This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer File: ORjYC8twLsrPhMt6yogPh4oU_kg.cer (raw, json) Hash identifier: V0JVd0y2kgnSHLSnQRHRF+m88iUI1x1rNoTbSS53QyE= Subject key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F87 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 12:54:07 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 55832 IP: 27.123.216.0/22 IP: 103.4.208.0/22 IP: 120.88.176.0/20 IP: 2407:2a00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163719 (0x27f87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 12:54:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:86:d3:19:d4:d5:aa:8a:24:05:cc:ed:1b: 49:ea:f4:6d:f1:d8:74:b6:db:14:c1:e1:80:a4:c0: b2:b6:e6:bd:f8:96:29:c3:b2:7f:db:ac:ba:c8:92: eb:13:01:c2:05:29:d1:35:7b:24:d5:da:09:83:bc: d7:54:11:1e:5f:56:49:95:b8:ae:00:01:58:6c:24: 69:d6:8c:4e:82:ae:74:50:e7:66:9e:5b:c3:cd:36: ed:2c:1a:f5:14:5c:8e:d7:fb:d9:14:58:d1:b7:94: 3e:60:a2:b1:0e:74:6c:bd:1f:8e:eb:0a:c7:3c:d0: ee:09:ae:bb:e7:84:66:ac:1c:2b:44:d1:37:db:e5: be:4d:a1:11:37:30:ad:40:0f:b7:3e:f1:a2:b8:a0: 33:cb:03:26:14:00:8e:c1:47:42:f3:0c:58:87:aa: fd:11:89:02:71:b0:75:a8:ca:c9:ba:8b:c9:e0:85: d7:c1:97:cb:bf:0b:c9:10:44:25:9b:01:c4:b8:07: ea:91:82:08:50:4f:cf:b1:93:f0:32:1b:27:25:ec: bc:72:17:f8:be:e2:49:27:2c:08:d3:68:70:40:e9: f2:11:68:bd:f1:5d:2c:c3:33:6c:cf:b3:86:0d:5e: 3f:24:73:80:da:14:5d:25:55:aa:f3:5c:b9:b2:23: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55832 sbgp-ipAddrBlock: critical IPv4: 27.123.216.0/22 103.4.208.0/22 120.88.176.0/20 IPv6: 2407:2a00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:89:1d:b4:35:ce:0a:95:cd:75:02:b2:26:2f:fc:06:1a:18: a5:99:72:71:ce:96:6b:7a:55:6c:61:e7:1e:1e:1b:c8:25:4a: dd:df:45:32:23:76:20:1a:4b:19:be:29:bc:cd:87:a7:5f:a4: 76:0e:27:a5:b2:a2:8a:eb:2e:93:72:46:eb:51:f5:11:9b:95: 19:fa:b9:c7:51:42:53:85:3c:01:ff:dc:25:c6:bd:c4:30:23: 29:75:8a:d4:c3:20:9b:18:1e:4f:4b:31:2a:1f:e6:35:1f:13: 6c:98:91:8b:b6:5b:6d:b3:52:80:2b:8f:e0:e0:00:f4:cd:fe: fc:98:ea:6b:32:10:7e:4e:25:33:f3:3d:88:c9:a0:54:66:36: 01:4a:ec:15:8d:96:e1:a7:98:4a:2e:48:c8:7d:c4:d2:1f:40: 0c:da:11:c4:d8:ce:10:58:85:f1:8d:72:09:5e:77:30:45:e3: c7:54:bd:8a:27:bc:c7:27:12:92:e8:2e:bc:b7:b5:0e:b2:38: ab:21:15:74:c8:07:48:94:3f:93:91:1b:8e:57:5e:19:d6:b6: 33:7d:98:9b:37:52:56:e7:70:53:2d:aa:86:6c:8c:ab:06:c7: fd:74:7b:ed:3a:a2:3d:01:12:57:e9:ae:e7:ac:e1:16:07:9a: f1:52:d4:31 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAn+HMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTEyNTQwN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDZCMjQxMTAvBgNVBAUTKDM5MThEODBCQ0I3MDJFQ0FDRjg0Q0I3 QUNBODgwRjg3OEExNEZFNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqKobTGdTVqookBcztG0nq9G3x2HS22xTB4YCkwLK25r34linDsn/brLrIkusT AcIFKdE1eyTV2gmDvNdUER5fVkmVuK4AAVhsJGnWjE6CrnRQ52aeW8PNNu0sGvUU XI7X+9kUWNG3lD5gorEOdGy9H47rCsc80O4JrrvnhGasHCtE0Tfb5b5NoRE3MK1A D7c+8aK4oDPLAyYUAI7BR0LzDFiHqv0RiQJxsHWoysm6i8nghdfBl8u/C8kQRCWb AcS4B+qRgghQT8+xk/AyGycl7LxyF/i+4kknLAjTaHBA6fIRaL3xXSzDM2zPs4YN Xj8kc4DaFF0lVarzXLmyIxVTAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUORjYC8tw LsrPhMt6yogPh4oU/kgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ2QjI0L0I0NzNDNEJFOTMzMDExRUU4MjMwODA1OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NkIyNC9CNDczQzRCRTkzMzAxMUVFODIzMDgwNTlDNEY5QUUwMi9PUmpZQzh0 d0xzclBoTXQ2eW9nUGg0b1Vfa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANoYMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCG3vYAwQCZwTQ AwQEeFiwMA0EAgACMAcDBQAkByoAMA0GCSqGSIb3DQEBCwUAA4IBAQAKiR20Nc4K lc11ArImL/wGGhilmXJxzpZrelVsYeceHhvIJUrd30UyI3YgGksZvim8zYenX6R2 DielsqKK6y6TckbrUfURm5UZ+rnHUUJThTwB/9wlxr3EMCMpdYrUwyCbGB5PSzEq H+Y1HxNsmJGLtltts1KAK4/g4AD0zf78mOprMhB+TiUz8z2IyaBUZjYBSuwVjZbh p5hKLkjIfcTSH0AM2hHE2M4QWIXxjXIJXncwRePHVL2KJ7zHJxKS6C68t7UOsjir IRV0yAdIlD+TkRuOV14Z1rYzfZibN1JW53BTLaqGbIyrBsf9dHvtOqI9ARJX6a7n rOEWB5rxUtQx -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:40 2025 by rpki-client