This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer (raw, json) Hash identifier: VGnxwh8QwK5R7Z0ONFZ+XwiOuw42EtnUWcOF2uQfWrQ= Subject key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027EDD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 05:27:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153472 IP: 203.33.72.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 12:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163549 (0x27edd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 17 05:27:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c3:c0:06:b3:b0:dc:77:16:20:f3:24:19:97: d0:d6:c1:12:2d:31:54:ba:e5:0e:b1:2e:41:8c:a1: 74:94:1b:22:9e:04:c9:09:ff:52:57:ca:20:63:b1: b8:1f:f8:d2:e4:a1:78:76:ba:19:be:03:33:1d:d8: f3:aa:a7:d5:ea:3c:73:45:de:41:a3:87:9e:46:ce: aa:aa:74:d9:cc:b9:57:52:a6:e1:86:83:21:63:06: 43:12:30:85:31:5f:96:65:f1:93:b7:ed:44:5c:00: 8c:c0:dc:d4:55:4d:d8:43:82:c2:08:45:3f:6f:33: 28:41:62:b3:9d:21:da:69:9b:ea:3e:d9:ab:aa:ed: 51:b8:00:da:cd:9e:8e:bc:59:da:02:9d:24:fa:05: 90:c8:56:6e:c4:dc:46:01:64:d7:14:7f:a9:0e:da: 84:4d:28:3e:3d:6e:e1:a2:7a:86:78:cb:82:de:2f: ae:7d:11:24:1b:ac:f8:e7:33:11:85:18:54:70:9f: 0c:70:f0:35:87:d7:37:0c:dc:43:b1:c8:00:23:9a: 47:a8:e4:0a:00:51:09:72:dd:4f:df:98:b1:9b:7c: 40:78:b5:6b:07:56:49:fc:b1:0d:52:69:f5:80:68: 41:d8:75:d8:44:0f:2f:f7:69:34:56:a9:f4:2c:19: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153472 sbgp-ipAddrBlock: critical IPv4: 203.33.72.0/24 Signature Algorithm: sha256WithRSAEncryption a8:39:b2:50:63:b8:93:fa:72:ed:c4:02:c2:8f:ca:a3:1a:75: ed:aa:56:84:2c:c1:ae:b8:83:53:47:4b:47:2b:e1:b1:7c:04: 9d:26:c3:a3:f8:cb:49:d2:05:06:54:d4:ef:77:e5:a9:26:0c: ad:97:19:13:b8:6f:35:40:55:a6:fb:a6:9d:36:83:21:ee:db: 79:15:27:ae:b6:ea:30:40:6e:f7:79:ee:48:2a:c9:ef:ae:ed: 81:31:43:a0:c5:99:75:c5:d3:7a:c0:c4:df:58:de:30:c1:f3: da:e7:62:4f:b3:54:ff:ee:6a:d3:4c:aa:ef:67:f6:46:5b:b1: 43:8f:15:50:cf:f0:91:da:a2:8e:f2:8a:7f:4f:27:a9:51:37: 13:00:6d:1f:15:49:30:fb:33:2e:ee:2a:da:9b:75:df:40:b3: c5:60:cc:e6:8e:ac:cf:bb:57:57:cf:22:4c:b8:fd:7a:dc:a8: e5:a7:fd:ba:5a:ff:43:73:a3:72:aa:26:e7:ca:d3:35:0b:a9: 53:2e:ec:e2:53:83:41:e6:b5:de:52:ff:18:e1:2a:21:60:34: 65:1a:72:dc:53:6a:80:5f:16:c3:3a:63:e7:bc:69:94:1d:04: 4a:60:35:a0:9d:f4:79:c6:ef:d4:95:90:d7:75:2f:c2:ac:a7: a5:21:c0:8e -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAn7dMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNzA1Mjc1MloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJD RjhFNEUwNjkxN0QwMjExQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpw8AGs7DcdxYg8yQZl9DWwRItMVS65Q6xLkGMoXSUGyKeBMkJ/1JXyiBjsbgf +NLkoXh2uhm+AzMd2POqp9XqPHNF3kGjh55GzqqqdNnMuVdSpuGGgyFjBkMSMIUx X5Zl8ZO37URcAIzA3NRVTdhDgsIIRT9vMyhBYrOdIdppm+o+2auq7VG4ANrNno68 WdoCnST6BZDIVm7E3EYBZNcUf6kO2oRNKD49buGieoZ4y4LeL659ESQbrPjnMxGF GFRwnwxw8DWH1zcM3EOxyAAjmkeo5AoAUQly3U/fmLGbfEB4tWsHVkn8sQ1SafWA aEHYddhEDy/3aTRWqfQsGYd3AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUzZJ43tkY sjdQhrLPjk4GkX0CEbUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZEMzlFLzc5ODQ1NzBDQjM1OTExRUZCNEJFN0Y0MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGRDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3Rr WXNqZFFockxQams0R2tYMENFYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAleAMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyyFIMA0GCSqG SIb3DQEBCwUAA4IBAQCoObJQY7iT+nLtxALCj8qjGnXtqlaELMGuuINTR0tHK+Gx fASdJsOj+MtJ0gUGVNTvd+WpJgytlxkTuG81QFWm+6adNoMh7tt5FSeutuowQG73 ee5IKsnvru2BMUOgxZl1xdN6wMTfWN4wwfPa52JPs1T/7mrTTKrvZ/ZGW7FDjxVQ z/CR2qKO8op/TyepUTcTAG0fFUkw+zMu7iram3XfQLPFYMzmjqzPu1dXzyJMuP16 3Kjlp/26Wv9Dc6NyqibnytM1C6lTLuziU4NB5rXeUv8Y4SohYDRlGnLcU2qAXxbD OmPnvGmUHQRKYDWgnfR5xu/UlZDXdS/CrKelIcCO -----END CERTIFICATE-----Generated at Thu Dec 18 16:12:07 2025 by rpki-client