This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer File: OU6gholcbxfZNlSKMiOLgs95KU0.cer (raw, json) Hash identifier: SEONBZZgxdaDc/lrEPB+ArxIm4FcLGPRJxjxaMabsmo= Subject key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F01 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 15:59:56 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 24245 -- 24247 IP: 103.22.128.0/22 IP: 103.38.152.0/22 IP: 111.221.56.0/22 IP: 117.20.43.0 -- 117.20.47.255 IP: 119.59.72.0/21 IP: 202.56.8.0/21 IP: 202.58.8.0/21 IP: 202.58.136.0/21 IP: 203.190.120.0/24 IP: 203.190.123.0 -- 203.190.127.255 IP: 2400:f800::/32 IP: 2401:5dc0::/32 IP: 2405:d800::/32 IP: 2406:3800::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163585 (0x27f01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 17 15:59:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:68:af:4d:fa:ad:3f:71:ab:7e:05:d9:cf: 90:63:a0:f1:4e:64:36:05:b7:bf:59:c3:a7:84:ad: 74:0a:18:ae:68:f5:48:56:de:b7:48:cb:9c:1c:49: 4e:73:f2:e7:f7:b6:0c:a7:53:b7:34:84:2a:24:91: d5:65:f5:d4:0d:db:01:1f:89:b1:24:01:6c:a4:34: 92:52:63:11:fb:a4:6a:39:e3:a4:c2:c2:3e:23:f0: 9c:8b:2c:af:d9:da:92:ee:d1:6e:d3:7e:9d:6d:93: f4:82:3c:36:62:15:d6:fc:0e:36:c3:41:0f:ff:8b: 2e:d9:75:37:10:ed:6a:28:19:98:3c:dd:af:54:be: 39:05:0d:2f:c5:ab:6e:da:ed:eb:63:ce:9f:85:af: 15:3d:c6:06:cc:f2:2d:e8:b2:d7:70:5c:46:58:ed: 01:a7:ff:e8:25:17:5e:55:6e:4c:88:ad:4c:9a:e1: b9:0d:b1:a6:4f:42:5e:3d:fb:7c:67:20:ea:98:d4: 74:a7:c1:11:b3:e4:f1:b8:c0:b3:41:de:56:36:7a: 3c:8c:39:f6:77:ee:6b:74:3f:cf:4c:65:3d:e0:48: 94:73:bb:ea:30:7c:2e:bc:25:c2:2b:85:94:e2:50: a9:b3:ea:03:b6:f1:11:cf:76:61:74:e3:e2:89:7a: 05:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24245-24247 sbgp-ipAddrBlock: critical IPv4: 103.22.128.0/22 103.38.152.0/22 111.221.56.0/22 117.20.43.0-117.20.47.255 119.59.72.0/21 202.56.8.0/21 202.58.8.0/21 202.58.136.0/21 203.190.120.0/24 203.190.123.0-203.190.127.255 IPv6: 2400:f800::/32 2401:5dc0::/32 2405:d800::/32 2406:3800::/32 Signature Algorithm: sha256WithRSAEncryption 9e:f1:d5:5b:37:be:3b:85:0d:f1:20:31:2c:6c:56:92:12:f9: b8:c3:17:2b:ad:c6:17:dc:50:40:9c:ed:ee:c2:83:b8:ab:d5: 78:82:96:49:94:c3:c5:99:00:b0:fc:54:64:db:75:bd:80:92: c2:4c:d2:33:e0:ff:34:28:2d:95:ea:d0:fc:39:d2:12:19:75: c7:30:00:2a:59:69:e3:a8:a8:cc:d8:c1:6f:45:28:7d:de:10: 72:05:fa:37:3d:89:32:bc:99:10:5a:aa:d8:07:94:d5:b1:d8: a3:2e:55:82:6a:30:ad:83:90:b4:38:40:23:66:75:0b:10:d6: 8b:de:3a:27:de:26:e1:6e:76:34:73:50:7f:d0:00:9b:34:4b: 66:bf:28:2d:9b:25:6d:a0:7c:c3:3f:92:84:95:a9:48:c2:56: 29:71:eb:f0:f5:f9:f7:01:d3:70:84:80:96:9d:92:12:0d:63: fa:a9:92:93:8d:d8:21:da:9e:eb:b2:fc:1e:1a:61:0a:1b:5c: 09:b7:da:3c:77:f7:51:ce:2d:85:07:65:e3:68:9d:b9:24:0f: f9:ff:05:7b:28:a1:c8:cb:8a:33:46:58:20:b2:a6:8d:33:63: 24:95:a5:3c:a8:d9:c9:bf:d6:8e:7d:39:ad:b9:3e:8e:1f:9c: 46:e8:b8:36 -----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIDAn8BMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNzE1NTk1NloXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4 QTMyMjM4QjgyQ0Y3OTI5NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2VWivTfqtP3GrfgXZz5BjoPFOZDYFt79Zw6eErXQKGK5o9UhW3rdIy5wcSU5z 8uf3tgynU7c0hCokkdVl9dQN2wEfibEkAWykNJJSYxH7pGo546TCwj4j8JyLLK/Z 2pLu0W7Tfp1tk/SCPDZiFdb8DjbDQQ//iy7ZdTcQ7WooGZg83a9UvjkFDS/Fq27a 7etjzp+FrxU9xgbM8i3ostdwXEZY7QGn/+glF15VbkyIrUya4bkNsaZPQl49+3xn IOqY1HSnwRGz5PG4wLNB3lY2ejyMOfZ37mt0P89MZT3gSJRzu+owfC68JcIrhZTi UKmz6gO28RHPdmF04+KJegXNAgMBAAGjggN/MIIDezAdBgNVHQ4EFgQUOU6gholc bxfZNlSKMiOLgs95KU0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFBRTE2LzE3NDg4NTUwNUJCMTExRTk4QjEwM0IxM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBQUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9s Y2J4ZlpObFNLTWlPTGdzOTVLVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCjAIAgJetQICXrcwgYkGCCsGAQUFBwEHAQH/BHoweDBSBAIAATBMAwQCZxaA AwQCZyaYAwQCb904MAwDBAB1FCsDBAR1FCADBAN3O0gDBAPKOAgDBAPKOggDBAPK OogDBADLvngwDAMEAMu+ewMEB8u+ADAiBAIAAjAcAwUAJAD4AAMFACQBXcADBQAk BdgAAwUAJAY4ADANBgkqhkiG9w0BAQsFAAOCAQEAnvHVWze+O4UN8SAxLGxWkhL5 uMMXK63GF9xQQJzt7sKDuKvVeIKWSZTDxZkAsPxUZNt1vYCSwkzSM+D/NCgtlerQ /DnSEhl1xzAAKllp46iozNjBb0Uofd4QcgX6Nz2JMryZEFqq2AeU1bHYoy5Vgmow rYOQtDhAI2Z1CxDWi946J94m4W52NHNQf9AAmzRLZr8oLZslbaB8wz+ShJWpSMJW KXHr8PX59wHTcISAlp2SEg1j+qmSk43YIdqe67L8HhphChtcCbfaPHf3Uc4thQdl 42iduSQP+f8FeyihyMuKM0ZYILKmjTNjJJWlPKjZyb/Wjn05rbk+jh+cRui4Ng== -----END CERTIFICATE-----Generated at Fri Dec 19 17:32:42 2025 by rpki-client