This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer File: kEojXLR0fghgD8HSa5P1HEZ066o.cer (raw, json) Hash identifier: na/YrKt7gvgvtamual8t3Gj1tyt7qb4GkANA3Y8y7M8= Subject key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277F5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft caRepository: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 17:44:19 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 135409 IP: 14.137.32.0/19 IP: 103.70.64.0/22 IP: 103.103.60.0/22 IP: 182.54.144.0/22 IP: 182.255.28.0/22 IP: 202.5.112.0/20 IP: 203.2.130.0/23 IP: 203.8.206.0/23 IP: 203.21.140.0/22 IP: 203.24.104.0/22 IP: 203.27.96.0/23 IP: 2001:df2:2600::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161781 (0x277f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 17:44:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:59:86:cd:8a:3a:09:94:f3:68:0d:15:4c:3d: 39:56:af:ef:dd:bd:52:3c:46:dd:9c:98:eb:24:ee: 0f:ef:e0:2d:55:0b:df:2b:fe:57:af:0f:13:e0:92: 4f:40:a9:b3:91:87:9a:ee:b1:2b:df:cb:08:f2:9b: 67:79:69:56:f7:ac:04:57:2e:67:f6:c3:19:50:c3: 96:b1:70:12:a2:ab:4d:33:96:f5:18:65:93:1d:b1: 86:be:80:be:cc:42:b7:a2:b7:0c:85:12:12:d0:2f: 2a:f2:20:91:ba:e4:e9:d7:a2:28:ed:8d:51:1f:ee: 50:f2:42:44:10:06:28:b8:d2:df:33:38:a2:09:75: de:06:64:2c:9e:45:7b:22:6b:5f:00:db:68:a7:56: 4b:18:e1:20:40:7c:2b:09:6d:68:e0:c3:af:97:d3: cc:2b:65:0a:b0:bc:17:75:aa:80:1d:9f:9a:c4:89: 72:f3:37:00:2f:05:99:24:52:f2:63:9c:fe:45:bb: f0:71:c8:3a:52:af:78:68:e9:dd:3b:65:3b:c0:a5: e8:53:ea:ad:d2:97:5d:3c:6e:86:b6:9f:f5:9a:97: 15:3c:f6:35:e5:17:83:db:18:75:b8:02:87:bb:89: 27:7e:87:e4:3c:a1:a9:d5:b4:12:a9:0d:d0:84:7a: 2f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135409 sbgp-ipAddrBlock: critical IPv4: 14.137.32.0/19 103.70.64.0/22 103.103.60.0/22 182.54.144.0/22 182.255.28.0/22 202.5.112.0/20 203.2.130.0/23 203.8.206.0/23 203.21.140.0/22 203.24.104.0/22 203.27.96.0/23 IPv6: 2001:df2:2600::/48 Signature Algorithm: sha256WithRSAEncryption 60:e6:c9:db:7a:8e:ee:66:1a:e6:93:7a:dc:ee:f2:34:42:fe: da:d0:d2:bb:81:4a:e5:bc:06:aa:36:f6:46:f3:b4:16:60:98: d5:df:84:67:72:58:6c:59:c7:ac:74:45:8e:67:f1:99:bb:79: 39:c4:2c:75:5f:8f:fa:2a:0a:14:be:fd:3e:44:6d:74:06:f4: 9a:78:b9:e9:be:69:35:27:0f:0c:ba:ca:32:7c:5e:0b:21:c4: b5:3f:32:fa:68:0b:19:a1:d8:35:9b:cc:42:8e:96:3b:82:05: 8c:35:e4:91:d1:c5:a2:bd:f0:ea:48:94:6e:aa:e2:9f:8e:54: dc:b0:7a:3d:05:db:5c:ff:5c:ed:5a:9c:0e:66:b2:f0:b5:21: ba:1c:35:ee:3b:a4:4e:26:90:b5:d7:42:5b:52:f2:19:8e:da: cc:d6:ab:8e:e7:3f:a9:8f:80:ad:f2:48:9f:55:59:30:b5:54: 88:9f:c6:8d:e6:71:ca:2e:4b:ab:a0:77:35:cf:b1:90:2d:9d: 69:6a:3c:ca:b8:69:9d:ac:48:b0:b2:6c:95:ce:d8:7f:15:32: e2:31:de:a1:98:82:7b:d7:52:f7:5e:ae:33:36:bf:ae:a3:85: 34:58:b5:1b:eb:6b:e3:8e:33:05:9b:df:13:ec:5f:a5:7e:10: ac:e5:2f:c1 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIDAnf1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTE3NDQxOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxN0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFE MjZCOTNGNTFDNDY3NEVCQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVWYbNijoJlPNoDRVMPTlWr+/dvVI8Rt2cmOsk7g/v4C1VC98r/levDxPgkk9A qbORh5rusSvfywjym2d5aVb3rARXLmf2wxlQw5axcBKiq00zlvUYZZMdsYa+gL7M QreitwyFEhLQLyryIJG65OnXoijtjVEf7lDyQkQQBii40t8zOKIJdd4GZCyeRXsi a18A22inVksY4SBAfCsJbWjgw6+X08wrZQqwvBd1qoAdn5rEiXLzNwAvBZkkUvJj nP5Fu/BxyDpSr3ho6d07ZTvApehT6q3Sl108boa2n/WalxU89jXlF4PbGHW4Aoe7 iSd+h+Q8oanVtBKpDdCEei+BAgMBAAGjggNcMIIDWDAdBgNVHQ4EFgQUkEojXLR0 fghgD8HSa5P1HEZ066owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdGMjQ3LzZEMjJFQUYwOEYwMzExRUNBNUM5RkUxMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExS MGZnaGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhDxMGwGCCsGAQUFBwEHAQH/BF0wWzBIBAIAATBCAwQFDokgAwQCZ0ZA AwQCZ2c8AwQCtjaQAwQCtv8cAwQEygVwAwQBywKCAwQBywjOAwQCyxWMAwQCyxho AwQByxtgMA8EAgACMAkDBwAgAQ3yJgAwDQYJKoZIhvcNAQELBQADggEBAGDmydt6 ju5mGuaTetzu8jRC/trQ0ruBSuW8Bqo29kbztBZgmNXfhGdyWGxZx6x0RY5n8Zm7 eTnELHVfj/oqChS+/T5EbXQG9Jp4uem+aTUnDwy6yjJ8XgshxLU/MvpoCxmh2DWb zEKOljuCBYw15JHRxaK98OpIlG6q4p+OVNywej0F21z/XO1anA5msvC1IbocNe47 pE4mkLXXQltS8hmO2szWq47nP6mPgK3ySJ9VWTC1VIifxo3mccouS6ugdzXPsZAt nWlqPMq4aZ2sSLCybJXO2H8VMuIx3qGYgnvXUvderjM2v66jhTRYtRvra+OOMwWb 3xPsX6V+EKzlL8E= -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:47 2025 by rpki-client