This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer File: JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer (raw, json) Hash identifier: 0xfAhE9o76qPnUdS3w8o70XTOLodrUdsxt5LIfdxbtQ= Subject key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 70F6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft caRepository: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 28 Dec 2025 15:49:06 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.210.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28918 (0x70f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 28 15:49:06 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:d0:eb:36:db:a1:63:68:f8:12:89:5a:a0: 65:eb:24:da:2a:8e:d0:ca:49:4e:d7:50:78:85:4c: c1:13:04:36:60:60:62:33:9c:be:43:d3:25:11:84: 58:16:7a:a3:8a:a1:e3:54:bc:47:91:72:38:9c:ab: 35:3b:67:32:90:ca:c1:1a:e6:69:85:de:aa:2d:3f: 15:2e:6f:95:79:54:9a:f4:d6:5a:a7:e6:ce:1d:dd: 8f:6e:26:47:87:50:f5:e8:75:fd:10:6e:d5:1f:cf: 66:3b:66:75:13:79:4b:94:44:0d:be:5d:50:56:c5: b6:c2:56:95:57:67:a9:90:bc:14:b2:42:76:1c:33: da:13:49:7f:0c:57:67:d6:76:69:5d:1d:d9:b5:09: ad:fb:fb:07:0a:aa:bf:12:9a:9f:0d:5e:c5:64:c8: b4:de:4a:ff:a9:38:50:13:d1:ae:da:8d:65:66:cd: 1d:ca:b0:08:c4:02:0a:9e:e9:cf:07:54:9a:fd:6e: 7a:fa:eb:b5:17:88:13:68:7f:5f:e8:b2:14:fc:df: de:2e:27:42:47:aa:0b:2a:bc:50:8b:56:2f:3f:55: 9f:16:59:2b:32:f1:68:a1:e6:3b:ed:53:58:6e:99: 0c:91:d4:04:cb:37:07:1c:fd:ab:2a:a5:4a:52:6d: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.210.0/23 Signature Algorithm: sha256WithRSAEncryption 32:84:4c:d0:e3:c8:21:9b:35:31:67:84:0e:86:23:b2:0e:7d: 9b:77:eb:5c:61:ce:6b:4b:4a:98:06:7c:7e:81:de:bf:c7:e2: 07:de:78:61:01:1b:96:f8:66:f6:47:f1:73:2b:ba:c8:9b:b9: da:89:28:66:52:f3:0b:63:99:49:3e:cd:71:b4:10:48:ab:08: ac:d9:2c:ae:64:05:3c:83:7d:5d:5e:6c:71:9c:e9:f8:c7:48: 47:39:1e:e7:2e:ef:cf:32:92:83:8c:8e:d3:9a:ae:92:45:fc: 32:c6:39:3d:4c:bd:7a:5b:bd:10:b7:54:ba:a5:9f:10:4a:86: ab:56:df:28:bd:9d:96:3a:57:8e:ac:12:08:51:19:3b:07:50: ac:b8:00:a3:c5:cf:bd:72:dc:05:37:4f:26:39:e9:a3:77:94: 38:53:72:94:0b:a6:c7:c7:61:ce:dd:05:b8:a5:43:5f:47:54: 68:ab:19:82:3d:e7:65:e6:e5:fd:11:8f:92:6d:c8:cb:16:aa: 4f:af:92:f7:e5:3e:98:41:df:1b:cd:93:d4:ec:82:b3:21:c0: f7:c9:74:cb:c7:58:19:e2:67:b9:d9:4a:48:66:9d:97:6e:41: 99:86:45:f0:9b:ac:19:e0:85:5a:2a:a8:46:87:ac:e4:d1:37: 8c:42:de:4d -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjI4MTU0OTA2WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTEzOUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIy MkQ1MTg1QkZBNjcyMDg1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL0Y0Os226FjaPgSiVqgZesk2iqO0MpJTtdQeIVMwRMENmBgYjOcvkPTJRGEWBZ6 o4qh41S8R5FyOJyrNTtnMpDKwRrmaYXeqi0/FS5vlXlUmvTWWqfmzh3dj24mR4dQ 9eh1/RBu1R/PZjtmdRN5S5REDb5dUFbFtsJWlVdnqZC8FLJCdhwz2hNJfwxXZ9Z2 aV0d2bUJrfv7BwqqvxKanw1exWTItN5K/6k4UBPRrtqNZWbNHcqwCMQCCp7pzwdU mv1uevrrtReIE2h/X+iyFPzf3i4nQkeqCyq8UItWLz9VnxZZKzLxaKHmO+1TWG6Z DJHUBMs3Bxz9qyqlSlJtjgECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQk5FpGcIZe 0cUR3SItUYW/pnIIXjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlGQkIvQkE5QTlFNjhFNDA0MTFGMEE2NjE5QzYwNjE2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM5RkJCL0JBOUE5RTY4RTQwNDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNH WHRIRkVkMGlMVkdGdjZaeUNGNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBP0jANBgkqhkiG9w0BAQsFAAOCAQEAMoRM0OPIIZs1MWeEDoYj sg59m3frXGHOa0tKmAZ8foHev8fiB954YQEblvhm9kfxcyu6yJu52okoZlLzC2OZ ST7NcbQQSKsIrNksrmQFPIN9XV5scZzp+MdIRzke5y7vzzKSg4yO05qukkX8MsY5 PUy9elu9ELdUuqWfEEqGq1bfKL2dljpXjqwSCFEZOwdQrLgAo8XPvXLcBTdPJjnp o3eUOFNylAumx8dhzt0FuKVDX0dUaKsZgj3nZebl/RGPkm3IyxaqT6+S9+U+mEHf G82T1OyCsyHA98l0y8dYGeJnudlKSGadl25BmYZF8JusGeCFWiqoRoes5NE3jELe TQ== -----END CERTIFICATE-----Generated at Sat Jan 10 06:22:44 2026 by rpki-client