This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer (raw, json) Hash identifier: HW0/M/rDYlqSEsKkbAmNdpV1mUTZARX5/8w/p8GO+tI= Subject key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B42 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 13:34:22 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 137060 IP: 203.17.154.0/24 IP: 2001:df3:1500::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162626 (0x27b42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 13:34:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:f4:60:23:e3:9c:7f:1e:5c:c1:70:16:bf: a1:6a:4d:64:27:08:45:d0:b8:68:2a:6f:16:d2:e7: 69:d3:95:25:c2:b5:92:69:f4:65:b7:07:48:34:b3: 9a:49:01:b1:91:fc:30:ed:3a:96:aa:90:4a:15:fb: 03:ab:d7:bc:91:3f:d7:9a:07:3d:6f:a6:46:16:a6: 26:10:9f:9e:74:79:7a:93:b0:d2:73:96:0a:c2:ea: 13:2f:cd:ea:c3:8e:27:86:7f:1d:6e:b8:ea:12:e6: 3b:47:50:52:84:89:dc:7a:b6:e5:06:cb:8f:51:d1: c5:1b:58:7f:ff:1b:c5:a8:ff:a3:2f:4c:93:a5:aa: d1:62:b5:a9:a6:bc:02:b5:c3:23:63:d6:2d:6d:85: 0a:18:4a:9c:f1:2d:43:cc:e1:f8:5b:86:c4:75:3f: 15:f7:c5:9a:ff:52:ec:5d:e6:9f:d2:c7:22:6d:3f: c4:1f:5b:82:d6:41:a9:54:01:9a:df:b9:7c:ec:d4: 91:10:3c:dd:d8:02:06:57:e6:7e:88:a7:0e:d7:60: d6:78:3c:64:09:25:5c:a7:b0:2d:cc:54:95:a1:63: b7:98:9e:a2:b3:89:0f:5e:8d:35:09:32:30:59:ec: 4d:28:1e:f2:d5:8a:cd:06:8c:32:d9:fa:64:ca:d6: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137060 sbgp-ipAddrBlock: critical IPv4: 203.17.154.0/24 IPv6: 2001:df3:1500::/48 Signature Algorithm: sha256WithRSAEncryption 94:9e:19:22:fe:6b:17:36:67:25:33:67:6c:8d:8b:6e:9b:94: cd:84:88:0b:9f:d9:83:74:fe:f1:58:c5:eb:b6:d0:8b:b3:cd: 67:29:f9:cb:40:f6:72:24:ec:a5:a6:9c:41:65:c9:fe:f5:c5: 3c:52:11:30:1a:a2:33:b8:84:d9:80:cf:c8:32:70:d0:a4:0a: a8:29:9f:a8:5d:ae:56:fd:48:37:d8:77:fd:6d:5c:b9:14:f5: 26:a7:cf:e7:65:b8:2f:c9:cf:0d:e3:5b:0e:08:7b:5b:9b:cf: 9e:09:87:ed:4b:70:a2:f7:29:d4:d5:b2:c3:dd:9d:52:84:a6: 67:4a:8c:5d:1c:6b:ba:53:f3:f4:54:f0:e9:da:5b:58:d8:6a: c7:e1:33:f2:4a:9a:35:dd:8d:15:e4:7b:78:47:88:74:86:e1: e0:1b:f7:63:a0:68:0b:54:0b:6a:69:4e:81:76:d3:07:09:6e: 11:17:c5:5e:a2:ba:c6:58:32:ab:14:9d:73:98:3e:e7:66:52: 4d:13:3f:12:15:e2:f4:5c:ec:63:01:0b:6d:f8:77:91:2a:dc: 88:a4:f0:cb:88:97:f4:96:44:04:ea:99:6d:53:e7:e7:2e:20: 38:fc:a2:45:d0:2a:e2:7c:b3:00:bc:d9:eb:93:68:9d:0c:ba: 81:5b:a7:53 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAntCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzEzMzQyMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBG Rjk1NjM0Mjc4MDc5OEM0RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy6/RgI+Ocfx5cwXAWv6FqTWQnCEXQuGgqbxbS52nTlSXCtZJp9GW3B0g0s5pJ AbGR/DDtOpaqkEoV+wOr17yRP9eaBz1vpkYWpiYQn550eXqTsNJzlgrC6hMvzerD jieGfx1uuOoS5jtHUFKEidx6tuUGy49R0cUbWH//G8Wo/6MvTJOlqtFitammvAK1 wyNj1i1thQoYSpzxLUPM4fhbhsR1PxX3xZr/Uuxd5p/SxyJtP8QfW4LWQalUAZrf uXzs1JEQPN3YAgZX5n6Ipw7XYNZ4PGQJJVynsC3MVJWhY7eYnqKziQ9ejTUJMjBZ 7E0oHvLVis0GjDLZ+mTK1tEtAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUp/4ShlaC LyYhpKD/lWNCeAeYxPAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMyOTMzL0Y5MTJGNjlBM0VDODExRUJBQ0Y0NzIxRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxh Q0x5WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhdkMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyxGaMA8EAgAC MAkDBwAgAQ3zFQAwDQYJKoZIhvcNAQELBQADggEBAJSeGSL+axc2ZyUzZ2yNi26b lM2EiAuf2YN0/vFYxeu20IuzzWcp+ctA9nIk7KWmnEFlyf71xTxSETAaojO4hNmA z8gycNCkCqgpn6hdrlb9SDfYd/1tXLkU9Sanz+dluC/Jzw3jWw4Ie1ubz54Jh+1L cKL3KdTVssPdnVKEpmdKjF0ca7pT8/RU8OnaW1jYasfhM/JKmjXdjRXke3hHiHSG 4eAb92OgaAtUC2ppToF20wcJbhEXxV6iusZYMqsUnXOYPudmUk0TPxIV4vRc7GMB C234d5Eq3Iik8MuIl/SWRATqmW1T5+cuIDj8okXQKuJ8swC82euTaJ0MuoFbp1M= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:10 2025 by rpki-client