This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer File: pih1evOkgoa9_fg6tOZOJNguDGs.cer (raw, json) Hash identifier: bNMR+VJ3C65Gz3flqEanPXUN5X35gqr8iJPS0kqNr9g= Subject key identifier: A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A5A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 02:11:43 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 23726 IP: 103.149.148.0/24 IP: 2001:ded:8000::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162394 (0x27a5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 02:11:43 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91C4FBE, serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:bd:7e:cd:cf:32:8d:d1:9c:22:42:52:52: 37:1e:28:6f:fd:2b:24:0c:77:44:04:9b:43:fb:c9: 65:d5:92:2e:31:b9:76:c8:37:fa:81:bc:3f:b7:6c: ba:70:0b:d5:9f:9e:97:51:82:76:35:cf:3d:0e:0f: a7:ad:e6:55:64:8d:cb:58:90:a0:74:8d:4b:26:80: 69:be:3f:f8:b2:5d:61:d1:ac:11:ee:84:99:8b:53: 5e:f6:68:d1:77:d4:4b:a2:64:1d:00:8f:be:03:1a: 50:09:f0:fb:89:b8:3f:fb:51:37:0e:03:f0:76:39: 3e:30:6c:c1:0f:1a:05:df:d9:b4:71:4f:7b:9c:8a: 9b:e7:5d:a7:8c:6a:4e:92:f8:7c:c5:4e:06:db:d8: 83:68:45:88:49:70:c3:bd:75:03:01:db:b3:3e:51: ae:cc:7e:ee:d8:56:24:38:6c:90:0f:29:b4:b8:62: c1:5f:30:b2:56:ef:e7:2b:5a:71:f4:39:02:d3:e0: 37:8e:37:3a:bd:c5:59:40:68:57:c7:27:43:45:69: 7c:5b:8b:fa:21:f9:0f:40:75:aa:2f:7f:76:14:3a: 4c:49:a3:6d:18:79:47:79:14:c4:09:d5:a2:05:d9: 6a:50:2b:2f:15:7d:77:b5:23:d6:aa:ef:09:c8:28: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23726 sbgp-ipAddrBlock: critical IPv4: 103.149.148.0/24 IPv6: 2001:ded:8000::/48 Signature Algorithm: sha256WithRSAEncryption 68:3e:b7:45:86:61:76:e5:11:78:8f:cd:18:42:5c:49:b3:c8: 16:05:20:0f:c2:8f:ec:84:b4:75:37:ce:15:3c:c1:ed:17:c6: ba:2f:d2:cf:77:66:41:4a:ca:36:a0:7f:b3:2a:94:4c:c3:ca: 31:26:b0:a5:dc:86:a7:32:36:c9:fd:eb:04:d8:da:09:1b:06: 99:b8:4e:d4:01:8a:84:7b:5e:74:0f:49:2c:87:8f:51:da:28: 12:c7:90:02:3a:d9:a4:6d:53:92:8d:53:2f:5e:4c:a0:e1:7b: 3c:7b:a7:89:2c:cc:4b:7d:9a:47:e0:9a:af:41:58:76:ee:cd: 1e:55:7c:ae:32:1a:67:31:89:32:97:78:e9:fc:51:12:bb:b1: 9d:2c:0c:bd:60:bc:8e:49:35:46:a6:28:c7:ec:4c:08:ad:fc: 0b:e3:63:0f:89:64:ff:c7:b1:2c:06:38:f8:99:31:ec:1c:43: 23:32:ef:9b:56:db:fa:4d:3f:58:7c:7a:ee:f4:d7:2e:29:c2: af:4a:31:9d:57:45:d9:61:91:b3:f7:1d:c6:87:f5:33:a8:4c: a5:25:02:32:49:73:9d:bd:dd:75:b0:dc:7d:14:f5:32:7b:d6: 55:81:4a:75:8a:57:20:2a:2c:97:09:4d:ac:b4:5a:1d:98:42: a7:bb:16:2a -----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgIDAnpaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjAyMTE0M1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzRGQkUxMTAvBgNVBAUTKEE2Mjg3NTdBRjNBNDgyODZCREZERjgz QUI0RTY0RTI0RDgyRTBDNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8gL1+zc8yjdGcIkJSUjceKG/9KyQMd0QEm0P7yWXVki4xuXbIN/qBvD+3bLpw C9WfnpdRgnY1zz0OD6et5lVkjctYkKB0jUsmgGm+P/iyXWHRrBHuhJmLU172aNF3 1EuiZB0Aj74DGlAJ8PuJuD/7UTcOA/B2OT4wbMEPGgXf2bRxT3ucipvnXaeMak6S +HzFTgbb2INoRYhJcMO9dQMB27M+Ua7Mfu7YViQ4bJAPKbS4YsFfMLJW7+crWnH0 OQLT4DeONzq9xVlAaFfHJ0NFaXxbi/oh+Q9Adaovf3YUOkxJo20YeUd5FMQJ1aIF 2WpQKy8VfXe1I9aq7wnIKL5RAgMBAAGjggMfMIIDGzAdBgNVHQ4EFgQUpih1evOk goa9/fg6tOZOJNguDGswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM0RkJFLzI1RTgyNkFFOTkzMjExRjBBMzU0QkE2OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNEZCRS8yNUU4MjZBRTk5MzIxMUYwQTM1NEJBNjlDNEY5QUUwMi9waWgxZXZP a2dvYTlfZmc2dE9aT0pOZ3VER3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXK4wMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABnlZQwDwQCAAIw CQMHACABDe2AADANBgkqhkiG9w0BAQsFAAOCAQEAaD63RYZhduUReI/NGEJcSbPI FgUgD8KP7IS0dTfOFTzB7RfGui/Sz3dmQUrKNqB/syqUTMPKMSawpdyGpzI2yf3r BNjaCRsGmbhO1AGKhHtedA9JLIePUdooEseQAjrZpG1Tko1TL15MoOF7PHuniSzM S32aR+Car0FYdu7NHlV8rjIaZzGJMpd46fxREruxnSwMvWC8jkk1RqYox+xMCK38 C+NjD4lk/8exLAY4+Jkx7BxDIzLvm1bb+k0/WHx67vTXLinCr0oxnVdF2WGRs/cd xof1M6hMpSUCMklznb3ddbDcfRT1MnvWVYFKdYpXICoslwlNrLRaHZhCp7sWKg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:17 2025 by rpki-client