This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer File: jVvm9QWF2v57SAa6CeIlsMxvKQs.cer (raw, json) Hash identifier: IJ9Gf9NwTPUR37cthYArVh5UJ0l2vyHEnRg70gYLIEY= Subject key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027425 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft caRepository: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 12:23:39 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 140504 IP: 43.230.6.0/24 IP: 103.20.124.0/24 IP: 103.49.173.0 -- 103.49.175.255 IP: 203.190.216.0/24 IP: 2403:ae80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160805 (0x27425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 12:23:39 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:9f:6d:4c:13:97:9c:5b:e1:f1:da:1a:22: 95:99:cc:a1:8a:55:b3:fc:36:64:db:e5:f0:72:1f: c8:cb:de:41:50:ac:59:21:45:32:7a:4c:9f:80:b1: 21:4d:0b:94:9d:48:93:70:73:84:d3:96:8c:ca:4c: 34:5e:e1:e4:88:85:b2:f1:f5:92:f5:78:e9:86:2a: 2c:25:fb:dd:87:43:9b:bd:af:ed:51:10:9c:bf:7d: 27:1a:93:93:c8:7e:d3:b3:06:69:94:8b:3e:aa:79: c0:f4:84:b9:2e:db:93:04:b4:62:11:3d:3e:f6:f1: ca:d9:d6:83:d5:1e:9e:db:7a:aa:87:6b:42:37:f7: 5e:a2:76:f1:71:03:05:6f:07:eb:cc:aa:78:9f:9e: bb:ed:bc:14:71:cc:47:dd:e9:15:3d:1d:50:94:93: e6:df:e8:ea:4e:6a:73:41:2b:53:2f:1f:20:fd:2d: bb:ae:13:b2:bc:b9:69:43:b4:27:b3:e0:32:f4:45: 37:4b:f1:66:3a:8c:9c:82:83:76:ef:ac:a3:3c:c0: ad:a2:35:ae:0b:a5:6d:32:04:b6:7a:a3:de:32:60: f8:8a:a3:f8:7e:b9:1c:e0:b8:04:d0:09:c3:e7:cf: 5a:e6:75:41:51:85:eb:4e:15:bb:1b:62:81:6a:45: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 140504 sbgp-ipAddrBlock: critical IPv4: 43.230.6.0/24 103.20.124.0/24 103.49.173.0-103.49.175.255 203.190.216.0/24 IPv6: 2403:ae80::/32 Signature Algorithm: sha256WithRSAEncryption 3a:c4:77:aa:96:48:e4:42:6f:50:32:e9:16:36:ab:be:ce:0b: 4e:ee:6e:f6:94:a5:7a:90:dd:81:17:77:54:11:64:ab:a9:c1: b1:39:c0:3c:7f:63:b1:e6:78:73:2e:ce:07:4a:61:61:18:6e: 7d:3e:6b:9d:52:0a:89:b3:91:82:89:16:b2:f9:26:4b:1b:54: ec:3e:db:5b:75:8b:7d:ae:dc:8a:16:4c:ec:b1:f7:4a:0d:32: 33:67:4b:74:6c:82:07:1c:00:ef:1e:77:6b:da:a4:62:7f:b7: 83:36:ab:f6:02:fa:9d:cb:46:14:51:47:39:5c:36:ee:58:c8: 66:90:1d:b2:f3:53:6a:f2:59:c9:83:c0:ec:a0:de:c3:5c:5f: 4b:56:8f:8a:3c:d3:61:6c:87:3b:e7:dc:7c:05:ab:12:fc:f9: d9:93:5c:e0:8c:70:77:8e:eb:93:ac:c9:10:a1:d7:e2:2e:3d: f1:76:a7:ab:d2:99:ea:e9:47:7a:77:7e:57:05:66:0e:4a:a5: d7:c4:cc:af:aa:7c:5c:c0:c4:42:8e:3e:9b:a6:b5:61:62:50: 42:39:d9:16:66:f6:c9:fc:5a:cf:5a:0d:fe:6c:ae:b8:8e:19: 82:c5:bc:96:29:cb:c8:55:bd:30:02:4d:4e:12:ae:1b:42:1d: 61:cf:e1:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIDAnQlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwOTEyMjMzOVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZC QTA5RTIyNUIwQ0M2RjI5MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL3J9tTBOXnFvh8doaIpWZzKGKVbP8NmTb5fByH8jL3kFQrFkhRTJ6TJ+AsSFN C5SdSJNwc4TTlozKTDRe4eSIhbLx9ZL1eOmGKiwl+92HQ5u9r+1REJy/fScak5PI ftOzBmmUiz6qecD0hLku25MEtGIRPT728crZ1oPVHp7beqqHa0I3916idvFxAwVv B+vMqnifnrvtvBRxzEfd6RU9HVCUk+bf6OpOanNBK1MvHyD9LbuuE7K8uWlDtCez 4DL0RTdL8WY6jJyCg3bvrKM8wK2iNa4LpW0yBLZ6o94yYPiKo/h+uRzguATQCcPn z1rmdUFRhetOFbsbYoFqRX9pAgMBAAGjggM4MIIDNDAdBgNVHQ4EFgQUjVvm9QWF 2v57SAa6CeIlsMxvKQswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE2ODFDL0JDNzhFMzZBOEU3RjExRUE5NDcxRDE2OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFX RjJ2NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiTYMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQAK+YGAwQAZxR8 MAwDBABnMa0DBARnMaADBADLvtgwDQQCAAIwBwMFACQDroAwDQYJKoZIhvcNAQEL BQADggEBADrEd6qWSORCb1Ay6RY2q77OC07ubvaUpXqQ3YEXd1QRZKupwbE5wDx/ Y7HmeHMuzgdKYWEYbn0+a51SComzkYKJFrL5JksbVOw+21t1i32u3IoWTOyx90oN MjNnS3RsggccAO8ed2vapGJ/t4M2q/YC+p3LRhRRRzlcNu5YyGaQHbLzU2ryWcmD wOyg3sNcX0tWj4o802Fshzvn3HwFqxL8+dmTXOCMcHeO65OsyRCh1+IuPfF2p6vS merpR3p3flcFZg5KpdfEzK+qfFzAxEKOPpumtWFiUEI52RZm9sn8Ws9aDf5srriO GYLFvJYpy8hVvTACTU4SrhtCHWHP4UU= -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:18 2025 by rpki-client