This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer File: 1xHsDTeBWKRHb-bqfXClSpUZWhE.cer (raw, json) Hash identifier: nB5WlrYAuzxyKSBlHAAAdnggdup8mJ9cHAMHw6+iMbs= Subject key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 719B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Tue 06 Jan 2026 03:02:58 +0000 Certificate not after: Thu 30 Sep 2027 00:00:00 +0000 Subordinate resources: IP: 40.72.0.0/15 IP: 40.125.128.0/17 IP: 40.126.64.0/18 IP: 40.162.0.0/16 IP: 47.92.0.0 -- 47.127.255.255 IP: 52.80.0.0/14 IP: 52.130.0.0/15 IP: 54.222.0.0/15 IP: 68.79.0.0/18 IP: 69.230.192.0/18 IP: 69.231.128.0/18 IP: 69.234.192.0/18 IP: 69.235.128.0/18 IP: 71.131.192.0 -- 71.132.63.255 IP: 71.136.64.0/18 IP: 71.137.0.0/18 IP: 138.252.72.0/23 IP: 138.252.78.0/23 IP: 138.252.118.0/23 IP: 138.252.162.0/23 IP: 139.9.0.0/16 IP: 139.129.0.0/16 IP: 139.148.0.0/16 IP: 139.155.0.0/16 IP: 139.159.0.0/16 IP: 139.176.0.0/16 IP: 139.183.0.0/16 IP: 139.186.0.0/16 IP: 139.196.0.0/14 IP: 139.217.0.0/16 IP: 139.219.0.0 -- 139.221.255.255 IP: 139.224.0.0/16 IP: 140.143.0.0/16 IP: 140.179.0.0/16 IP: 140.205.0.0/16 IP: 140.210.0.0/16 IP: 143.64.0.0/16 IP: 144.79.4.0/23 IP: 144.79.10.0/23 IP: 144.79.28.0/23 IP: 144.79.42.0/23 IP: 144.79.54.0/23 IP: 144.79.84.0/23 IP: 144.79.118.0/23 IP: 144.79.148.0/23 IP: 152.104.128.0/17 IP: 157.10.34.0 -- 157.10.37.255 IP: 157.10.112.0/23 IP: 157.10.130.0/23 IP: 157.10.218.0 -- 157.10.221.255 IP: 157.10.246.0/23 IP: 157.15.74.0/23 IP: 157.15.94.0/23 IP: 157.15.100.0 -- 157.15.105.255 IP: 157.20.136.0/23 IP: 157.20.194.0/23 IP: 157.20.246.0/23 IP: 157.66.42.0/23 IP: 157.66.70.0/23 IP: 157.66.88.0/21 IP: 157.66.164.0/23 IP: 157.66.244.0/23 IP: 158.60.0.0/16 IP: 158.140.252.0/22 IP: 159.27.0.0/16 IP: 160.19.76.0/23 IP: 160.19.82.0/23 IP: 160.20.16.0/22 IP: 160.20.130.0/23 IP: 160.22.58.0/23 IP: 160.22.82.0/23 IP: 160.22.148.0/23 IP: 160.22.188.0/23 IP: 160.22.224.0/23 IP: 160.22.230.0/23 IP: 160.22.244.0/22 IP: 160.25.10.0 -- 160.25.13.255 IP: 160.25.194.0/23 IP: 160.30.40.0/23 IP: 160.30.150.0/23 IP: 160.30.194.0 -- 160.30.199.255 IP: 160.30.230.0/23 IP: 160.187.223.0/24 IP: 160.187.252.0/22 IP: 160.191.0.0/23 IP: 160.191.104.0/23 IP: 160.191.110.0/23 IP: 160.250.14.0 -- 160.250.19.255 IP: 160.250.84.0/23 IP: 160.250.90.0/23 IP: 160.250.102.0 -- 160.250.105.255 IP: 160.250.160.0/23 IP: 160.250.170.0/23 IP: 160.250.214.0/23 IP: 160.250.252.0/23 IP: 161.189.0.0/16 IP: 161.207.0.0/16 IP: 161.248.20.0/23 IP: 161.248.42.0/23 IP: 161.248.84.0/23 IP: 161.248.92.0/23 IP: 161.248.108.0 -- 161.248.113.255 IP: 165.101.4.0/23 IP: 165.101.66.0/23 IP: 165.101.70.0/23 IP: 165.101.144.0/23 IP: 165.101.170.0/23 IP: 165.101.208.0/23 IP: 165.101.244.0/23 IP: 167.189.0.0/16 IP: 167.220.244.0/22 IP: 168.160.0.0/16 IP: 170.179.0.0/16 IP: 192.51.172.0/23 IP: 192.55.46.0/23 IP: 192.55.68.0/22 IP: 192.102.204.0/22 IP: 192.232.34.0/23 IP: 192.232.44.0/22 IP: 198.175.100.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29083 (0x719b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 6 03:02:58 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:1d:78:af:13:1a:bf:c7:cb:47:5f:8d:f7: 22:f6:3a:87:d5:56:55:30:cf:3d:cb:91:56:19:a3: e6:19:32:c4:14:4b:76:9d:a3:5c:f5:f2:89:08:fb: 50:5c:8a:cb:2e:bb:f9:58:be:7b:05:a7:4f:d9:b3: cb:39:e7:fa:ea:ee:d0:23:3d:02:b6:0c:24:fe:e6: 4d:53:6f:cb:bc:16:02:c2:ca:dd:37:f6:89:7c:9d: 99:33:cc:a9:30:4c:75:0a:12:6b:62:46:23:da:09: 1c:2f:6d:de:70:51:cb:41:46:4d:5f:d8:a6:aa:23: 6a:df:4f:00:92:3e:33:81:4f:1e:82:53:33:10:c8: 2f:6a:0e:98:07:05:85:7b:f6:12:35:db:75:a5:45: 43:25:c3:0d:39:42:93:21:4a:17:4e:f1:fb:80:16: 73:ec:f6:a1:c5:f6:4a:6b:73:b3:c3:5c:dc:01:b0: 68:12:45:65:7e:55:7e:fb:ba:7b:45:ae:9a:56:10: 2a:bd:1f:66:58:e1:da:22:53:78:ed:af:78:eb:92: 48:3e:82:9e:6f:a7:17:5e:96:f6:11:31:5e:06:d7: 60:54:15:4b:a8:ee:b9:e8:c8:39:65:54:62:7e:cd: 28:95:1d:3d:10:9b:7e:3a:b8:86:49:5f:e8:20:f8: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 40.72.0.0/15 40.125.128.0/17 40.126.64.0/18 40.162.0.0/16 47.92.0.0-47.127.255.255 52.80.0.0/14 52.130.0.0/15 54.222.0.0/15 68.79.0.0/18 69.230.192.0/18 69.231.128.0/18 69.234.192.0/18 69.235.128.0/18 71.131.192.0-71.132.63.255 71.136.64.0/18 71.137.0.0/18 138.252.72.0/23 138.252.78.0/23 138.252.118.0/23 138.252.162.0/23 139.9.0.0/16 139.129.0.0/16 139.148.0.0/16 139.155.0.0/16 139.159.0.0/16 139.176.0.0/16 139.183.0.0/16 139.186.0.0/16 139.196.0.0/14 139.217.0.0/16 139.219.0.0-139.221.255.255 139.224.0.0/16 140.143.0.0/16 140.179.0.0/16 140.205.0.0/16 140.210.0.0/16 143.64.0.0/16 144.79.4.0/23 144.79.10.0/23 144.79.28.0/23 144.79.42.0/23 144.79.54.0/23 144.79.84.0/23 144.79.118.0/23 144.79.148.0/23 152.104.128.0/17 157.10.34.0-157.10.37.255 157.10.112.0/23 157.10.130.0/23 157.10.218.0-157.10.221.255 157.10.246.0/23 157.15.74.0/23 157.15.94.0/23 157.15.100.0-157.15.105.255 157.20.136.0/23 157.20.194.0/23 157.20.246.0/23 157.66.42.0/23 157.66.70.0/23 157.66.88.0/21 157.66.164.0/23 157.66.244.0/23 158.60.0.0/16 158.140.252.0/22 159.27.0.0/16 160.19.76.0/23 160.19.82.0/23 160.20.16.0/22 160.20.130.0/23 160.22.58.0/23 160.22.82.0/23 160.22.148.0/23 160.22.188.0/23 160.22.224.0/23 160.22.230.0/23 160.22.244.0/22 160.25.10.0-160.25.13.255 160.25.194.0/23 160.30.40.0/23 160.30.150.0/23 160.30.194.0-160.30.199.255 160.30.230.0/23 160.187.223.0/24 160.187.252.0/22 160.191.0.0/23 160.191.104.0/23 160.191.110.0/23 160.250.14.0-160.250.19.255 160.250.84.0/23 160.250.90.0/23 160.250.102.0-160.250.105.255 160.250.160.0/23 160.250.170.0/23 160.250.214.0/23 160.250.252.0/23 161.189.0.0/16 161.207.0.0/16 161.248.20.0/23 161.248.42.0/23 161.248.84.0/23 161.248.92.0/23 161.248.108.0-161.248.113.255 165.101.4.0/23 165.101.66.0/23 165.101.70.0/23 165.101.144.0/23 165.101.170.0/23 165.101.208.0/23 165.101.244.0/23 167.189.0.0/16 167.220.244.0/22 168.160.0.0/16 170.179.0.0/16 192.51.172.0/23 192.55.46.0/23 192.55.68.0/22 192.102.204.0/22 192.232.34.0/23 192.232.44.0/22 198.175.100.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:34:20:9d:93:cb:e4:25:9f:89:69:a4:62:27:25:16:36:a6: 51:a5:c5:01:d1:77:76:0e:7a:02:c8:5b:bf:bb:08:98:2c:9d: fb:b9:28:99:a2:d5:37:a2:3d:5b:4d:a5:15:79:b9:d6:b1:c3: f1:dc:43:62:34:d6:6a:2e:8d:c1:9a:2b:56:d7:94:d2:4a:26: 1e:20:8c:6a:15:1c:1d:8d:c6:51:d8:c3:61:8d:e1:01:58:c3: ee:17:eb:d3:24:58:c3:a9:c2:14:53:d2:0a:da:9d:ee:88:46: ef:c0:c7:c7:58:3f:6e:70:40:4a:f8:11:ef:c3:09:67:12:dc: 05:22:08:c7:33:be:c8:10:16:c3:40:99:a4:ff:be:02:db:1c: 9e:a2:9c:d2:06:9c:14:dd:9e:19:69:71:c1:9a:3e:fd:31:d4: dd:f3:ca:4e:c9:c6:e5:28:4f:d8:7e:17:5f:69:07:09:52:9d: df:c2:0c:07:0e:d5:78:c5:46:1b:dd:58:ec:9a:db:81:f4:e0: fb:e0:43:25:5f:48:a3:32:da:74:ba:66:18:d7:66:d9:6c:a4: 96:61:3d:2a:ac:40:cd:f8:93:c4:a4:5e:bd:fc:cf:cf:2e:67: 08:bb:3b:53:70:7d:58:3e:fb:d0:41:8d:69:cd:cd:32:0e:e8: d6:2d:c0:00 -----BEGIN CERTIFICATE----- MIIIsjCCB5qgAwIBAgICcZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA2MDMwMjU4WhcNMjcwOTMwMDAwMDAwWjBKMRUwEwYD VQQDDAxBOTE2MkUzRDAwMDAxMTAvBgNVBAUTKEQ3MTFFQzBEMzc4MTU4QTQ0NzZG RTZFQTdENzBBNTRBOTUxOTVBMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCwch14rxMav8fLR1+N9yL2OofVVlUwzz3LkVYZo+YZMsQUS3ado1z18okI +1Bcissuu/lYvnsFp0/Zs8s55/rq7tAjPQK2DCT+5k1Tb8u8FgLCyt039ol8nZkz zKkwTHUKEmtiRiPaCRwvbd5wUctBRk1f2KaqI2rfTwCSPjOBTx6CUzMQyC9qDpgH BYV79hI123WlRUMlww05QpMhShdO8fuAFnPs9qHF9kprc7PDXNwBsGgSRWV+VX77 untFrppWECq9H2ZY4doiU3jtr3jrkkg+gp5vpxdelvYRMV4G12BUFUuo7rnoyDll VGJ+zSiVHT0Qm346uIZJX+gg+G3hAgMBAAGjggWkMIIFoDAdBgNVHQ4EFgQU1xHs DTeBWKRHb+bqfXClSpUZWhEwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwd bg4wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIw MUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3 ZGJnNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy MUE0RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSAB Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw bmljLm5ldC9SUEtJL0NQUy5wZGYwgc4GCCsGAQUFBwELBIHBMIG+MDQGCCsGAQUF BzAFhihyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMFMG CCsGAQUFBzAKhkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAw MDAvMXhIc0RUZUJXS1JIYi1icWZYQ2xTcFVaV2hFLm1mdDAxBggrBgEFBQcwDYYl aHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDCCAykGCCsGAQUF BwEHAQH/BIIDGDCCAxQwggMQBAIAATCCAwgDAwEoSAMEByh9gAMEBih+QAMDACii MAoDAwIvXAMDBy8AAwMCNFADAwE0ggMDATbeAwQGRE8AAwQGRebAAwQGReeAAwQG RerAAwQGReuAMAwDBAZHg8ADBAZHhAADBAZHiEADBAZHiQADBAGK/EgDBAGK/E4D BAGK/HYDBAGK/KIDAwCLCQMDAIuBAwMAi5QDAwCLmwMDAIufAwMAi7ADAwCLtwMD AIu6AwMCi8QDAwCL2TAKAwMAi9sDAwGL3AMDAIvgAwMAjI8DAwCMswMDAIzNAwMA jNIDAwCPQAMEAZBPBAMEAZBPCgMEAZBPHAMEAZBPKgMEAZBPNgMEAZBPVAMEAZBP dgMEAZBPlAMEB5hogDAMAwQBnQoiAwQBnQokAwQBnQpwAwQBnQqCMAwDBAGdCtoD BAGdCtwDBAGdCvYDBAGdD0oDBAGdD14wDAMEAp0PZAMEAZ0PaAMEAZ0UiAMEAZ0U wgMEAZ0U9gMEAZ1CKgMEAZ1CRgMEA51CWAMEAZ1CpAMEAZ1C9AMDAJ48AwQCnoz8 AwMAnxsDBAGgE0wDBAGgE1IDBAKgFBADBAGgFIIDBAGgFjoDBAGgFlIDBAGgFpQD BAGgFrwDBAGgFuADBAGgFuYDBAKgFvQwDAMEAaAZCgMEAaAZDAMEAaAZwgMEAaAe KAMEAaAeljAMAwQBoB7CAwQDoB7AAwQBoB7mAwQAoLvfAwQCoLv8AwQBoL8AAwQB oL9oAwQBoL9uMAwDBAGg+g4DBAKg+hADBAGg+lQDBAGg+lowDAMEAaD6ZgMEAaD6 aAMEAaD6oAMEAaD6qgMEAaD61gMEAaD6/AMDAKG9AwMAoc8DBAGh+BQDBAGh+CoD BAGh+FQDBAGh+FwwDAMEAqH4bAMEAaH4cAMEAaVlBAMEAaVlQgMEAaVlRgMEAaVl kAMEAaVlqgMEAaVl0AMEAaVl9AMDAKe9AwQCp9z0AwMAqKADAwCqswMEAcAzrAME AcA3LgMEAsA3RAMEAsBmzAMEAcDoIgMEAsDoLAMEAsavZDANBgkqhkiG9w0BAQsF AAOCAQEAGzQgnZPL5CWfiWmkYiclFjamUaXFAdF3dg56Ashbv7sImCyd+7komaLV N6I9W02lFXm51rHD8dxDYjTWai6NwZorVteU0komHiCMahUcHY3GUdjDYY3hAVjD 7hfr0yRYw6nCFFPSCtqd7ohG78DHx1g/bnBASvgR78MJZxLcBSIIxzO+yBAWw0CZ pP++AtscnqKc0gacFN2eGWlxwZo+/THU3fPKTsnG5ShP2H4XX2kHCVKd38IMBw7V eMVGG91Y7JrbgfTg++BDJV9IozLadLpmGNdm2WyklmE9KqxAzfiTxKRevfzPzy5n CLs7U3B9WD770EGNac3NMg7o1i3AAA== -----END CERTIFICATE-----Generated at Sun Jan 18 16:44:01 2026 by rpki-client