This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer File: poNjJUbxoQeEvBpP9voLvmzsLU4.cer (raw, json) Hash identifier: ORz4UPbnQ/dHgNPalkx4FNpoy+FU4b9yT7Kpa4lL4FQ= Subject key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02766F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 20:46:02 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 147067 IP: 103.174.2.0/24 IP: 2001:df7:b180::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161391 (0x2766f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 20:46:02 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:fb:2b:8c:b7:56:20:ab:0f:87:db:8f:51: 47:45:1e:f3:7b:27:aa:24:1c:4a:79:cb:34:42:8b: c4:c2:1b:66:31:1c:58:79:19:25:06:44:22:b3:72: bc:bb:a1:3b:a4:5e:1d:20:1d:b1:11:c8:ef:50:b8: 1c:f6:10:6e:fd:0d:17:b8:a0:35:72:e6:5f:e3:92: 6b:a4:02:8d:84:49:4e:c2:48:79:d1:47:38:3e:78: a4:93:4c:0f:47:4b:16:db:14:b3:37:bc:54:50:c5: 6b:62:a3:6c:e2:07:23:7b:ce:8a:bb:98:14:3f:61: 66:af:a9:b2:da:11:e4:fb:6d:4b:60:ac:68:00:69: bb:0b:00:06:58:b7:07:c0:5d:03:14:16:c8:65:58: 05:34:16:0b:0d:37:98:6e:a0:53:c0:5c:b6:2b:af: 42:c5:ef:22:36:14:a2:a4:5b:05:97:38:ec:8e:fa: 46:55:13:86:83:7e:a5:c3:f1:38:b0:db:e9:7f:6a: 62:14:65:a6:aa:37:f9:26:b0:06:02:5d:3a:c7:42: d8:9d:34:5e:4c:d9:39:d9:ec:e4:3b:ef:91:27:0b: 45:8e:98:5f:5f:48:e1:6e:c1:a3:01:cb:15:14:28: fc:08:73:23:10:75:ef:04:ba:1e:e7:1e:40:d6:07: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 147067 sbgp-ipAddrBlock: critical IPv4: 103.174.2.0/24 IPv6: 2001:df7:b180::/48 Signature Algorithm: sha256WithRSAEncryption 5a:c4:28:7f:e6:c1:df:1f:56:af:d8:9e:30:3f:26:13:f5:6e: 30:20:31:f2:d8:e3:2b:9f:22:91:8c:9b:aa:8e:b9:43:36:80: 01:ca:09:bb:8d:c9:14:26:3e:e2:ec:62:34:0e:24:23:ed:9e: 50:fb:7e:ac:f1:83:b0:c4:cb:c4:50:67:41:a3:6c:b5:0f:a1: fa:2e:e1:32:fb:b9:d1:2f:90:64:39:1b:09:53:15:6f:44:29: ea:20:39:82:43:2e:be:5f:d1:98:f0:2e:61:9a:eb:6d:b3:f9: 79:3f:33:ba:22:b9:0c:d0:1d:bd:cb:ae:b0:49:7d:e2:52:61: f9:00:04:9e:25:ee:1b:a3:54:00:c3:a1:2d:80:22:88:eb:49: ee:99:ec:26:e5:b5:16:ef:a9:18:34:ad:2c:39:75:30:46:e1: df:93:c5:94:06:a0:d9:cd:24:4a:f3:a0:61:f7:6b:70:94:0a: 6d:39:22:1c:ea:ec:bb:64:93:6d:f4:9a:ee:bd:7d:75:e0:f7: 13:54:b6:33:0e:ac:15:b3:52:0c:5b:35:2e:39:a6:a2:6d:75: e2:9c:79:d4:84:d5:8a:06:8e:1b:27:42:dc:33:9d:59:99:c5: c6:9a:dc:00:9a:13:32:6d:a8:72:bd:5f:c4:82:7a:4e:92:9b: b3:dd:ae:6b -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnZvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTIwNDYwMloXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0 RkY2RkEwQkJFNkNFQzJENEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNvfsrjLdWIKsPh9uPUUdFHvN7J6okHEp5yzRCi8TCG2YxHFh5GSUGRCKzcry7 oTukXh0gHbERyO9QuBz2EG79DRe4oDVy5l/jkmukAo2ESU7CSHnRRzg+eKSTTA9H SxbbFLM3vFRQxWtio2ziByN7zoq7mBQ/YWavqbLaEeT7bUtgrGgAabsLAAZYtwfA XQMUFshlWAU0FgsNN5huoFPAXLYrr0LF7yI2FKKkWwWXOOyO+kZVE4aDfqXD8Tiw 2+l/amIUZaaqN/kmsAYCXTrHQtidNF5M2TnZ7OQ775EnC0WOmF9fSOFuwaMByxUU KPwIcyMQde8Euh7nHkDWB5fDAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUpoNjJUbx oQeEvBpP9voLvmzsLU4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVGNTQ3LzYyNkUxMDk0OThDNzExRUM4NkEwMDk0OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFRjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVi eG9RZUV2QnBQOXZvTHZtenNMVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAj57MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ64CMA8EAgAC MAkDBwAgAQ33sYAwDQYJKoZIhvcNAQELBQADggEBAFrEKH/mwd8fVq/YnjA/JhP1 bjAgMfLY4yufIpGMm6qOuUM2gAHKCbuNyRQmPuLsYjQOJCPtnlD7fqzxg7DEy8RQ Z0GjbLUPofou4TL7udEvkGQ5GwlTFW9EKeogOYJDLr5f0ZjwLmGa622z+Xk/M7oi uQzQHb3LrrBJfeJSYfkABJ4l7hujVADDoS2AIojrSe6Z7CbltRbvqRg0rSw5dTBG 4d+TxZQGoNnNJErzoGH3a3CUCm05Ihzq7Ltkk230mu69fXXg9xNUtjMOrBWzUgxb NS45pqJtdeKcedSE1YoGjhsnQtwznVmZxcaa3ACaEzJtqHK9X8SCek6Sm7Pdrms= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:27 2025 by rpki-client