:60:92: a6:6f:f7:d7:98:f9:26:f1:55:fb:47:17:30:35:99: 64:5a:43:b9:e1:76:23:69:60:98:ce:49:a5:1a:f3: f7:54:ed:4a:b8:40:90:04:cb:f0:10:3e:eb:72:9e: e5:50:a5:80:e8:5d:2d:35:c9:82:8c:33:7b:b8:73: 86:7c:0f:99:3c:21:e4:f7:c6:cc:aa:ca:71:ba:16: 1a:6c:c2:43:99:86:2c:94:b3:54:5b:9e:c0:a4:3a: f1:42:b2:53:14:55:5d:34:b9:8b:76:5c:2c:6a:24: 5d:35:c0:a5:1a:02:3b:f4:90:dc:67:b5:2c:5c:d6: 5d:ab:ba:f0:24:ac:11:82:01:aa:11:6f:5d:e3:a6: 10:a6:1e:49:75:20:14:23:81:89:3d:e0:e5:b4:9e: a9:25:41:43:e3:8d:c6:3a:c6:dd:1d:f4:0a:d8:7b: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138004 sbgp-ipAddrBlock: critical IPv4: 180.94.20.0/23 IPv6: 2401:51e0::/32 Signature Algorithm: sha256WithRSAEncryption cd:ed:9d:b8:86:f1:1f:e7:5e:60:a7:6d:fe:51:4f:68:58:67: f3:15:0b:1e:6b:5c:95:e6:dd:37:50:f9:a7:54:b4:c3:38:78: 75:b3:41:29:00:3e:c4:2d:77:5a:aa:ff:f0:05:0a:1b:d7:ae: aa:8c:56:01:27:81:61:14:ff:f6:3b:a9:11:f8:94:da:26:1b: 8b:42:10:a9:ef:91:e6:36:d3:74:51:e0:f6:b8:36:62:e2:65: a9:48:55:5a:5e:0e:32:a7:c2:22:b1:c5:0d:70:af:dd:e8:0f: d1:d5:a9:fe:8c:8b:58:09:91:c2:f4:ce:43:4e:f4:18:1e:c4: eb:26:90:ce:dc:a6:c5:76:fb:ba:9a:70:b0:54:43:36:17:16: 1c:49:d9:e0:56:59:a5:c0:f2:f6:bd:9a:7c:6e:14:a6:44:87: f2:c4:1e:13:09:f7:9b:8e:19:ac:11:b8:f4:d7:63:46:36:ff: 3e:61:92:2c:f7:7e:fb:60:04:c6:85:d9:45:ad:af:e8:6a:18: 1d:14:64:40:af:c6:15:30:7e:f3:86:8f:de:e7:35:6b:a3:dc: 1d:ea:55:cd:99:98:c6:a4:eb:71:0f:6c:f5:13:16:54:d0:3c: 57:14:b9:85:eb:a4:55:0e:cd:79:88:5e:2f:36:f3:d6:6b:36: 25:f4:6f:98 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoLLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTAzMTAwN1oXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjQ3MTMxMTAvBgNVBAUTKDY5QTQ4NkZCRjIxNDg0RjE0MTJGQjhB ODBBMjc4QTI0OENFRkJFQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTEWKPirATiioYkGH2Lt+V5nuZe+xIvuJFg/WcEX0w8V6ibXmTSH9XyxV2B7og pHjyusXx/OQL8Pd+pD2C78Ck1RoP3FaCtb+dBUCKY+AV6gHjhNEulJtgkqZv99eY +SbxVftHFzA1mWRaQ7nhdiNpYJjOSaUa8/dU7Uq4QJAEy/AQPutynuVQpYDoXS01 yYKMM3u4c4Z8D5k8IeT3xsyqynG6FhpswkOZhiyUs1RbnsCkOvFCslMUVV00uYt2 XCxqJF01wKUaAjv0kNxntSxc1l2ruvAkrBGCAaoRb13jphCmHkl1IBQjgYk94OW0 nqklQUPjjcY6xt0d9ArYe99fAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUaaSG+/IU hPFBL7ioCieKJIzvvrIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI0NzEzL0ZFMUJEOTdDODkyQTExRUVCNjE0ODI2QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNDcxMy9GRTFCRDk3Qzg5MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9J VWhQRkJMN2lvQ2llS0pJenZ2ckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhsUMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBtF4UMA0EAgAC MAcDBQAkAVHgMA0GCSqGSIb3DQEBCwUAA4IBAQDN7Z24hvEf515gp23+UU9oWGfz FQsea1yV5t03UPmnVLTDOHh1s0EpAD7ELXdaqv/wBQob166qjFYBJ4FhFP/2O6kR +JTaJhuLQhCp75HmNtN0UeD2uDZi4mWpSFVaXg4yp8IiscUNcK/d6A/R1an+jItY CZHC9M5DTvQYHsTrJpDO3KbFdvu6mnCwVEM2FxYcSdngVlmlwPL2vZp8bhSmRIfy xB4TCfebjhmsEbj012NGNv8+YZIs9377YATGhdlFra/oahgdFGRAr8YVMH7zho/e 5zVro9wd6lXNmZjGpOtxD2z1ExZU0DxXFLmF66RVDs15iF4vNvPWazYl9G+Y -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:18 2026 by rpki-client