This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKZnkbkcxS9E_S5f5xSpgz7UpR4.cer
File:                     tKZnkbkcxS9E_S5f5xSpgz7UpR4.cer (raw, json)
Hash identifier:          8xrf+VNgAgr+b7kRzz/y2BXjeNwV9TdjFiQzUEdZOws=
Subject key identifier:   B4:A6:67:91:B9:1C:C5:2F:44:FD:2E:5F:E7:14:A9:83:3E:D4:A5:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0274A3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A918C2870000/0/B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A918C2870000/0/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 00:36:48 +0000
Certificate not after:    Sat 01 May 2038 00:00:00 +0000
Subordinate resources:    AS: 45163
                          AS: 55471
                          AS: 131211
                          IP: 203.176.189.0/24
                          IP: 2001:df0:90::/48
                          IP: 2401:4600::/32
                          IP: 2401:e640::/32
Validation:               Failed, certificate revoked on Wed 12 Nov 2025 04:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160931 (0x274a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 12 00:36:48 2025 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=A918C2870000, serialNumber=B4A66791B91CC52F44FD2E5FE714A9833ED4A51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:6e:e8:12:cf:36:53:75:2d:ec:f5:e3:ad:
                    44:e9:b5:68:ab:6d:e5:83:a1:e4:6f:b8:a6:91:1f:
                    29:97:0e:8c:4c:96:4a:86:7a:49:d7:b5:dc:0e:ce:
                    74:ee:85:de:d7:fd:56:8f:3d:50:44:0f:5d:cd:c0:
                    b1:1d:f4:35:fc:db:0b:03:be:78:54:d0:72:5c:a7:
                    f8:86:98:8d:21:60:ee:3f:6f:ca:f0:af:01:46:b6:
                    a2:ce:0c:a8:5e:46:61:e7:04:48:b1:41:49:e2:1f:
                    18:cd:da:48:67:b6:4d:d4:ca:82:7f:8a:1d:09:bf:
                    5c:65:e7:fd:e0:2f:8a:83:05:90:7c:64:50:47:bc:
                    38:a7:61:99:f9:84:4a:da:26:c8:aa:cb:c8:ff:1f:
                    89:2f:48:09:82:8b:b3:bb:28:16:b0:14:3d:a3:72:
                    9c:de:f4:84:d9:26:eb:67:60:25:d2:34:7e:49:99:
                    3f:6c:77:6d:7b:9d:b5:39:1b:15:10:6a:4d:f9:24:
                    39:4e:c2:bf:ac:78:d9:1f:09:9d:47:ba:b4:a7:0b:
                    eb:1a:92:63:e7:56:c7:37:59:cf:f9:31:5b:37:cc:
                    6d:74:0f:41:ad:59:7b:69:70:69:57:6e:df:59:4c:
                    62:44:93:8a:7c:0a:6e:7a:23:d3:ca:90:9d:96:75:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A6:67:91:B9:1C:C5:2F:44:FD:2E:5F:E7:14:A9:83:3E:D4:A5:1E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45163
                  55471
                  131211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24
                IPv6:
                  2001:df0:90::/48
                  2401:4600::/32
                  2401:e640::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:1f:12:7d:09:97:53:20:35:b0:df:dc:6b:f9:ae:19:cc:3b:
         db:45:b4:cc:23:b4:6d:b9:24:06:87:c6:0b:25:8e:b9:5d:4b:
         a8:f1:67:2a:e4:66:70:51:39:7c:54:10:4c:d1:8e:e5:fb:aa:
         81:90:ea:d9:27:d3:ed:23:d3:b6:74:d2:b6:99:60:01:1c:62:
         ac:e1:33:75:2f:3d:ca:c2:f3:8b:25:6e:f3:d0:38:02:e5:07:
         ad:8d:e6:16:5e:5d:51:cf:3d:23:c0:68:05:3d:30:61:31:52:
         36:d6:4b:2d:93:90:c0:a1:26:fa:6e:18:f7:d4:2c:f6:9d:a0:
         18:a1:bc:93:7c:7b:58:53:1b:05:14:1f:00:82:82:39:56:33:
         20:d3:99:33:db:b5:75:e0:2d:09:88:d2:7e:ae:94:94:8f:4d:
         d6:2f:e2:1f:7a:f0:e3:ac:c6:1e:99:99:55:3c:61:6a:89:72:
         d2:99:d6:4f:89:35:67:8e:cc:f9:78:d0:5f:e0:95:4c:f2:ff:
         61:6b:40:f6:5f:98:77:88:4b:c4:dd:55:8d:3d:5b:86:54:b4:
         d1:05:58:22:4c:55:30:de:e3:f1:ea:37:e4:7f:87:35:e0:cb:
         2e:52:b0:d4:82:00:99:50:6e:df:0a:d2:69:84:a0:72:6f:be:
         7b:25:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----