This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer File: xr-JcJivRIalTii6Pv9TXUUolBE.cer (raw, json) Hash identifier: 9gc5UioBurNv+kIrFLaQBjVYT694YEqBtI5mxHOMix8= Subject key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BE4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 14:17:36 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.27.76.0/22 IP: 2403:5680::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162788 (0x27be4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 14:17:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:a8:de:d6:68:15:60:df:03:29:c1:51:d7: 05:9a:e7:bb:91:c9:1c:ff:d8:2c:c2:6f:d9:1c:f2: 7a:9c:5e:56:56:a3:e1:2f:e9:d1:47:1b:ce:e5:2f: b0:f4:3e:c5:a7:79:3e:3f:e2:ae:ae:96:cd:ef:42: 94:8a:0b:08:d9:ab:3b:71:3a:a3:89:ff:72:0d:1b: 55:e6:75:b6:12:a8:83:fc:93:67:2f:82:df:b3:31: 56:75:55:0a:2b:5c:15:12:35:07:f2:ff:69:43:48: 1c:40:11:c2:39:07:bc:49:fc:d6:7a:eb:a0:b9:48: 29:01:00:be:24:4b:af:d6:ae:0c:99:87:de:f4:87: 2a:3c:ff:ec:d9:56:39:ff:dc:8e:2a:e8:6f:b5:9f: 0d:a3:6c:52:dc:bd:86:ee:58:ed:b8:23:53:bd:76: c8:dd:1f:f5:04:02:1c:e7:4a:2f:57:77:8f:d1:fd: 8e:ea:ad:bf:51:35:15:d6:3a:b5:24:08:bc:cc:4a: 24:38:95:f8:b6:fc:07:c2:eb:21:ae:e1:8e:aa:58: d9:4b:e9:de:8d:8e:5b:6c:a5:51:3c:a5:7c:50:03: 83:0a:d7:01:d5:47:2d:c0:d1:94:d4:95:a1:af:6b: a5:d8:09:a3:83:44:ff:46:f1:2b:ca:fc:98:fe:82: 67:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.27.76.0/22 IPv6: 2403:5680::/32 Signature Algorithm: sha256WithRSAEncryption 6e:83:55:97:99:5f:f8:75:5c:3f:78:8e:f2:62:63:0e:db:3c: d5:3f:87:39:b1:ba:64:87:83:4c:c7:c2:59:5e:54:e1:b9:b4: 86:cd:f7:85:49:f1:95:23:85:53:6f:c3:dc:d0:bb:ed:e1:2b: 88:76:5b:c4:4e:90:bd:50:1d:83:b4:a4:2a:e1:8a:99:4e:7d: 02:4a:eb:bb:f8:c2:01:a0:a4:24:60:c5:ff:8c:55:18:b3:ac: e5:0a:52:69:4a:fd:ff:bb:68:47:5a:c9:9f:c8:9c:56:8b:fc: 8f:f0:76:d9:91:e2:a7:f2:04:c0:14:0a:68:78:d5:50:60:e4: a8:b7:1f:7e:cf:aa:f3:10:08:6b:a3:1e:6f:91:d6:ce:77:f2: 11:3b:68:53:2c:51:54:3f:02:91:07:cd:47:94:0b:d9:b3:5d: 85:da:e2:f9:ef:99:ec:62:13:43:cb:cf:03:13:7a:bd:c9:19: 4a:c2:ea:fa:bc:d4:9c:d1:ce:90:0c:fb:7b:aa:94:5a:cf:54: 6c:84:c4:e2:c3:30:d8:13:20:97:cb:12:4b:79:dc:54:30:2e: 38:25:68:cc:d3:4f:cc:d8:05:5e:92:30:41:2b:5a:d7:90:7a: a5:9c:13:0a:3f:5a:92:d9:10:0e:6b:77:fc:8b:00:e3:3f:ed: c3:58:d6:59 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAnvkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDE0MTczNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhC QTNFRkY1MzVENDUyODk0MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCxqje1mgVYN8DKcFR1wWa57uRyRz/2CzCb9kc8nqcXlZWo+Ev6dFHG87lL7D0 PsWneT4/4q6uls3vQpSKCwjZqztxOqOJ/3ING1XmdbYSqIP8k2cvgt+zMVZ1VQor XBUSNQfy/2lDSBxAEcI5B7xJ/NZ666C5SCkBAL4kS6/WrgyZh970hyo8/+zZVjn/ 3I4q6G+1nw2jbFLcvYbuWO24I1O9dsjdH/UEAhznSi9Xd4/R/Y7qrb9RNRXWOrUk CLzMSiQ4lfi2/AfC6yGu4Y6qWNlL6d6NjltspVE8pXxQA4MK1wHVRy3A0ZTUlaGv a6XYCaODRP9G8SvK/Jj+gmfBAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUxr+JcJiv RIalTii6Pv9TXUUolBEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUwMUNFLzkzQkE4NTNBOTdGMDExRTVCOTIwMTA2QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0pp dlJJYWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAJnG0wwDQQCAAIwBwMFACQDVoAwDQYJKoZIhvcNAQELBQADggEB AG6DVZeZX/h1XD94jvJiYw7bPNU/hzmxumSHg0zHwlleVOG5tIbN94VJ8ZUjhVNv w9zQu+3hK4h2W8ROkL1QHYO0pCrhiplOfQJK67v4wgGgpCRgxf+MVRizrOUKUmlK /f+7aEdayZ/InFaL/I/wdtmR4qfyBMAUCmh41VBg5Ki3H37PqvMQCGujHm+R1s53 8hE7aFMsUVQ/ApEHzUeUC9mzXYXa4vnvmexiE0PLzwMTer3JGUrC6vq81JzRzpAM +3uqlFrPVGyExOLDMNgTIJfLEkt53FQwLjglaMzTT8zYBV6SMEErWteQeqWcEwo/ WpLZEA5rd/yLAOM/7cNY1lk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:23 2025 by rpki-client