This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer File: o85utTGolR0ko33yegHrOWUdfso.cer (raw, json) Hash identifier: u+fbulMMxlJl+Lk2FN7Sy/UGLToXgylOsa2DHGOw+f4= Subject key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027AFD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft caRepository: rsync://rpki.roa.net/rrdp/xTom/59/ Notify URL: https://rpki.roa.net/rrdp/notification.xml Certificate not before: Tue 02 Dec 2025 20:37:54 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 103.121.208.0/22 IP: 2403:71c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162557 (0x27afd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 20:37:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:d2:f5:9d:97:6f:f0:70:57:6f:69:6e:19: 63:f3:09:15:95:3b:17:eb:a1:34:df:5a:b1:56:d3: d4:c3:28:55:44:73:dd:6d:65:94:3f:d2:cc:df:69: ea:15:a0:08:9e:dd:7a:9e:15:85:98:24:ab:8c:52: a5:fd:85:42:88:c1:09:40:63:47:ed:3d:ff:0e:74: 96:25:bf:77:12:f3:97:67:93:67:ba:c6:1b:fb:0a: 15:2c:06:2c:52:cc:0e:1c:e5:fc:93:2e:47:2d:87: f0:4a:bf:3c:ae:d2:b5:88:41:1e:2e:7a:65:b0:41: 7e:3a:ba:e2:bb:d1:d1:5f:43:21:89:3c:f1:37:72: ab:20:07:17:6d:f3:6b:af:e8:74:9d:9b:ab:e7:dc: 49:73:54:4a:5a:be:77:de:d7:17:24:59:eb:84:6f: 1e:af:e8:1a:e6:af:b6:44:44:6d:6b:a8:f5:9e:eb: 43:31:31:4c:51:1c:f1:12:f0:a8:20:3a:b6:05:46: 0c:4d:e2:6b:07:f9:f0:96:d9:b3:6b:1e:c0:73:e1: 22:f9:88:9d:00:18:7f:65:73:ef:b1:35:69:d7:fc: f7:e6:0b:90:e1:14:24:f2:7e:bf:86:0f:d9:9e:b3: b8:1a:b9:7f:4f:58:b0:00:0c:76:25:e4:a9:41:17: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/59/ RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.208.0/22 IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 6f:17:17:52:23:51:77:48:81:21:2e:33:5b:55:4f:54:ae:17: 22:85:03:e0:32:15:e2:86:95:b1:00:b4:6a:72:dd:a1:b3:b5: 86:aa:af:03:09:d1:26:e2:f4:5c:9a:8f:0e:d8:6b:51:07:de: 70:c6:de:33:07:58:c4:32:39:c1:c8:03:c8:54:60:3b:9f:ad: 65:37:e2:99:f5:a5:91:72:12:c5:ac:0e:01:7d:34:45:19:eb: 28:32:fa:a5:fe:3e:46:67:4d:48:33:31:43:46:99:a3:a8:88: 0a:7a:fa:15:7f:59:24:03:5d:0b:67:1f:8e:86:76:07:e2:af: bf:2f:84:a4:1b:ab:3a:8e:d4:88:93:05:4e:8a:b9:9c:24:e6: ee:2f:bd:c7:35:f5:95:f6:e3:b0:4b:1f:21:88:9d:cf:f5:df: 1c:08:19:34:5e:7b:b1:05:af:ba:2c:62:35:1e:00:d6:98:11: 0f:3e:9d:31:c9:e8:54:70:6b:0a:a6:ce:21:6e:46:a6:b5:09: 97:7f:97:89:75:07:6d:3a:a1:7d:cc:c2:d8:d2:18:4b:a9:76: d4:dd:7c:64:05:32:70:05:85:a7:d1:b1:76:aa:c0:df:4b:eb: 1c:88:2f:97:da:8b:53:26:4d:54:6f:aa:49:1c:17:8f:61:72: 6c:4d:f2:8b -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIDAnr9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjIwMzc1NFoXDTI2MTIwMTAwMDAwMFowSjEVMBMG A1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMxQTg5NTFEMjRB MzdERjI3QTAxRUIzOTY1MUQ3RUNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAqeXS9Z2Xb/BwV29pbhlj8wkVlTsX66E031qxVtPUwyhVRHPdbWWUP9LM 32nqFaAInt16nhWFmCSrjFKl/YVCiMEJQGNH7T3/DnSWJb93EvOXZ5NnusYb+woV LAYsUswOHOX8ky5HLYfwSr88rtK1iEEeLnplsEF+Orriu9HRX0MhiTzxN3KrIAcX bfNrr+h0nZur59xJc1RKWr533tcXJFnrhG8er+ga5q+2RERta6j1nutDMTFMURzx EvCoIDq2BUYMTeJrB/nwltmzax7Ac+Ei+YidABh/ZXPvsTVp1/z35guQ4RQk8n6/ hg/ZnrO4Grl/T1iwAAx2JeSpQReMzwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKPO brUxqJUdJKN98noB6zllHX7KMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1 MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h cG5pYy5uZXQvUlBLSS9DUFMucGRmMIHUBggrBgEFBQcBCwSBxzCBxDAuBggrBgEF BQcwBYYicnN5bmM6Ly9ycGtpLnJvYS5uZXQvcnJkcC94VG9tLzU5LzBaBggrBgEF BQcwCoZOcnN5bmM6Ly9ycGtpLnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1 MzFBODk1MUQyNEEzN0RGMjdBMDFFQjM5NjUxRDdFQ0EubWZ0MDYGCCsGAQUFBzAN hipodHRwczovL3Jwa2kucm9hLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnedAwDQQCAAIwBwMFACQDccAwDQYJ KoZIhvcNAQELBQADggEBAG8XF1IjUXdIgSEuM1tVT1SuFyKFA+AyFeKGlbEAtGpy 3aGztYaqrwMJ0Sbi9Fyajw7Ya1EH3nDG3jMHWMQyOcHIA8hUYDufrWU34pn1pZFy EsWsDgF9NEUZ6ygy+qX+PkZnTUgzMUNGmaOoiAp6+hV/WSQDXQtnH46Gdgfir78v hKQbqzqO1IiTBU6KuZwk5u4vvcc19ZX247BLHyGInc/13xwIGTRee7EFr7osYjUe ANaYEQ8+nTHJ6FRwawqmziFuRqa1CZd/l4l1B206oX3MwtjSGEupdtTdfGQFMnAF hafRsXaqwN9L6xyIL5fai1MmTVRvqkkcF49hcmxN8os= -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:27 2025 by rpki-client