This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer File: uOlsag2VSKKgQMvnGZdFun2x7Sg.cer (raw, json) Hash identifier: 2DvXfp9PqMgNHTcpZ81y6ZC7iAzZDDDSQbY9BreBJU0= Subject key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02756D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 15 Nov 2025 14:20:50 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 43.246.220.0/22 IP: 103.35.208.0/22 IP: 2401:f840::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161133 (0x2756d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 15 14:20:50 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:44:22:81:c6:24:c7:f7:b0:b1:82:87:2e: e9:5b:f6:83:f2:c6:36:79:e9:56:b0:3d:96:48:09: 2e:bd:f6:88:c9:0b:01:cd:ef:15:33:10:44:b9:0e: 49:8a:43:cf:3f:f3:75:c2:c1:1e:66:fc:d5:69:19: 0f:2f:fc:67:c0:85:8b:e1:3b:ea:cd:65:cd:1e:6f: eb:35:e3:93:51:9f:02:4b:96:4a:d7:68:24:37:1d: 76:77:d0:92:ed:3f:c0:e3:29:ad:79:01:7c:69:0a: 08:dd:75:35:d5:49:1a:2d:c4:aa:37:06:fb:86:c0: 79:15:ff:ce:18:2c:c5:e5:0e:bb:05:db:21:3f:49: 7b:b1:12:82:07:1b:f1:c4:d6:03:8e:7d:e4:aa:94: 4c:64:34:83:8c:3c:54:35:33:56:66:28:f6:87:98: 6f:49:70:a7:d9:36:72:c8:0b:b6:a6:de:22:79:12: 4e:f4:bd:97:d9:ac:26:02:3a:8a:21:c8:e4:3a:7d: 44:16:37:3c:5f:5b:cd:34:c0:8f:8d:ed:1e:27:3b: 55:8e:c6:df:47:cc:75:6b:f6:2b:9b:6e:80:6f:1d: 23:f5:84:9b:66:ca:9b:e1:09:9e:30:26:86:ab:a1: 7f:95:82:8b:10:05:45:6c:e1:59:61:3f:16:4b:e8: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.220.0/22 103.35.208.0/22 IPv6: 2401:f840::/32 Signature Algorithm: sha256WithRSAEncryption d0:16:3e:9d:b3:5b:90:a0:08:67:61:2b:e8:38:64:87:a4:68: b3:69:87:22:7c:9e:39:93:d7:6a:7d:39:56:86:d7:2e:07:25: 8c:f2:53:9b:09:a3:60:4f:66:34:cc:b4:06:d3:1e:c5:07:ef: 22:fc:c9:17:55:1d:78:5c:90:45:4e:4b:74:00:b6:3b:36:2b: 65:e2:e3:5f:5f:97:58:75:63:9c:09:f3:79:ab:e1:6a:77:f9: c2:8b:14:f8:e2:1c:2a:e0:23:52:55:91:f6:8f:89:2d:a7:62: 2f:cb:ea:9e:67:22:f5:9b:1a:2a:f9:3b:66:c4:72:d2:79:ad: 90:2a:11:0d:3d:ef:1b:3d:8e:73:ce:f2:19:2e:82:36:8b:3d: 1e:89:0a:12:b0:cf:0a:40:1b:54:19:f2:ae:9f:58:2c:62:1e: 37:56:df:c6:00:d4:c7:2c:c6:83:94:b9:6f:6c:0d:d6:9d:73: 33:f8:6f:54:3f:38:50:27:6a:ce:ce:7a:02:b8:b1:c7:c2:21: 24:89:7c:78:ca:73:1e:a4:9e:60:85:15:96:7b:22:03:16:74: e0:bf:75:e0:ca:10:ea:c8:3b:aa:b7:26:07:68:e8:aa:31:59: 02:99:0d:14:27:ca:af:f2:fd:a6:84:d9:43:80:5e:48:fa:74: a8:13:f0:51 -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgIDAnVtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNTE0MjA1MFoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JF NzE5OTc0NUJBN0RCMUVEMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK3UQigcYkx/ewsYKHLulb9oPyxjZ56VawPZZICS699ojJCwHN7xUzEES5DkmK Q88/83XCwR5m/NVpGQ8v/GfAhYvhO+rNZc0eb+s145NRnwJLlkrXaCQ3HXZ30JLt P8DjKa15AXxpCgjddTXVSRotxKo3BvuGwHkV/84YLMXlDrsF2yE/SXuxEoIHG/HE 1gOOfeSqlExkNIOMPFQ1M1ZmKPaHmG9JcKfZNnLIC7am3iJ5Ek70vZfZrCYCOooh yOQ6fUQWNzxfW800wI+N7R4nO1WOxt9HzHVr9iubboBvHSP1hJtmypvhCZ4wJoar oX+VgosQBUVs4VlhPxZL6Gw9AgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUuOlsag2V SKKgQMvnGZdFun2x7SgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIyRDI5L0Y3MUU3MTY2NTUyMTExRTVBREIyMDkyQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcy VlNLS2dRTXZuR1pkRnVuMng3U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj MBIEAgABMAwDBAIr9twDBAJnI9AwDQQCAAIwBwMFACQB+EAwDQYJKoZIhvcNAQEL BQADggEBANAWPp2zW5CgCGdhK+g4ZIekaLNphyJ8njmT12p9OVaG1y4HJYzyU5sJ o2BPZjTMtAbTHsUH7yL8yRdVHXhckEVOS3QAtjs2K2Xi419fl1h1Y5wJ83mr4Wp3 +cKLFPjiHCrgI1JVkfaPiS2nYi/L6p5nIvWbGir5O2bEctJ5rZAqEQ097xs9jnPO 8hkugjaLPR6JChKwzwpAG1QZ8q6fWCxiHjdW38YA1McsxoOUuW9sDdadczP4b1Q/ OFAnas7OegK4scfCISSJfHjKcx6knmCFFZZ7IgMWdOC/deDKEOrIO6q3Jgdo6Kox WQKZDRQnyq/y/aaE2UOAXkj6dKgT8FE= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:29 2025 by rpki-client