This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer File: Ol-14XOO4JTFuQizeRxpwHd9rh4.cer (raw, json) Hash identifier: /Xms39V5z/GYBejok1tutuYwuopmKSgUWpGF94b7pJM= Subject key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6FFA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft caRepository: rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 07:13:33 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.106.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28666 (0x6ffa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 11 07:13:33 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:d0:f1:18:50:5f:cb:e3:9f:02:c9:db:95: 25:87:03:dc:ab:f8:e2:9a:50:e8:dc:b2:8a:0e:c8: d4:ba:f9:67:4d:6b:96:47:a9:ca:64:8a:e6:0a:f8: 97:fd:09:77:c3:bb:78:be:01:bd:e5:ee:6a:12:89: 2f:75:4a:18:1a:75:fd:6d:e8:a1:2a:dc:63:41:f5: a7:1b:2b:da:49:17:79:18:66:30:7d:23:95:ab:cd: 82:7d:77:fb:ee:d7:94:ce:a0:62:8b:2a:55:f2:ab: 7a:0c:a5:02:65:a9:dd:dc:d6:43:09:2a:45:ad:8b: 56:42:11:10:da:03:73:d0:e2:eb:8b:42:9e:49:59: b6:d2:ca:69:67:69:b4:ab:39:0e:0e:d8:ac:c8:d7: be:b5:a4:2f:40:f7:88:fb:29:20:77:4b:ec:61:56: b8:2a:25:82:2b:44:d1:37:b5:f8:5d:39:ea:f8:25: fe:7e:21:d5:c0:b6:33:ba:ad:eb:8f:10:07:ec:31: b7:46:82:c3:38:e1:4f:62:79:8e:54:d8:9a:e9:47: 76:38:ff:fc:45:f0:9f:1f:ce:ce:9f:af:cd:9e:bc: 0b:9b:09:90:19:a1:99:e5:bd:65:e3:82:ea:ae:fc: 1b:de:ed:a5:3e:02:38:6d:05:d6:2f:ec:98:7d:b6: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.106.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:ad:d7:9a:f0:6b:04:31:a4:7e:3a:76:0f:b6:f8:8c:47:6d: b4:7b:c1:de:d4:f0:be:aa:9c:b9:00:c0:c0:aa:9d:0b:00:13: ad:7f:c5:ec:d4:3b:c3:ec:fa:80:8d:d4:55:d5:c9:30:60:a6: d8:54:68:58:59:ab:4e:f2:36:c4:88:81:23:a4:72:b1:09:d0: 83:30:ed:60:c4:9e:ef:41:3a:a0:1c:24:3b:4f:58:2a:2b:34: 33:2a:33:1f:10:0c:87:a0:12:27:d4:c8:95:9b:b7:08:78:92: 73:4a:b1:87:34:d2:aa:b4:b2:cc:8d:40:1f:8f:d5:00:e1:b9: ed:af:cb:0b:b3:5c:e2:b8:ab:c4:4e:7d:e3:8b:f1:8a:8c:55: 7a:5c:f6:79:1b:f0:5a:6b:65:19:6a:59:c4:6e:0e:c9:b6:c2: 0f:7c:52:fc:1d:36:4c:f3:cf:c2:c0:4b:20:62:55:8f:48:c1: 10:07:ae:25:03:02:30:71:cc:18:b7:8f:ad:f0:55:19:59:28: 8c:6f:76:db:5a:90:b6:a3:da:dd:16:4b:7c:a2:da:d1:27:f0: b4:35:c6:1e:55:35:b5:9a:93:2b:a2:36:c0:67:13:65:24:b1: 3b:a3:c9:7f:47:74:3a:7b:52:9a:29:da:cb:50:15:e6:ba:48: ad:4c:7b:26 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjExMDcxMzMzWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5RkJGMzExMC8GA1UEBRMoM0E1RkI1RTE3MzhFRTA5NEM1QjkwOEIz NzkxQzY5QzA3NzdEQUUxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMhA0PEYUF/L458CyduVJYcD3Kv44ppQ6Nyyig7I1Lr5Z01rlkepymSK5gr4l/0J d8O7eL4BveXuahKJL3VKGBp1/W3ooSrcY0H1pxsr2kkXeRhmMH0jlavNgn13++7X lM6gYosqVfKregylAmWp3dzWQwkqRa2LVkIRENoDc9Di64tCnklZttLKaWdptKs5 Dg7YrMjXvrWkL0D3iPspIHdL7GFWuColgitE0Te1+F056vgl/n4h1cC2M7qt648Q B+wxt0aCwzjhT2J5jlTYmulHdjj//EXwnx/Ozp+vzZ68C5sJkBmhmeW9ZeOC6q78 G97tpT4COG0F1i/smH22MX8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ6X7Xhc47g lMW5CLN5HGnAd32uHjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUZCRjMvRTUwQzk5QjRENjYwMTFGMEIyQTU0Qjk1MEJCNDNFMTMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlGQkYzL0U1MEM5OUI0RDY2MDExRjBCMkE1NEI5NTBCQjQzRTEzL09sLTE0WE9P NEpURnVRaXplUnhwd0hkOXJoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBPajANBgkqhkiG9w0BAQsFAAOCAQEACq3XmvBrBDGkfjp2D7b4 jEdttHvB3tTwvqqcuQDAwKqdCwATrX/F7NQ7w+z6gI3UVdXJMGCm2FRoWFmrTvI2 xIiBI6RysQnQgzDtYMSe70E6oBwkO09YKis0MyozHxAMh6ASJ9TIlZu3CHiSc0qx hzTSqrSyzI1AH4/VAOG57a/LC7Nc4rirxE5944vxioxVelz2eRvwWmtlGWpZxG4O ybbCD3xS/B02TPPPwsBLIGJVj0jBEAeuJQMCMHHMGLePrfBVGVkojG9221qQtqPa 3RZLfKLa0SfwtDXGHlU1tZqTK6I2wGcTZSSxO6PJf0d0OntSminay1AV5rpIrUx7 Jg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:04:12 2025 by rpki-client