This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer File: sLiO7pE7KqjXtZU3FT782HAKkUA.cer (raw, json) Hash identifier: 0Pxavt8lovS2M0+RaMEqCj4ZPrTMacIIXFlqnHnFTRg= Subject key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276EC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 15:52:59 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 55296 IP: 202.70.131.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161516 (0x276ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 21 15:52:59 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:2b:0d:4e:43:15:50:34:80:97:fd:34:af: dd:75:f9:89:de:6f:e0:42:66:b5:d8:09:df:31:79: 13:04:9a:37:8d:48:fe:d5:5c:c7:8b:c4:4b:b1:0f: 6a:bb:e5:bd:c0:c3:ab:40:da:7c:e5:ea:1b:88:dc: 0c:5f:47:aa:a9:f1:9f:a0:9e:1e:9e:68:a7:9f:56: 9b:a7:91:02:ac:e8:6d:22:58:8c:4c:02:93:ec:52: cc:6a:ef:d9:65:bc:81:0c:32:65:19:cb:87:72:04: 13:5d:cf:9a:a3:fb:ff:69:8d:ef:42:31:84:28:c6: 46:97:93:65:fb:18:47:ef:46:c4:a1:75:17:8f:3e: 78:c5:6e:42:ad:05:00:94:92:cd:b1:be:40:c0:44: e3:3a:24:24:f2:f1:19:66:6f:f1:fe:f0:ec:01:bf: c5:a5:76:f6:43:50:44:e8:ed:1f:ad:dc:3a:4c:3f: e8:ec:e5:29:1f:b9:22:33:5b:81:3f:23:81:f5:f0: 71:0f:ab:ba:1e:fd:24:f6:11:c3:b2:97:c4:12:02: 6d:f8:17:7e:92:09:d3:8a:c8:c1:64:e9:15:a0:0b: 95:0b:4b:92:42:dd:50:3e:67:cf:65:b2:50:30:db: 09:c7:99:d5:63:9d:4c:4c:f8:82:22:39:8d:12:bb: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55296 sbgp-ipAddrBlock: critical IPv4: 202.70.131.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:17:92:b4:6f:fe:6a:6c:bd:6c:56:e5:05:69:98:64:2c:82: 6b:a2:75:a6:36:63:ee:51:d5:91:56:3d:64:d2:38:b3:01:34: 62:e3:5f:15:db:14:5a:35:a3:46:2f:63:34:ec:9d:4a:2c:f0: 91:80:26:ae:8f:25:77:41:0e:50:12:92:99:76:db:97:c6:2e: ed:e7:dd:7d:8b:ea:ad:b4:51:46:a6:e9:ca:84:bb:50:09:39: 52:04:9b:2e:a9:28:03:fa:1f:c9:57:e0:a2:10:e7:13:90:2c: 46:59:92:c5:31:65:5a:e1:5b:61:b6:b0:4c:50:0d:57:83:08: 08:61:65:bb:5e:c0:d2:22:a0:09:58:6c:ff:15:33:ca:26:da: 3b:58:83:13:2c:da:13:40:39:51:7e:01:65:b1:61:6a:a4:80: 65:98:e3:67:cc:11:3f:06:ec:a4:ad:a8:1a:b4:31:c4:a4:42: 1e:39:e5:aa:ca:57:a5:a8:e6:51:24:6f:5f:61:d9:54:d4:62: f1:58:1f:dc:7b:87:61:16:25:61:79:47:0d:35:39:02:4a:1e: 50:1b:03:94:29:ad:fa:bc:8a:ec:43:45:ac:c6:d2:f6:d7:64: d3:b0:84:55:f5:35:90:eb:d3:7f:00:d1:52:05:17:d1:7c:0a: 8c:18:86:39 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnbsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMTE1NTI1OVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUz NzE1M0VGQ0Q4NzAwQTkxNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNfSsNTkMVUDSAl/00r911+Yneb+BCZrXYCd8xeRMEmjeNSP7VXMeLxEuxD2q7 5b3Aw6tA2nzl6huI3AxfR6qp8Z+gnh6eaKefVpunkQKs6G0iWIxMApPsUsxq79ll vIEMMmUZy4dyBBNdz5qj+/9pje9CMYQoxkaXk2X7GEfvRsShdRePPnjFbkKtBQCU ks2xvkDAROM6JCTy8Rlmb/H+8OwBv8WldvZDUETo7R+t3DpMP+js5SkfuSIzW4E/ I4H18HEPq7oe/ST2EcOyl8QSAm34F36SCdOKyMFk6RWgC5ULS5JC3VA+Z89lslAw 2wnHmdVjnUxM+IIiOY0Su0dLAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUsLiO7pE7 KqjXtZU3FT782HAKkUAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI2MkE5L0Q3N0Y5MTQyMURBMTExRTJCRkNCMzA5NDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BF N0txalh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANgAMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAykaDMA0GCSqG SIb3DQEBCwUAA4IBAQCbF5K0b/5qbL1sVuUFaZhkLIJronWmNmPuUdWRVj1k0jiz ATRi418V2xRaNaNGL2M07J1KLPCRgCaujyV3QQ5QEpKZdtuXxi7t5919i+qttFFG punKhLtQCTlSBJsuqSgD+h/JV+CiEOcTkCxGWZLFMWVa4VthtrBMUA1XgwgIYWW7 XsDSIqAJWGz/FTPKJto7WIMTLNoTQDlRfgFlsWFqpIBlmONnzBE/BuykragatDHE pEIeOeWqylelqOZRJG9fYdlU1GLxWB/ce4dhFiVheUcNNTkCSh5QGwOUKa36vIrs Q0WsxtL212TTsIRV9TWQ69N/ANFSBRfRfAqMGIY5 -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:39 2025 by rpki-client