This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer File: rVo_mWvNoZuP1pKxr8inCuMzPO0.cer (raw, json) Hash identifier: 0JSu6vfkepmnlKWAHpXsACMNMw7ob0J6kV8kzgMm1lA= Subject key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028609 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 14 Jan 2026 02:35:23 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 2569 -- 2570 AS: 4648 AS: 4771 AS: 4834 AS: 9325 AS: 17994 AS: 18006 AS: 18348 AS: 38479 AS: 38485 AS: 38560 AS: 55936 AS: 64070 AS: 133124 AS: 133420 AS: 133473 IP: 45.65.4.0/22 IP: 103.232.108.0/22 IP: 110.34.48.0/22 IP: 115.188.0.0/15 IP: 122.56.0.0/13 IP: 125.236.0.0/19 IP: 125.236.34.0/24 IP: 125.236.40.0 -- 125.236.45.255 IP: 125.236.48.0 -- 125.236.79.255 IP: 125.236.96.0 -- 125.239.255.255 IP: 202.27.156.0/22 IP: 202.27.169.0/24 IP: 202.27.176.0 -- 202.27.185.255 IP: 202.27.254.0/23 IP: 202.36.0.0/21 IP: 202.36.40.0/24 IP: 202.36.90.0/24 IP: 202.37.45.0/24 IP: 202.37.236.0/22 IP: 202.37.242.0 -- 202.37.247.255 IP: 202.49.49.0/24 IP: 202.49.160.0/22 IP: 202.49.169.0/24 IP: 202.50.74.0/23 IP: 202.50.80.0/22 IP: 202.50.110.0/24 IP: 202.50.116.0/24 IP: 202.50.119.0/24 IP: 202.50.224.0/20 IP: 202.50.245.0/24 IP: 203.96.0.0/17 IP: 210.54.0.0/15 IP: 210.86.0.0/17 IP: 219.88.0.0/15 IP: 222.152.0.0/14 IP: 2401:4540::/32 IP: 2403:9800::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165385 (0x28609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 14 02:35:23 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:3d:f8:d0:91:52:ed:95:8f:96:14:d9:bd: 69:d2:e8:62:86:08:10:c6:59:66:d8:1c:48:fd:29: 65:a3:87:da:5f:02:d5:18:d1:a3:bf:52:1a:60:bc: 63:ee:f7:97:10:55:03:bb:a0:55:9d:cc:6a:20:6c: e0:8c:b2:b1:06:b5:01:f6:df:fb:f5:18:e2:a9:13: dd:89:cf:d7:69:94:50:7b:99:b5:44:ae:a9:38:50: a7:04:64:7b:d4:58:f7:53:99:55:76:e5:d4:fb:bf: d3:6d:da:dd:3a:31:27:f5:69:3b:e3:f5:12:66:78: 64:39:4f:8d:ac:25:cc:8e:fc:ff:af:cd:66:3c:35: fb:bb:41:ef:6c:91:a5:66:c6:1f:0d:a2:68:79:13: ae:6e:d3:0c:83:95:f7:9a:91:bb:c4:c9:04:83:b6: d6:c0:b9:77:f8:f7:b0:ee:65:02:a6:22:61:72:fa: 44:31:87:d0:be:a4:88:72:6c:86:21:4d:bc:26:4c: 66:22:76:03:31:d8:fb:94:aa:40:d8:82:04:77:64: 10:45:d7:73:ed:ed:f1:3f:90:84:dd:aa:a0:64:11: 34:d7:5e:51:89:b3:09:9c:34:e2:68:0b:5d:8a:bd: 22:f8:bc:f3:f1:1d:64:7a:21:a6:b1:6c:d5:a0:69: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 2569-2570 4648 4771 4834 9325 17994 18006 18348 38479 38485 38560 55936 64070 133124 133420 133473 sbgp-ipAddrBlock: critical IPv4: 45.65.4.0/22 103.232.108.0/22 110.34.48.0/22 115.188.0.0/15 122.56.0.0/13 125.236.0.0/19 125.236.34.0/24 125.236.40.0-125.236.45.255 125.236.48.0-125.236.79.255 125.236.96.0-125.239.255.255 202.27.156.0/22 202.27.169.0/24 202.27.176.0-202.27.185.255 202.27.254.0/23 202.36.0.0/21 202.36.40.0/24 202.36.90.0/24 202.37.45.0/24 202.37.236.0/22 202.37.242.0-202.37.247.255 202.49.49.0/24 202.49.160.0/22 202.49.169.0/24 202.50.74.0/23 202.50.80.0/22 202.50.110.0/24 202.50.116.0/24 202.50.119.0/24 202.50.224.0/20 202.50.245.0/24 203.96.0.0/17 210.54.0.0/15 210.86.0.0/17 219.88.0.0/15 222.152.0.0/14 IPv6: 2401:4540::/32 2403:9800::/32 Signature Algorithm: sha256WithRSAEncryption 55:e6:9a:91:8a:79:fa:bd:50:a3:d6:e3:25:98:2c:63:5f:a5: 20:88:37:13:c3:c0:ec:b7:f1:c6:b3:69:b6:75:fc:2f:29:7a: 0d:bb:77:f2:73:a1:96:56:f4:f8:2c:ef:e8:bd:24:b0:83:3e: 37:6c:1f:83:62:2d:e5:9d:5a:4f:83:58:57:9f:a9:d1:96:6f: 22:24:5d:7b:7f:3b:fa:8f:6b:3e:53:92:e3:9c:3e:65:95:e6: 6a:ea:04:3a:3e:2f:53:86:10:3a:5f:68:ab:4b:42:ba:d2:49: 9c:29:4a:17:02:c9:d4:e3:40:97:9d:ca:c8:82:f2:80:55:da: 32:c1:93:9e:c2:5b:38:ab:7b:40:46:0a:79:d3:cf:55:02:60: 4b:b9:fb:24:e0:b2:87:6d:81:71:c5:c0:40:29:47:aa:51:1f: aa:96:e3:f5:66:29:dd:2a:00:27:4c:5f:7e:00:ab:ec:c2:03: 6e:19:a9:db:b4:17:28:47:0d:9b:43:e1:e0:19:aa:e6:bc:61: 81:bc:91:af:ec:b8:02:c8:cb:e5:31:0b:52:de:d5:bb:1a:48: 5c:f1:2e:ad:fa:e6:8d:c7:d6:5c:3c:34:15:c5:c0:08:b3:b8: f2:cb:c2:d0:f4:59:80:b6:59:ba:4b:cb:c1:74:85:ec:f0:af: c7:21:af:42 -----BEGIN CERTIFICATE----- MIIHbzCCBlegAwIBAgIDAoYJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNDAyMzUyM1oXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0NDRjQxMTAvBgNVBAUTKEFENUEzRjk5NkJDREExOUI4RkQ2OTJC MUFGQzhBNzBBRTMzMzNDRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCHST340JFS7ZWPlhTZvWnS6GKGCBDGWWbYHEj9KWWjh9pfAtUY0aO/UhpgvGPu 95cQVQO7oFWdzGogbOCMsrEGtQH23/v1GOKpE92Jz9dplFB7mbVErqk4UKcEZHvU WPdTmVV25dT7v9Nt2t06MSf1aTvj9RJmeGQ5T42sJcyO/P+vzWY8Nfu7Qe9skaVm xh8Nomh5E65u0wyDlfeakbvEyQSDttbAuXf497DuZQKmImFy+kQxh9C+pIhybIYh TbwmTGYidgMx2PuUqkDYggR3ZBBF13Pt7fE/kITdqqBkETTXXlGJswmcNOJoC12K vSL4vPPxHWR6IaaxbNWgaaD7AgMBAAGjggRkMIIEYDAdBgNVHQ4EFgQUrVo/mWvN oZuP1pKxr8inCuMzPO0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNDQ0Y0L0FBRDU3OTM2RjBGMTExRjBCRDZERjU1NTQzNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDQ0NGNC9BQUQ1NzkzNkYwRjExMUYwQkQ2REY1NTU0MzZGNTZCQy9yVm9fbVd2 Tm9adVAxcEt4cjhpbkN1TXpQTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQgBAf8EVDBS oFAwTjAIAgIKCQICCgoCAhIoAgISowICEuICAiRtAgJGSgICRlYCAkesAgMAlk8C AwCWVQIDAJagAgMA2oACAwD6RgIDAggEAgMCCSwCAwIJYTCCASkGCCsGAQUFBwEH AQH/BIIBGDCCARQwgfsEAgABMIH0AwQCLUEEAwQCZ+hsAwQCbiIwAwMBc7wDAwN6 OAMEBX3sAAMEAH3sIjAMAwQDfewoAwQBfewsMAwDBAR97DADBAR97EAwCwMEBX3s YAMDBH3gAwQCyhucAwQAyhupMAwDBATKG7ADBAHKG7gDBAHKG/4DBAPKJAADBADK JCgDBADKJFoDBADKJS0DBALKJewwDAMEAcol8gMEA8ol8AMEAMoxMQMEAsoxoAME AMoxqQMEAcoySgMEAsoyUAMEAMoybgMEAMoydAMEAMoydwMEBMoy4AMEAMoy9QME B8tgAAMDAdI2AwQH0lYAAwMB21gDAwLemDAUBAIAAjAOAwUAJAFFQAMFACQDmAAw DQYJKoZIhvcNAQELBQADggEBAFXmmpGKefq9UKPW4yWYLGNfpSCINxPDwOy38caz abZ1/C8peg27d/JzoZZW9Pgs7+i9JLCDPjdsH4NiLeWdWk+DWFefqdGWbyIkXXt/ O/qPaz5TkuOcPmWV5mrqBDo+L1OGEDpfaKtLQrrSSZwpShcCydTjQJedysiC8oBV 2jLBk57CWzire0BGCnnTz1UCYEu5+yTgsodtgXHFwEApR6pRH6qW4/VmKd0qACdM X34Aq+zCA24Zqdu0FyhHDZtD4eAZqua8YYG8ka/suALIy+UxC1Le1bsaSFzxLq36 5o3H1lw8NBXFwAizuPLLwtD0WYC2WbpLy8F0hezwr8chr0I= -----END CERTIFICATE-----Generated at Sun Jan 25 01:11:42 2026 by rpki-client