This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer File: dd3NDNRiWKwZGsOQoskl2MA1qFc.cer (raw, json) Hash identifier: YaTWfIAExmrPd0QFWfwyQdVvhDOjvRqMUrEO7EBrEeY= Subject key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0286CE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft caRepository: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 16 Jan 2026 13:24:42 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 139050 IP: 203.14.165.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165582 (0x286ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 16 13:24:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A917E04F, serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:6f:fa:96:98:da:6a:f3:29:47:b9:2c:d4: e6:2f:e8:bd:ae:b9:bc:e1:99:85:78:b9:ef:e4:1a: ff:97:4f:d4:d6:78:4a:cc:ff:84:b7:f0:8c:2e:a9: b1:f9:e4:35:7b:e3:1d:f5:c5:53:ba:4c:78:e8:4e: 7b:fe:29:87:cc:21:96:c6:9a:48:8a:95:cd:4e:b4: ee:98:b0:4a:09:5d:c5:e3:2b:c9:75:28:6b:98:77: cd:94:94:f5:7f:31:c5:b1:56:61:35:87:02:b9:e5: 81:39:d8:45:07:c3:1d:9b:cf:68:c9:95:fe:1a:30: e9:71:fb:78:5c:d6:a3:4e:ae:43:36:af:e8:df:cd: da:5a:c5:29:c7:f7:83:b7:e9:30:b6:0f:9d:5b:1b: 21:61:d1:6f:ad:a8:92:72:40:0e:49:d2:d7:b8:b0: 67:ff:29:98:db:24:0a:bc:d9:0d:15:93:7f:eb:bc: c0:24:bd:74:c3:bc:e9:7b:a1:7d:af:70:58:62:0d: 50:db:4c:a5:74:a0:0d:ad:32:77:51:a3:e2:10:b4: 4f:91:f5:e3:10:c9:ba:6f:ce:80:08:93:1e:ad:e6: 78:fc:4c:6f:40:fd:4e:65:44:c7:a7:4a:7a:ac:79: 13:9e:e6:e4:ea:6e:56:82:15:21:4f:57:e2:57:96: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139050 sbgp-ipAddrBlock: critical IPv4: 203.14.165.0/24 Signature Algorithm: sha256WithRSAEncryption 25:5a:13:91:ae:3d:5d:7c:de:f8:b5:21:bc:fe:43:72:96:ef: 50:b8:37:b8:82:cc:c2:9c:e1:65:b0:d2:ac:51:44:93:93:22: d4:06:54:59:16:d7:7d:f1:d9:70:a5:19:72:61:a7:af:4a:5d: a7:46:3f:73:a8:01:27:66:95:04:74:0c:30:ee:c9:16:b1:87: ee:9b:9c:66:b7:b2:b1:67:7f:8f:74:ad:e8:5c:c4:ef:60:e8: 31:6e:20:bc:2e:39:23:80:ec:6d:6c:e3:9d:90:c5:3b:28:e4: 53:c3:9a:3f:83:8a:7b:aa:9c:18:b2:b2:65:ba:b0:35:a1:18: 38:47:96:d6:23:06:05:42:73:3b:1b:c7:8c:ef:51:05:f4:94: 50:15:64:61:1d:3e:6f:a4:97:27:73:dd:ea:24:10:b0:0e:5a: 87:cd:45:c2:1d:5b:c3:5a:00:61:86:e1:2a:e2:94:f8:c8:98: a2:98:4b:b9:9d:16:7e:5b:a4:84:78:75:5c:de:88:72:9f:c3: 74:b9:b1:5c:98:be:1b:d5:4f:14:ce:82:4c:75:e3:1e:bc:e4: 6b:0f:6c:72:2f:5a:e8:d5:b7:42:da:f9:9e:7d:1a:52:18:3b: 34:b4:cb:ec:7e:0c:a4:c0:78:4c:a0:a3:2f:0b:97:11:91:3b: 49:35:41:1b -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAobOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNjEzMjQ0MloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxN0UwNEYxMTAvBgNVBAUTKDc1RERDRDBDRDQ2MjU4QUMxOTFBQzM5 MEEyQzkyNUQ4QzAzNUE4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6KG/6lpjaavMpR7ks1OYv6L2uubzhmYV4ue/kGv+XT9TWeErM/4S38IwuqbH5 5DV74x31xVO6THjoTnv+KYfMIZbGmkiKlc1OtO6YsEoJXcXjK8l1KGuYd82UlPV/ McWxVmE1hwK55YE52EUHwx2bz2jJlf4aMOlx+3hc1qNOrkM2r+jfzdpaxSnH94O3 6TC2D51bGyFh0W+tqJJyQA5J0te4sGf/KZjbJAq82Q0Vk3/rvMAkvXTDvOl7oX2v cFhiDVDbTKV0oA2tMndRo+IQtE+R9eMQybpvzoAIkx6t5nj8TG9A/U5lRMenSnqs eROe5uTqblaCFSFPV+JXlssRAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUdd3NDNRi WKwZGsOQoskl2MA1qFcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdFMDRGLzQxODUzN0Y0OTcwMzExRTlCNEI3QjI1QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3RTA0Ri80MTg1MzdGNDk3MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5S aVdLd1pHc09Rb3NrbDJNQTFxRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh8qMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyw6lMA0GCSqG SIb3DQEBCwUAA4IBAQAlWhORrj1dfN74tSG8/kNylu9QuDe4gszCnOFlsNKsUUST kyLUBlRZFtd98dlwpRlyYaevSl2nRj9zqAEnZpUEdAww7skWsYfum5xmt7KxZ3+P dK3oXMTvYOgxbiC8LjkjgOxtbOOdkMU7KORTw5o/g4p7qpwYsrJlurA1oRg4R5bW IwYFQnM7G8eM71EF9JRQFWRhHT5vpJcnc93qJBCwDlqHzUXCHVvDWgBhhuEq4pT4 yJiimEu5nRZ+W6SEeHVc3ohyn8N0ubFcmL4b1U8UzoJMdeMevORrD2xyL1ro1bdC 2vmefRpSGDs0tMvsfgykwHhMoKMvC5cRkTtJNUEb -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:59 2026 by rpki-client