This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
File:                     nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer (raw, json)
Hash identifier:          b6LNpSVOi5ZXXXyiKWCRoHDnzhfWhSxhP0Hf0jJ7D2o=
Subject key identifier:   9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027BD9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 04 Dec 2025 12:40:04 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 139823
                          IP: 103.145.204.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 08:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162777 (0x27bd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  4 12:40:04 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:83:19:77:c2:b8:08:6e:a0:7f:f6:cb:be:
                    6e:2e:aa:a7:83:d4:b9:cc:5d:6e:a8:ed:81:b7:38:
                    d7:44:c7:e0:b5:10:df:88:9d:df:84:9f:b5:27:d6:
                    ec:69:64:d1:3a:bb:62:4a:e1:ae:0c:da:6f:d2:0f:
                    d1:d2:d6:c6:15:50:7a:0f:3b:ed:f6:b6:ea:04:fa:
                    d2:4e:bd:1d:53:3e:56:f2:ed:e4:78:95:42:c2:6d:
                    da:91:ae:62:50:0d:40:c5:f4:5b:27:be:86:6c:a8:
                    35:eb:04:5a:48:c7:3c:cc:f0:60:03:75:92:04:3b:
                    ab:e7:9b:05:d1:dd:4f:37:09:67:02:ad:cf:c3:26:
                    fb:1b:b4:29:b8:63:e6:64:b8:ee:82:39:50:5e:99:
                    d8:47:cd:62:6b:cf:e4:0e:37:63:cc:d2:1b:bd:ad:
                    82:bc:df:b4:af:55:2f:ae:20:10:e1:8a:29:c8:c8:
                    53:ac:50:c7:4b:5c:12:22:6f:6b:b4:79:71:78:3a:
                    77:cd:ef:2b:cb:9e:78:32:af:0a:50:98:1e:41:4f:
                    1e:e7:dc:c8:17:fb:bf:c6:aa:a3:ff:8b:2a:69:db:
                    c4:1b:b4:d7:bb:c6:ca:17:24:da:f4:d6:11:1b:7e:
                    cd:54:d5:3a:34:66:7f:65:d0:6d:6b:8b:46:31:bc:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139823

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:31:37:ee:94:35:4f:82:dd:ce:73:e7:78:8a:bf:87:b0:20:
         5d:bf:d9:02:b2:34:47:f0:95:34:5d:95:0f:39:f4:72:63:47:
         b7:96:23:b3:9b:ab:79:2e:e3:d5:55:67:d5:d1:0f:fd:8a:e4:
         62:a6:86:08:29:7a:4b:15:d6:45:0d:b1:67:0a:41:0a:cf:ef:
         02:a5:0b:cc:90:7f:5f:ad:88:6c:0f:f5:65:7c:9c:5b:46:cf:
         2b:71:20:3c:fc:a1:18:04:2f:b7:37:a8:84:d9:4a:08:71:e4:
         71:69:a3:5d:6d:5d:03:de:21:78:ff:c1:79:c0:cb:c5:e0:35:
         66:91:2a:bf:8f:fd:7c:ed:ee:aa:12:42:f7:0c:7f:88:e9:67:
         60:e5:c5:ec:61:ed:32:87:e6:c0:46:21:e2:6b:c5:a4:b7:a5:
         08:51:45:92:a6:a6:2c:07:06:af:10:37:5e:9e:81:fc:a5:6f:
         20:42:3f:51:4a:6f:a0:52:54:72:68:21:ed:59:f6:5b:cc:0f:
         e8:c0:05:fe:92:48:a1:12:c2:c0:29:27:d8:f4:3d:1d:85:e5:
         bb:78:ed:e0:0d:4a:cd:8f:cc:0f:13:1d:16:a8:50:ef:c1:d0:
         a7:df:da:47:d0:5b:3b:46:da:28:77:08:34:80:1a:0e:a6:f7:
         c7:11:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:45:54 2025 by rpki-client