This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer (raw, json) Hash identifier: AAlm7vbIlmE35BQKa9s+1Ki12JNNkw1q0I6xGshym4A= Subject key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D74 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft caRepository: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 12:50:43 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141233 IP: 103.156.230.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163188 (0x27d74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 12:50:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:a8:25:82:ca:e3:a2:0a:1e:72:bc:12:dd: 79:26:88:d5:52:31:12:18:f6:f7:a8:71:3f:a9:a6: c9:0c:ec:54:11:e6:af:13:c6:4f:36:d1:dd:16:62: 56:4d:71:33:2e:2d:13:2c:d7:f2:62:d9:34:66:e1: 2a:e0:50:c6:57:86:c8:24:88:7f:c9:a5:bf:32:67: 93:9d:9d:82:7c:6c:dd:b2:68:ad:62:f8:34:df:47: 62:c8:12:33:33:7b:b5:f4:76:9c:f4:51:c1:15:00: d6:14:54:37:13:8d:b6:31:22:bb:a9:76:34:6f:8a: 69:9a:1b:5b:2f:09:53:b9:7b:b6:c3:77:0e:5d:15: 9f:8e:2b:71:4d:d7:0a:34:c3:b5:e9:cf:e9:5d:74: 49:4c:2e:85:d1:17:a5:81:0c:96:38:11:0c:50:ad: c6:e4:58:11:05:3b:7c:68:c7:d7:08:11:f7:c6:0d: 17:08:7e:67:b0:87:a0:75:91:bd:1a:f7:d8:72:0a: 68:c6:18:d8:7d:5d:76:20:55:62:4f:98:c0:64:4f: b3:61:f0:9f:ec:bd:fc:22:ba:0f:41:73:c0:cc:96: 86:e2:9f:47:d8:45:fb:36:a1:0e:27:f4:25:4c:63: 22:9b:9f:32:21:27:d0:c7:cf:de:eb:ee:f7:c4:a0: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141233 sbgp-ipAddrBlock: critical IPv4: 103.156.230.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:1c:bf:d6:8d:d4:05:9c:0a:54:fe:40:ce:9f:b6:a4:b2:0d: d8:db:c4:a5:67:89:40:2d:7d:d7:86:a7:7a:25:93:28:4e:cf: 53:09:2d:84:1d:5f:cb:d2:9c:59:2a:35:9e:e6:c5:a3:1d:1d: df:38:40:9d:1a:6b:42:38:af:55:49:17:b1:ce:d8:f6:9c:1c: f7:3c:94:7e:c8:1c:78:bc:46:65:8e:5c:3c:20:dd:5a:62:81: 31:57:94:33:c4:3d:70:c5:fc:3b:8e:75:fd:9a:a5:5d:ab:36: 96:65:2b:5f:00:ab:8c:54:a8:6c:93:53:d1:a2:91:84:b2:8b: b6:e3:3a:87:f8:24:79:70:cb:7b:53:15:42:11:66:a2:2f:2c: 66:59:e2:c2:f6:35:c4:bd:e7:eb:c9:07:17:19:32:23:57:e2: 4d:82:40:f7:41:53:f4:1c:2b:6b:42:b4:fa:1c:5d:d6:a2:2c: 26:1a:73:6f:c7:8c:8d:52:83:7a:57:51:67:5f:04:7c:47:27: c1:70:ef:ad:87:07:ec:62:2b:65:54:24:c4:68:89:54:66:2d: 05:98:bb:f2:de:25:fd:49:48:ac:78:70:5b:3c:bd:6d:d5:ac: 9f:6c:2c:86:ae:30:45:b4:7d:09:c6:1f:1c:d9:cb:7f:af:4b: fc:43:55:31 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAn10MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTEyNTA0M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NB REY1RThGNjU1NDEyRDRBOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQWaglgsrjogoecrwS3XkmiNVSMRIY9veocT+ppskM7FQR5q8Txk820d0WYlZN cTMuLRMs1/Ji2TRm4SrgUMZXhsgkiH/Jpb8yZ5OdnYJ8bN2yaK1i+DTfR2LIEjMz e7X0dpz0UcEVANYUVDcTjbYxIrupdjRvimmaG1svCVO5e7bDdw5dFZ+OK3FN1wo0 w7Xpz+lddElMLoXRF6WBDJY4EQxQrcbkWBEFO3xox9cIEffGDRcIfmewh6B1kb0a 99hyCmjGGNh9XXYgVWJPmMBkT7Nh8J/svfwiug9Bc8DMlobin0fYRfs2oQ4n9CVM YyKbnzIhJ9DHz97r7vfEoDYNAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUAyrCJB0Y z7vBwzyt9ej2VUEtSoswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ0QkFEL0Q1RDc0MzQ2MDQ3ODExRUJBN0JEM0E0OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIw WXo3dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiexMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5zmMA0GCSqG SIb3DQEBCwUAA4IBAQCdHL/WjdQFnApU/kDOn7aksg3Y28SlZ4lALX3Xhqd6JZMo Ts9TCS2EHV/L0pxZKjWe5sWjHR3fOECdGmtCOK9VSRexztj2nBz3PJR+yBx4vEZl jlw8IN1aYoExV5QzxD1wxfw7jnX9mqVdqzaWZStfAKuMVKhsk1PRopGEsou24zqH +CR5cMt7UxVCEWaiLyxmWeLC9jXEvefryQcXGTIjV+JNgkD3QVP0HCtrQrT6HF3W oiwmGnNvx4yNUoN6V1FnXwR8RyfBcO+thwfsYitlVCTEaIlUZi0FmLvy3iX9SUis eHBbPL1t1ayfbCyGrjBFtH0Jxh8c2ct/r0v8Q1Ux -----END CERTIFICATE-----Generated at Fri Dec 19 17:25:09 2025 by rpki-client