This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer File: ioDqhWIqoHAhvfSshBiw2aU5rOE.cer (raw, json) Hash identifier: R21+LFl3H+62Dd3m2vQm0icthOZDFwC3DVhL4pLHdP4= Subject key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027EE3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft caRepository: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 11:03:20 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: AS: 142431 IP: 103.168.104.0/23 IP: 2001:df6:75c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163555 (0x27ee3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 17 11:03:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:5a:3e:87:96:fa:b2:a9:43:6d:b3:91:fc: 60:fe:7f:df:9a:82:79:90:a2:12:23:6f:60:f1:b6: 75:f7:7a:6d:cd:3d:c1:c3:27:a4:45:64:af:dc:7a: ad:c7:6a:57:df:cd:c5:83:6b:5a:27:f5:91:4c:7f: 5e:f7:47:9a:cf:79:6e:c9:da:ec:95:75:3c:d0:9b: d1:f6:28:56:af:48:a8:da:ba:a0:2b:20:93:a0:bf: 6e:eb:77:42:de:d9:d8:52:ce:bb:28:2e:f8:e2:bc: b6:fe:d6:74:32:49:f0:76:14:36:e6:00:12:16:90: ba:ff:3d:fa:e4:80:a0:b9:89:e5:06:90:66:6e:9f: da:3a:ae:7e:81:a3:f1:10:19:c5:03:f0:01:ce:d3: 34:d7:67:28:d0:63:90:2c:59:fb:5c:88:33:51:64: b3:b9:fa:51:d1:ad:5e:38:3f:e1:e6:51:ca:32:65: 79:36:de:1e:97:89:58:ce:40:6a:8c:52:0b:27:85: 73:b6:d3:70:df:41:d2:3b:ed:cd:aa:50:ab:f4:d9: c9:46:06:e6:e2:5d:1f:f4:a9:e5:8a:89:57:ac:ba: 13:9e:3e:67:6d:8b:26:2a:17:d4:45:ae:69:08:85: 74:73:da:ae:06:00:c5:3b:f9:b7:96:c3:66:6c:64: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142431 sbgp-ipAddrBlock: critical IPv4: 103.168.104.0/23 IPv6: 2001:df6:75c0::/48 Signature Algorithm: sha256WithRSAEncryption 06:a9:d2:55:92:e1:04:82:01:88:38:c5:c7:f8:84:29:d9:54: 3d:70:d6:27:b7:ac:87:29:70:38:f7:b7:54:f7:02:da:50:65: 2f:89:6b:da:a8:99:b4:cd:ac:d7:98:65:63:47:ac:dc:53:e4: 86:45:08:b7:ce:5c:c5:51:c9:80:e3:71:0e:07:e9:ca:7d:e7: e9:52:03:21:6c:e9:1b:6d:6d:c9:a6:aa:7e:69:d8:ed:c8:11: 6c:ec:bd:40:24:e1:c9:95:68:5a:a3:75:d0:04:a8:e2:9e:a5: 4f:6e:7c:c8:3a:af:a3:ec:be:25:ed:50:e1:b9:ca:89:62:f3: ec:35:dc:23:88:2b:15:65:fa:d7:60:bf:b4:3a:6f:ca:0d:33: 73:75:3c:c6:45:26:50:5b:47:d0:0e:ba:d0:ad:6d:5d:1e:40: a5:2e:cf:b1:46:1b:5c:fe:1d:70:e0:a5:28:c3:18:e8:3f:d3: 50:24:fc:16:fe:ce:f2:27:8a:c0:e3:7c:62:e1:16:5f:2a:86: f1:0f:ac:d8:97:7d:95:bf:6f:3b:cc:22:6d:05:37:04:e6:f7: b4:cd:30:68:91:f3:27:a1:3a:ab:9f:bd:cc:86:bc:21:14:4a: e8:26:c4:51:5a:14:ed:c4:44:eb:aa:65:b4:55:83:2f:b2:a1: dc:20:9d:36 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAn7jMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNzExMDMyMFoXDTI2MDkzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRB Qzg0MThCMEQ5QTUzOUFDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6SFo+h5b6sqlDbbOR/GD+f9+agnmQohIjb2DxtnX3em3NPcHDJ6RFZK/ceq3H alffzcWDa1on9ZFMf173R5rPeW7J2uyVdTzQm9H2KFavSKjauqArIJOgv27rd0Le 2dhSzrsoLvjivLb+1nQySfB2FDbmABIWkLr/PfrkgKC5ieUGkGZun9o6rn6Bo/EQ GcUD8AHO0zTXZyjQY5AsWftciDNRZLO5+lHRrV44P+HmUcoyZXk23h6XiVjOQGqM UgsnhXO203DfQdI77c2qUKv02clGBubiXR/0qeWKiVesuhOePmdtiyYqF9RFrmkI hXRz2q4GAMU7+beWw2ZsZOwPAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUioDqhWIq oHAhvfSshBiw2aU5rOEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJEOUJFL0IwOUMzQ0UyMTE3QjExRUM4MEU0MjE0M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyRDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJ cW9IQWh2ZlNzaEJpdzJhVTVyT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAixfMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6hoMA8EAgAC MAkDBwAgAQ32dcAwDQYJKoZIhvcNAQELBQADggEBAAap0lWS4QSCAYg4xcf4hCnZ VD1w1ie3rIcpcDj3t1T3AtpQZS+Ja9qombTNrNeYZWNHrNxT5IZFCLfOXMVRyYDj cQ4H6cp95+lSAyFs6Rttbcmmqn5p2O3IEWzsvUAk4cmVaFqjddAEqOKepU9ufMg6 r6PsviXtUOG5yoli8+w13COIKxVl+tdgv7Q6b8oNM3N1PMZFJlBbR9AOutCtbV0e QKUuz7FGG1z+HXDgpSjDGOg/01Ak/Bb+zvInisDjfGLhFl8qhvEPrNiXfZW/bzvM Im0FNwTm97TNMGiR8yehOqufvcyGvCEUSugmxFFaFO3EROuqZbRVgy+yodwgnTY= -----END CERTIFICATE-----Generated at Fri Dec 19 16:02:40 2025 by rpki-client