This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer File: ddHHozMD2o3GQirjUXA_KlKN874.cer (raw, json) Hash identifier: RGJwTY9qj9OPtAJzXgcIPDVb479gFfLqtRFDet3KmXU= Subject key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028422 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 14:06:26 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 137249 IP: 103.106.20.0/22 IP: 2402:37c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164898 (0x28422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 6 14:06:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1e:b7:b9:9b:4a:25:04:e2:ee:60:78:27:58: fa:4c:6e:bd:53:59:2b:3e:7a:e2:69:93:a4:ba:19: f7:56:f0:a0:75:c6:fc:aa:e1:5c:19:0d:58:af:5e: 09:09:89:34:86:3e:3c:eb:88:38:1a:f7:a4:18:d6: dc:58:be:78:e9:96:ae:d2:c3:67:d4:29:56:2e:b5: 4f:c1:ed:bc:95:f8:da:38:66:c7:05:77:41:10:a6: 2b:2b:25:e6:da:8c:32:b8:44:f3:e2:10:c6:05:cc: 7f:8b:49:98:20:62:c3:30:4a:80:06:e1:cd:ef:bf: 99:bf:7c:44:7e:60:65:a0:ce:1b:05:cc:2f:c8:17: 4e:63:cd:f8:8a:4a:42:d2:d0:37:18:ef:63:4b:94: 9b:a9:68:ec:95:42:fd:b8:a4:3c:d4:8c:21:b7:db: bf:10:86:cd:b6:d3:41:f1:43:67:1c:59:43:ba:6e: a8:80:65:ed:55:ef:6f:4e:be:c4:f7:56:ed:38:ae: 6e:71:c1:f7:38:26:6f:e0:f5:14:df:c7:96:27:0d: 75:ab:0c:c4:e3:71:2d:dd:3d:63:7d:14:d5:02:7f: 27:ba:aa:78:a3:77:be:cb:81:55:22:e1:9e:cb:4b: fd:ef:d3:94:90:2e:8b:74:05:ac:26:51:2f:cb:62: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137249 sbgp-ipAddrBlock: critical IPv4: 103.106.20.0/22 IPv6: 2402:37c0::/32 Signature Algorithm: sha256WithRSAEncryption 31:62:09:18:d3:2c:3b:dd:34:8c:52:56:f5:3b:8d:4a:e0:ae: de:0e:eb:72:80:c2:b3:ea:a6:d6:38:86:41:c3:19:f7:38:3e: cc:8d:2b:9c:13:b6:eb:54:9a:19:9f:6f:f2:95:de:1c:fa:02: c6:e1:f0:61:33:cb:32:7a:23:d9:4b:88:46:8c:62:72:38:1b: 45:ec:59:27:a7:6d:d4:17:f9:b9:62:bc:f0:b2:93:98:47:ff: 3d:0a:11:8c:c2:5c:f5:9e:43:50:c7:c9:45:d5:38:13:f6:f6: 54:33:b1:74:94:c8:da:32:12:84:dd:f6:56:ae:83:d7:56:bf: 4e:8c:5b:ea:e4:47:63:99:60:09:3b:1b:15:0c:94:36:46:8a: 66:ff:33:8e:db:59:9c:79:e2:18:e9:f7:cd:a9:87:9b:05:f0: 4f:e6:7f:99:b4:47:12:9b:c6:59:8d:dc:fa:71:9d:9a:5a:7a: d4:f0:0f:dc:fa:37:fd:12:14:0b:c6:87:a5:ae:1b:2a:69:cd: f3:89:9c:a7:68:ff:f2:68:c1:7a:9c:d9:0c:ad:ff:75:71:73: e5:96:e5:2c:52:06:73:7c:17:20:79:cf:f0:bf:d5:99:d6:9f: a1:59:b7:ee:57:45:60:0c:2e:c6:61:a6:6a:42:2d:ee:6d:87: 12:aa:63:de -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoQiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNjE0MDYyNloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFF MzUxNzAzRjJBNTI4REYzQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2Hre5m0olBOLuYHgnWPpMbr1TWSs+euJpk6S6GfdW8KB1xvyq4VwZDVivXgkJ iTSGPjzriDga96QY1txYvnjplq7Sw2fUKVYutU/B7byV+No4ZscFd0EQpisrJeba jDK4RPPiEMYFzH+LSZggYsMwSoAG4c3vv5m/fER+YGWgzhsFzC/IF05jzfiKSkLS 0DcY72NLlJupaOyVQv24pDzUjCG3278Qhs2200HxQ2ccWUO6bqiAZe1V729OvsT3 Vu04rm5xwfc4Jm/g9RTfx5YnDXWrDMTjcS3dPWN9FNUCfye6qnijd77LgVUi4Z7L S/3v05SQLot0BawmUS/LYq01AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUddHHozMD 2o3GQirjUXA/KlKN874wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM1ODMyLzZENjBGOUQ4ODc5NzExRUU5RjNFRDQ0RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNTgzMi82RDYwRjlEODg3OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pN RDJvM0dRaXJqVVhBX0tsS044NzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhghMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2oUMA0EAgAC MAcDBQAkAjfAMA0GCSqGSIb3DQEBCwUAA4IBAQAxYgkY0yw73TSMUlb1O41K4K7e DutygMKz6qbWOIZBwxn3OD7MjSucE7brVJoZn2/yld4c+gLG4fBhM8syeiPZS4hG jGJyOBtF7Fknp23UF/m5YrzwspOYR/89ChGMwlz1nkNQx8lF1TgT9vZUM7F0lMja MhKE3fZWroPXVr9OjFvq5EdjmWAJOxsVDJQ2Ropm/zOO21mceeIY6ffNqYebBfBP 5n+ZtEcSm8ZZjdz6cZ2aWnrU8A/c+jf9EhQLxoelrhsqac3ziZynaP/yaMF6nNkM rf91cXPlluUsUgZzfBcgec/wv9WZ1p+hWbfuV0VgDC7GYaZqQi3ubYcSqmPe -----END CERTIFICATE-----Generated at Sun Jan 25 04:28:04 2026 by rpki-client