This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer File: iJGVOO7eyDINXq9rHzKymCOreBA.cer (raw, json) Hash identifier: 1nwak01mk+dkKOgRP6S6ERYihWtadhgbmFgWT+te/EY= Subject key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 71A7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 13:58:38 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 161.248.11.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29095 (0x71a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Jan 6 13:58:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:80:a1:81:3f:3a:ef:a4:3b:ec:5c:d0:12: f1:b0:05:b9:5f:e2:c0:00:d7:1d:8d:ba:11:63:a3: ec:d0:2a:04:23:3f:07:2b:49:f8:1e:ab:29:e9:9a: 66:0f:94:2b:49:e3:38:18:0a:5e:a7:fa:48:89:fd: d1:31:1e:81:6e:c1:11:59:91:1b:c8:30:35:21:10: 38:0a:e5:7a:98:73:e2:e5:e6:e5:f3:d3:28:6d:26: 68:ae:da:51:6b:88:24:c8:84:28:e5:23:8c:ac:55: 8e:a2:15:27:53:d9:25:a6:16:c1:5a:7e:56:e0:be: aa:f9:cc:dd:cf:12:42:8d:6d:ec:1f:11:a5:1a:f0: bc:35:26:55:d0:c8:81:da:5b:59:df:a4:28:4f:86: fe:af:52:de:d1:44:33:cf:f3:7c:4e:e1:81:10:cd: f7:f2:1e:ce:99:f5:09:64:90:57:1c:db:d5:b7:fa: 46:9c:2b:66:bb:b9:c6:55:4e:25:66:14:65:e3:38: c9:b3:24:18:5c:b7:66:5c:ea:93:62:1a:b7:7a:22: f2:4c:24:8c:30:a7:40:18:d3:d6:e8:d7:a8:78:04: bb:23:19:0b:75:24:05:e4:9f:1f:a2:a6:b1:76:1a: 94:8f:2b:2e:e0:cc:d3:93:81:a7:77:a8:a9:5d:b5: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.11.0/24 Signature Algorithm: sha256WithRSAEncryption 45:e0:9b:80:d9:67:2b:55:71:e8:e4:9a:2c:01:d3:7d:ac:e3: c4:a1:7b:e3:89:9c:5f:6a:e2:95:2b:d0:2c:8b:14:b5:e4:90: 11:af:21:ec:d8:56:69:76:a3:d7:ae:19:36:85:01:76:85:c1: 1b:b1:fd:b9:c5:4b:ac:17:cc:11:6b:2f:47:64:87:3c:65:e0: b5:1b:ac:4f:37:06:16:1c:7b:81:9d:25:39:f3:5b:05:b4:da: 1e:99:fb:29:5b:5c:68:27:ab:9a:17:56:8f:30:9b:15:37:6b: 44:e4:aa:f9:c2:62:3d:6b:29:a4:04:a7:d3:10:76:d8:58:4b: d7:c3:30:9e:78:1a:ff:4c:67:22:94:4c:35:c7:0c:d5:43:f6: 25:c3:46:74:ea:6e:02:f5:46:34:85:78:2c:ed:c5:90:ea:e8: cd:f7:04:4b:0a:3f:e6:dc:d2:13:a2:24:fd:e7:7e:62:75:23: ea:77:93:e6:58:2b:d0:9d:39:80:48:7f:38:fc:37:43:f5:f8: 6e:2f:d3:ad:15:bb:aa:ce:91:c0:6c:ba:43:b8:86:e8:d7:0a: e5:ac:f6:7a:9e:3b:69:ca:1e:b3:4f:b9:ab:a4:14:69:1f:99: f2:c2:bc:7d:18:d9:b0:15:01:f3:06:47:e1:5a:9c:af:b1:ac: c8:2c:e4:d5 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjYwMTA2MTM1ODM4WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFCNDQ2MDExMC8GA1UEBRMoODg5MTk1MzhFRURFQzgzMjBENUVBRjZC MUYzMkIyOTgyM0FCNzgxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMMDgKGBPzrvpDvsXNAS8bAFuV/iwADXHY26EWOj7NAqBCM/BytJ+B6rKemaZg+U K0njOBgKXqf6SIn90TEegW7BEVmRG8gwNSEQOArlephz4uXm5fPTKG0maK7aUWuI JMiEKOUjjKxVjqIVJ1PZJaYWwVp+VuC+qvnM3c8SQo1t7B8RpRrwvDUmVdDIgdpb Wd+kKE+G/q9S3tFEM8/zfE7hgRDN9/Iezpn1CWSQVxzb1bf6RpwrZru5xlVOJWYU ZeM4ybMkGFy3Zlzqk2Iat3oi8kwkjDCnQBjT1ujXqHgEuyMZC3UkBeSfH6KmsXYa lI8rLuDM05OBp3eoqV21/BUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSIkZU47t7I Mg1er2sfMrKYI6t4EDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQ0NjAvMDQ5ODY0NzYxNDg3MTFGMEE3OUVBQjI2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI0NDYwLzA0OTg2NDc2MTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdl eURJTlhxOXJIekt5bUNPcmVCQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKH4CzANBgkqhkiG9w0BAQsFAAOCAQEAReCbgNlnK1Vx6OSaLAHT fazjxKF744mcX2rilSvQLIsUteSQEa8h7NhWaXaj164ZNoUBdoXBG7H9ucVLrBfM EWsvR2SHPGXgtRusTzcGFhx7gZ0lOfNbBbTaHpn7KVtcaCermhdWjzCbFTdrROSq +cJiPWsppASn0xB22FhL18Mwnnga/0xnIpRMNccM1UP2JcNGdOpuAvVGNIV4LO3F kOrozfcESwo/5tzSE6Ik/ed+YnUj6neT5lgr0J05gEh/OPw3Q/X4bi/TrRW7qs6R wGy6Q7iG6NcK5az2ep47acoes0+5q6QUaR+Z8sK8fRjZsBUB8wZH4Vqcr7GsyCzk 1Q== -----END CERTIFICATE-----Generated at Sun Jan 18 01:55:46 2026 by rpki-client