This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer File: 1xHsDTeBWKRHb-bqfXClSpUZWhE.cer (raw, json) Hash identifier: 0pektTp9D2IZCEFI/JKtiXmBf5RJ37nIpigImBMOxwM= Subject key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 705E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 17 Dec 2025 00:34:44 +0000 Certificate not after: Thu 30 Sep 2027 00:00:00 +0000 Subordinate resources: IP: 40.72.0.0/15 IP: 40.125.128.0/17 IP: 40.126.64.0/18 IP: 40.162.0.0/16 IP: 47.92.0.0 -- 47.127.255.255 IP: 52.80.0.0/14 IP: 52.130.0.0/15 IP: 54.222.0.0/15 IP: 68.79.0.0/18 IP: 69.230.192.0/18 IP: 69.231.128.0/18 IP: 69.234.192.0/18 IP: 69.235.128.0/18 IP: 71.131.192.0 -- 71.132.63.255 IP: 71.136.64.0/18 IP: 71.137.0.0/18 IP: 138.252.72.0/23 IP: 138.252.78.0/23 IP: 138.252.118.0/23 IP: 138.252.162.0/23 IP: 139.9.0.0/16 IP: 139.129.0.0/16 IP: 139.148.0.0/16 IP: 139.155.0.0/16 IP: 139.159.0.0/16 IP: 139.176.0.0/16 IP: 139.183.0.0/16 IP: 139.186.0.0/16 IP: 139.196.0.0/14 IP: 139.217.0.0/16 IP: 139.219.0.0 -- 139.221.255.255 IP: 139.224.0.0/16 IP: 140.143.0.0/16 IP: 140.179.0.0/16 IP: 140.205.0.0/16 IP: 140.210.0.0/16 IP: 143.64.0.0/16 IP: 144.79.4.0/23 IP: 144.79.10.0/23 IP: 144.79.28.0/23 IP: 144.79.42.0/23 IP: 144.79.54.0/23 IP: 144.79.84.0/23 IP: 144.79.118.0/23 IP: 144.79.148.0/23 IP: 152.104.128.0/17 IP: 157.10.34.0 -- 157.10.37.255 IP: 157.10.112.0/23 IP: 157.10.130.0/23 IP: 157.10.218.0 -- 157.10.221.255 IP: 157.10.246.0/23 IP: 157.15.74.0/23 IP: 157.15.94.0/23 IP: 157.15.100.0 -- 157.15.105.255 IP: 157.20.136.0/23 IP: 157.20.194.0/23 IP: 157.20.246.0/23 IP: 157.66.42.0/23 IP: 157.66.70.0/23 IP: 157.66.88.0/21 IP: 157.66.164.0/23 IP: 157.66.244.0/23 IP: 158.60.0.0/16 IP: 158.140.252.0/22 IP: 159.27.0.0/16 IP: 160.19.76.0/23 IP: 160.19.82.0/23 IP: 160.20.16.0/22 IP: 160.20.130.0/23 IP: 160.22.58.0/23 IP: 160.22.82.0/23 IP: 160.22.148.0/23 IP: 160.22.188.0/23 IP: 160.22.224.0/23 IP: 160.22.230.0/23 IP: 160.22.244.0/22 IP: 160.25.10.0 -- 160.25.13.255 IP: 160.25.194.0/23 IP: 160.30.40.0/23 IP: 160.30.150.0/23 IP: 160.30.194.0 -- 160.30.199.255 IP: 160.30.230.0/23 IP: 160.187.223.0/24 IP: 160.187.252.0/22 IP: 160.191.0.0/23 IP: 160.191.104.0/23 IP: 160.191.110.0/23 IP: 160.250.14.0 -- 160.250.19.255 IP: 160.250.84.0/23 IP: 160.250.90.0/23 IP: 160.250.102.0 -- 160.250.105.255 IP: 160.250.160.0/23 IP: 160.250.170.0/23 IP: 160.250.214.0/23 IP: 160.250.252.0/23 IP: 161.189.0.0/16 IP: 161.207.0.0/16 IP: 161.248.20.0/23 IP: 161.248.42.0/23 IP: 161.248.84.0/23 IP: 161.248.92.0/23 IP: 161.248.108.0 -- 161.248.113.255 IP: 165.101.4.0/23 IP: 165.101.66.0/23 IP: 165.101.70.0/23 IP: 165.101.144.0/23 IP: 165.101.170.0/23 IP: 165.101.208.0/23 IP: 165.101.244.0/23 IP: 167.189.0.0/16 IP: 167.220.244.0/22 IP: 168.160.0.0/16 IP: 170.179.0.0/16 IP: 192.51.172.0/23 IP: 192.55.46.0/23 IP: 192.55.68.0/22 IP: 192.102.204.0/22 IP: 198.175.100.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28766 (0x705e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 17 00:34:44 2025 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:1d:78:af:13:1a:bf:c7:cb:47:5f:8d:f7: 22:f6:3a:87:d5:56:55:30:cf:3d:cb:91:56:19:a3: e6:19:32:c4:14:4b:76:9d:a3:5c:f5:f2:89:08:fb: 50:5c:8a:cb:2e:bb:f9:58:be:7b:05:a7:4f:d9:b3: cb:39:e7:fa:ea:ee:d0:23:3d:02:b6:0c:24:fe:e6: 4d:53:6f:cb:bc:16:02:c2:ca:dd:37:f6:89:7c:9d: 99:33:cc:a9:30:4c:75:0a:12:6b:62:46:23:da:09: 1c:2f:6d:de:70:51:cb:41:46:4d:5f:d8:a6:aa:23: 6a:df:4f:00:92:3e:33:81:4f:1e:82:53:33:10:c8: 2f:6a:0e:98:07:05:85:7b:f6:12:35:db:75:a5:45: 43:25:c3:0d:39:42:93:21:4a:17:4e:f1:fb:80:16: 73:ec:f6:a1:c5:f6:4a:6b:73:b3:c3:5c:dc:01:b0: 68:12:45:65:7e:55:7e:fb:ba:7b:45:ae:9a:56:10: 2a:bd:1f:66:58:e1:da:22:53:78:ed:af:78:eb:92: 48:3e:82:9e:6f:a7:17:5e:96:f6:11:31:5e:06:d7: 60:54:15:4b:a8:ee:b9:e8:c8:39:65:54:62:7e:cd: 28:95:1d:3d:10:9b:7e:3a:b8:86:49:5f:e8:20:f8: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 40.72.0.0/15 40.125.128.0/17 40.126.64.0/18 40.162.0.0/16 47.92.0.0-47.127.255.255 52.80.0.0/14 52.130.0.0/15 54.222.0.0/15 68.79.0.0/18 69.230.192.0/18 69.231.128.0/18 69.234.192.0/18 69.235.128.0/18 71.131.192.0-71.132.63.255 71.136.64.0/18 71.137.0.0/18 138.252.72.0/23 138.252.78.0/23 138.252.118.0/23 138.252.162.0/23 139.9.0.0/16 139.129.0.0/16 139.148.0.0/16 139.155.0.0/16 139.159.0.0/16 139.176.0.0/16 139.183.0.0/16 139.186.0.0/16 139.196.0.0/14 139.217.0.0/16 139.219.0.0-139.221.255.255 139.224.0.0/16 140.143.0.0/16 140.179.0.0/16 140.205.0.0/16 140.210.0.0/16 143.64.0.0/16 144.79.4.0/23 144.79.10.0/23 144.79.28.0/23 144.79.42.0/23 144.79.54.0/23 144.79.84.0/23 144.79.118.0/23 144.79.148.0/23 152.104.128.0/17 157.10.34.0-157.10.37.255 157.10.112.0/23 157.10.130.0/23 157.10.218.0-157.10.221.255 157.10.246.0/23 157.15.74.0/23 157.15.94.0/23 157.15.100.0-157.15.105.255 157.20.136.0/23 157.20.194.0/23 157.20.246.0/23 157.66.42.0/23 157.66.70.0/23 157.66.88.0/21 157.66.164.0/23 157.66.244.0/23 158.60.0.0/16 158.140.252.0/22 159.27.0.0/16 160.19.76.0/23 160.19.82.0/23 160.20.16.0/22 160.20.130.0/23 160.22.58.0/23 160.22.82.0/23 160.22.148.0/23 160.22.188.0/23 160.22.224.0/23 160.22.230.0/23 160.22.244.0/22 160.25.10.0-160.25.13.255 160.25.194.0/23 160.30.40.0/23 160.30.150.0/23 160.30.194.0-160.30.199.255 160.30.230.0/23 160.187.223.0/24 160.187.252.0/22 160.191.0.0/23 160.191.104.0/23 160.191.110.0/23 160.250.14.0-160.250.19.255 160.250.84.0/23 160.250.90.0/23 160.250.102.0-160.250.105.255 160.250.160.0/23 160.250.170.0/23 160.250.214.0/23 160.250.252.0/23 161.189.0.0/16 161.207.0.0/16 161.248.20.0/23 161.248.42.0/23 161.248.84.0/23 161.248.92.0/23 161.248.108.0-161.248.113.255 165.101.4.0/23 165.101.66.0/23 165.101.70.0/23 165.101.144.0/23 165.101.170.0/23 165.101.208.0/23 165.101.244.0/23 167.189.0.0/16 167.220.244.0/22 168.160.0.0/16 170.179.0.0/16 192.51.172.0/23 192.55.46.0/23 192.55.68.0/22 192.102.204.0/22 198.175.100.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:96:40:10:e2:7c:6d:74:27:f9:c2:c9:86:1c:cc:63:5e:68: 29:6a:c5:1b:fc:73:e8:b0:34:b6:ba:cf:12:9a:0f:e5:52:c0: 62:72:df:41:25:89:b1:41:3d:c9:72:64:2c:bf:50:d6:0e:7a: 71:5f:06:f9:5f:05:71:d9:d1:ae:8b:c0:af:d1:df:7b:36:56: 1a:1f:01:67:bd:7a:66:7d:b0:2d:e0:a8:af:87:41:36:57:68: dc:91:48:bc:95:c2:2b:c9:74:87:6a:99:d5:81:68:61:66:92: aa:75:3c:57:5e:b4:8c:09:37:d5:49:fe:e7:16:81:75:fa:85: 6d:ba:f2:ae:cd:76:0b:2c:b9:12:e3:4f:81:0b:d9:6c:92:11: 0e:4f:4e:30:1c:f2:a7:df:82:32:19:c4:16:af:20:3b:23:41: a4:2a:1d:a7:37:41:ef:53:67:dc:b3:25:5d:37:54:bf:e3:90: 57:88:6b:8d:bf:78:7d:16:a9:d8:64:d0:f8:5d:fd:40:56:6c: 19:a6:00:aa:75:61:6c:bb:ff:21:b3:f2:a1:56:11:ec:7a:76: 84:29:11:62:93:c1:a8:30:95:e0:2d:09:1e:81:77:78:7a:d6: 5f:40:73:3f:97:1e:37:ab:c8:c3:40:7a:2d:c8:1f:06:f8:d1: 33:87:05:f9 -----BEGIN CERTIFICATE----- MIIIpjCCB46gAwIBAgICcF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE3MDAzNDQ0WhcNMjcwOTMwMDAwMDAwWjBKMRUwEwYD VQQDEwxBOTE2MkUzRDAwMDAxMTAvBgNVBAUTKEQ3MTFFQzBEMzc4MTU4QTQ0NzZG RTZFQTdENzBBNTRBOTUxOTVBMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwch14rxMav8fLR1+N9yL2OofVVlUwzz3LkVYZo+YZMsQUS3ado1z18okI +1Bcissuu/lYvnsFp0/Zs8s55/rq7tAjPQK2DCT+5k1Tb8u8FgLCyt039ol8nZkz zKkwTHUKEmtiRiPaCRwvbd5wUctBRk1f2KaqI2rfTwCSPjOBTx6CUzMQyC9qDpgH BYV79hI123WlRUMlww05QpMhShdO8fuAFnPs9qHF9kprc7PDXNwBsGgSRWV+VX77 untFrppWECq9H2ZY4doiU3jtr3jrkkg+gp5vpxdelvYRMV4G12BUFUuo7rnoyDll VGJ+zSiVHT0Qm346uIZJX+gg+G3hAgMBAAGjggWYMIIFlDAdBgNVHQ4EFgQU1xHs DTeBWKRHb+bqfXClSpUZWhEwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwd bg4wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIw MUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3 ZGJnNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy MUE0RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSAB Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw bmljLm5ldC9SUEtJL0NQUy5wZGYwgc4GCCsGAQUFBwELBIHBMIG+MDQGCCsGAQUF BzAFhihyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMFMG CCsGAQUFBzAKhkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAw MDAvMXhIc0RUZUJXS1JIYi1icWZYQ2xTcFVaV2hFLm1mdDAxBggrBgEFBQcwDYYl aHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDCCAx0GCCsGAQUF BwEHAQH/BIIDDDCCAwgwggMEBAIAATCCAvwDAwEoSAMEByh9gAMEBih+QAMDACii MAoDAwIvXAMDBy8AAwMCNFADAwE0ggMDATbeAwQGRE8AAwQGRebAAwQGReeAAwQG RerAAwQGReuAMAwDBAZHg8ADBAZHhAADBAZHiEADBAZHiQADBAGK/EgDBAGK/E4D BAGK/HYDBAGK/KIDAwCLCQMDAIuBAwMAi5QDAwCLmwMDAIufAwMAi7ADAwCLtwMD AIu6AwMCi8QDAwCL2TAKAwMAi9sDAwGL3AMDAIvgAwMAjI8DAwCMswMDAIzNAwMA jNIDAwCPQAMEAZBPBAMEAZBPCgMEAZBPHAMEAZBPKgMEAZBPNgMEAZBPVAMEAZBP dgMEAZBPlAMEB5hogDAMAwQBnQoiAwQBnQokAwQBnQpwAwQBnQqCMAwDBAGdCtoD BAGdCtwDBAGdCvYDBAGdD0oDBAGdD14wDAMEAp0PZAMEAZ0PaAMEAZ0UiAMEAZ0U wgMEAZ0U9gMEAZ1CKgMEAZ1CRgMEA51CWAMEAZ1CpAMEAZ1C9AMDAJ48AwQCnoz8 AwMAnxsDBAGgE0wDBAGgE1IDBAKgFBADBAGgFIIDBAGgFjoDBAGgFlIDBAGgFpQD BAGgFrwDBAGgFuADBAGgFuYDBAKgFvQwDAMEAaAZCgMEAaAZDAMEAaAZwgMEAaAe KAMEAaAeljAMAwQBoB7CAwQDoB7AAwQBoB7mAwQAoLvfAwQCoLv8AwQBoL8AAwQB oL9oAwQBoL9uMAwDBAGg+g4DBAKg+hADBAGg+lQDBAGg+lowDAMEAaD6ZgMEAaD6 aAMEAaD6oAMEAaD6qgMEAaD61gMEAaD6/AMDAKG9AwMAoc8DBAGh+BQDBAGh+CoD BAGh+FQDBAGh+FwwDAMEAqH4bAMEAaH4cAMEAaVlBAMEAaVlQgMEAaVlRgMEAaVl kAMEAaVlqgMEAaVl0AMEAaVl9AMDAKe9AwQCp9z0AwMAqKADAwCqswMEAcAzrAME AcA3LgMEAsA3RAMEAsBmzAMEAsavZDANBgkqhkiG9w0BAQsFAAOCAQEAbJZAEOJ8 bXQn+cLJhhzMY15oKWrFG/xz6LA0trrPEpoP5VLAYnLfQSWJsUE9yXJkLL9Q1g56 cV8G+V8FcdnRrovAr9HfezZWGh8BZ716Zn2wLeCor4dBNldo3JFIvJXCK8l0h2qZ 1YFoYWaSqnU8V160jAk31Un+5xaBdfqFbbryrs12Cyy5EuNPgQvZbJIRDk9OMBzy p9+CMhnEFq8gOyNBpCodpzdB71Nn3LMlXTdUv+OQV4hrjb94fRap2GTQ+F39QFZs GaYAqnVhbLv/IbPyoVYR7Hp2hCkRYpPBqDCV4C0JHoF3eHrWX0BzP5ceN6vIw0B6 LcgfBvjRM4cF+Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:58:51 2025 by rpki-client