This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer (raw, json) Hash identifier: +2WkzOUb6Cr5pNAtDyJsbz1d8tfCaRhh8VSJ/Rxtn4k= Subject key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C15 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 20:32:54 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138358 IP: 103.159.36.0/23 IP: 2001:df5:7380::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162837 (0x27c15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 20:32:54 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:ac:2e:d2:d9:50:0c:48:fe:cc:fc:74:aa: 12:74:51:d4:2f:be:78:05:f3:16:31:14:8c:44:39: 6e:83:7e:b5:ce:df:ff:d4:92:e5:b1:c1:85:f2:01: d8:a8:1b:86:4e:14:ce:7c:21:70:03:e1:23:5d:bc: ce:d1:c2:79:6c:71:5b:04:18:bb:6f:7f:21:f3:bf: bb:77:93:6c:6c:37:d4:59:e1:a2:9f:16:4c:67:77: b7:de:bb:6b:ff:b1:d6:7b:8e:32:9e:5f:aa:e7:ea: 73:ec:3d:56:77:f4:f8:4b:2a:b7:16:6c:ed:58:dc: 02:a7:1a:45:1a:08:01:ae:80:93:b5:b1:35:e9:6b: fe:93:ca:4f:fd:a0:2a:54:18:f1:90:91:e3:c6:a9: 07:f7:fb:08:c0:13:e5:d4:a1:fc:23:3a:c1:59:95: a3:fc:80:b3:c2:96:5e:b3:94:d5:51:43:94:44:a5: 7d:bd:26:58:ed:48:48:89:70:ae:fd:11:79:10:1a: f9:9e:fe:44:6d:5f:d8:00:6e:e3:8a:fd:f0:98:f3: 9e:ac:e5:bf:f1:56:5d:b4:e4:92:e3:69:51:a1:bf: 91:90:3b:2b:b8:40:87:fe:c1:9e:80:3b:aa:c6:03: 3f:79:4d:46:c9:b0:85:ad:b2:3c:1a:75:53:f6:86: dc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138358 sbgp-ipAddrBlock: critical IPv4: 103.159.36.0/23 IPv6: 2001:df5:7380::/48 Signature Algorithm: sha256WithRSAEncryption 35:3f:af:be:45:17:3e:6d:b8:b2:10:0d:2e:58:07:bd:47:0c: 50:4c:30:8e:d0:32:03:c4:97:1a:65:74:58:d5:b7:a6:ec:6c: 5c:f1:f2:2f:61:f9:18:fa:25:cf:9f:ed:85:25:86:fe:04:22: 78:c5:cc:c6:da:8d:80:ec:ad:0c:16:5f:85:80:6e:05:92:e9: 58:cf:f8:37:c9:31:d1:48:22:3d:06:ea:7b:40:07:a2:ce:cb: be:61:57:69:69:eb:47:cc:44:6b:41:c3:df:29:46:7f:68:c7: e8:83:35:b9:79:29:aa:e9:70:c3:80:d8:17:3b:14:1b:4d:ad: c7:20:5a:fd:3e:3c:ce:9f:f8:9e:6c:15:37:44:39:0f:16:de: 19:e1:14:60:a0:02:0e:56:e8:57:f2:c9:2d:b4:63:36:42:47: 9b:66:b5:b7:90:ce:3e:08:bd:2c:eb:f4:8c:01:85:cc:c5:91: b3:3d:b2:dc:83:87:0a:f5:32:d7:9f:18:65:13:1b:ff:9e:32: 4d:44:51:e0:5f:27:16:dd:cb:68:03:7b:48:6b:91:68:af:cf: e5:73:08:76:37:b6:98:17:4e:ae:02:87:6c:d5:61:52:a1:8e: 35:a2:05:97:a8:fa:8c:74:90:80:27:cc:b6:1a:61:0f:54:5d: 28:dc:7e:42 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnwVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDIwMzI1NFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0 QkFDOUUxNTAyQjlDRjgyRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC336wu0tlQDEj+zPx0qhJ0UdQvvngF8xYxFIxEOW6DfrXO3//UkuWxwYXyAdio G4ZOFM58IXAD4SNdvM7RwnlscVsEGLtvfyHzv7t3k2xsN9RZ4aKfFkxnd7feu2v/ sdZ7jjKeX6rn6nPsPVZ39PhLKrcWbO1Y3AKnGkUaCAGugJO1sTXpa/6Tyk/9oCpU GPGQkePGqQf3+wjAE+XUofwjOsFZlaP8gLPCll6zlNVRQ5REpX29JljtSEiJcK79 EXkQGvme/kRtX9gAbuOK/fCY856s5b/xVl205JLjaVGhv5GQOyu4QIf+wZ6AO6rG Az95TUbJsIWtsjwadVP2htzVAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUoHrwzLKY Ncx2QpdLrJ4VArnPgtAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUyOUNCLzFGOTAyQjBFMDVBRjExRURBNzE3NjQyQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMjlDQi8xRjkwMkIwRTA1QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxL WU5jeDJRcGRMcko0VkFyblBndEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhx2MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ58kMA8EAgAC MAkDBwAgAQ31c4AwDQYJKoZIhvcNAQELBQADggEBADU/r75FFz5tuLIQDS5YB71H DFBMMI7QMgPElxpldFjVt6bsbFzx8i9h+Rj6Jc+f7YUlhv4EInjFzMbajYDsrQwW X4WAbgWS6VjP+DfJMdFIIj0G6ntAB6LOy75hV2lp60fMRGtBw98pRn9ox+iDNbl5 KarpcMOA2Bc7FBtNrccgWv0+PM6f+J5sFTdEOQ8W3hnhFGCgAg5W6FfyyS20YzZC R5tmtbeQzj4IvSzr9IwBhczFkbM9styDhwr1MtefGGUTG/+eMk1EUeBfJxbdy2gD e0hrkWivz+VzCHY3tpgXTq4Ch2zVYVKhjjWiBZeo+ox0kIAnzLYaYQ9UXSjcfkI= -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:45 2025 by rpki-client