This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer (raw, json) Hash identifier: O/Op6lhZ/rbdjW/RuDiXZtFatJUt7jgBp7UZ2Ini/lk= Subject key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02830E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:37:35 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134831 AS: 134839 IP: 103.222.238.0/24 IP: 103.245.176.0/24 IP: 103.247.180.0/24 IP: 2001:df7:a400::/47 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164622 (0x2830e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 12:37:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:73:30:ce:d6:9b:63:92:3a:fa:d1:61:d9: a4:ff:78:3d:9d:5e:3a:5a:77:4d:26:14:8f:f2:0d: 4c:6e:7a:d1:40:cf:4c:55:01:61:6e:9a:28:80:c1: 54:c2:bd:68:be:a9:dc:5d:93:4d:5c:86:74:77:ed: a6:a0:ce:49:e8:66:04:19:de:c4:66:a1:d1:b8:2d: be:fb:fc:e2:9f:65:b5:e4:d0:ca:6f:2b:3a:3a:cf: 50:57:2a:17:cd:3e:b1:9c:d6:cc:87:21:a0:c3:4a: 8b:24:c1:2e:b0:02:95:64:04:f4:a6:35:8e:a1:05: b4:79:f3:28:1c:cb:7d:00:6d:c4:a4:7e:77:3d:95: a1:25:00:1e:6c:23:50:a4:a3:64:c9:97:35:ca:df: 5d:41:f8:de:a2:0a:ae:72:f9:50:97:80:9d:bc:87: 2d:68:78:25:5b:c9:6a:6c:80:6a:35:d6:26:db:37: 60:ac:57:f9:ed:b3:0c:e8:92:5a:7f:37:2d:b0:b3: 86:d7:c9:7a:d2:4a:aa:72:e8:36:a2:4b:7e:95:e0: 1e:67:82:72:c6:b0:22:6f:f6:7b:29:c6:05:ce:9c: a8:e9:7d:26:8e:4b:02:ba:79:94:77:e9:82:a9:db: dd:1f:bc:ce:25:85:ac:9e:67:68:71:6e:fa:82:14: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134831 134839 sbgp-ipAddrBlock: critical IPv4: 103.222.238.0/24 103.245.176.0/24 103.247.180.0/24 IPv6: 2001:df7:a400::/47 Signature Algorithm: sha256WithRSAEncryption a5:09:d3:5d:62:15:03:98:95:3b:71:41:e5:3c:b2:e4:99:3b: 52:13:92:58:92:28:4e:97:1f:d2:f0:a1:2a:e2:82:c7:09:cd: 6d:79:09:ca:3f:be:b6:fc:02:5d:75:a6:6c:d6:47:39:87:00: 8e:d5:fd:2d:30:bf:76:7a:cd:9f:a9:d3:16:34:ae:13:fb:8d: 0a:20:b6:59:18:8f:4e:d3:c6:ff:71:da:a0:cb:6b:3b:4c:31: 59:ae:37:20:57:bd:ff:03:08:44:6b:ec:a3:70:5c:29:f6:cf: ac:f4:ca:3c:8f:d4:59:9c:3f:db:ee:5b:fe:6a:27:ba:7b:33: 62:3c:d2:af:f3:d5:c3:e3:e2:53:ff:ce:d7:3a:b9:a0:3c:fe: 0a:9a:e3:9e:b5:3e:76:e5:a7:f5:48:30:3b:ee:62:32:2f:39: 38:0d:ba:eb:64:a5:4e:02:88:e3:ad:24:f8:f9:b2:78:17:65: 61:67:ef:34:25:1f:af:29:6c:e1:39:89:2d:9a:9b:0e:5a:35: ab:cd:e2:32:90:53:f7:cf:45:25:1f:a0:aa:94:6b:80:80:de: 28:3a:9b:0a:58:1c:42:9b:db:31:21:26:c3:36:57:62:b8:1e: 09:af:2e:a7:43:c0:b7:15:88:be:9f:8b:a6:68:5f:3d:ee:04: 6d:3d:7b:99 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIDAoMOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjEyMzczNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJD NjdGRDg3QkY4RTAxNTQ2N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEe3MwztabY5I6+tFh2aT/eD2dXjpad00mFI/yDUxuetFAz0xVAWFumiiAwVTC vWi+qdxdk01chnR37aagzknoZgQZ3sRmodG4Lb77/OKfZbXk0MpvKzo6z1BXKhfN PrGc1syHIaDDSoskwS6wApVkBPSmNY6hBbR58ygcy30AbcSkfnc9laElAB5sI1Ck o2TJlzXK311B+N6iCq5y+VCXgJ28hy1oeCVbyWpsgGo11ibbN2CsV/ntswzoklp/ Ny2ws4bXyXrSSqpy6DaiS36V4B5ngnLGsCJv9nspxgXOnKjpfSaOSwK6eZR36YKp 290fvM4lhayeZ2hxbvqCFI5jAgMBAAGjggMxMIIDLTAdBgNVHQ4EFgQUxJZj2WvJ MtdDhAvGf9h7+OAVRnwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI3MzQyLzZEREJDN0ZDOTMyNzExRTVBODFGMzAzRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyNzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2 Sk10ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAg6vAgMCDrcwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBIDBABn3u4D BABn9bADBABn97QwDwQCAAIwCQMHASABDfekADANBgkqhkiG9w0BAQsFAAOCAQEA pQnTXWIVA5iVO3FB5Tyy5Jk7UhOSWJIoTpcf0vChKuKCxwnNbXkJyj++tvwCXXWm bNZHOYcAjtX9LTC/dnrNn6nTFjSuE/uNCiC2WRiPTtPG/3HaoMtrO0wxWa43IFe9 /wMIRGvso3BcKfbPrPTKPI/UWZw/2+5b/monunszYjzSr/PVw+PiU//O1zq5oDz+ CprjnrU+duWn9UgwO+5iMi85OA2662SlTgKI460k+PmyeBdlYWfvNCUfryls4TmJ LZqbDlo1q83iMpBT989FJR+gqpRrgIDeKDqbClgcQpvbMSEmwzZXYrgeCa8up0PA txWIvp+LpmhfPe4EbT17mQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:49:25 2026 by rpki-client