This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer File: kKozD4l2v2xASeZzwoIf0pHUO8E.cer (raw, json) Hash identifier: O7TPVU2Uo+JAMdJW11FNMb3A3/yjQnUQpmXomayhFdo= Subject key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6DAE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 17:08:59 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 130.195.0.0/19 IP: 130.195.52.0/24 IP: 130.195.55.0 -- 130.195.56.255 IP: 130.195.193.0/24 IP: 130.195.196.0/23 IP: 130.195.199.0/24 IP: 130.195.246.0/24 IP: 130.195.248.0/24 IP: 130.195.252.0/22 IP: 192.107.10.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28078 (0x6dae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 7 17:08:59 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0a:9a:35:97:cf:83:44:26:91:15:4b:cd:b1: 7f:a9:25:29:11:4b:10:fd:99:84:17:86:9a:9c:4e: aa:be:e1:09:d3:0d:24:2c:1e:5e:27:14:8a:6a:2b: fe:31:76:03:7a:0b:62:26:10:f6:f0:c0:b9:5e:29: 96:6f:87:50:31:b5:76:35:21:07:5f:8e:4c:5d:45: 57:0a:92:9f:ab:1f:46:51:81:a3:bd:bd:4c:be:f7: 7b:7d:e4:97:f0:78:bb:95:10:0f:23:72:ab:e7:d9: 29:31:68:fe:c5:83:05:a6:fb:75:7d:1a:13:b7:d3: 0e:1e:74:cc:17:db:23:fb:8b:5f:06:3a:24:fa:88: 08:d6:27:e3:c3:3e:a6:50:c5:be:9e:c3:dc:8d:17: 82:1f:91:10:1f:a2:76:bc:17:8c:a3:b6:c8:28:b3: 10:b6:55:ee:37:27:2e:77:96:0e:17:6d:1a:43:46: 4b:c3:b3:5a:15:d4:83:97:eb:a8:a4:59:c4:3a:bb: de:be:97:42:5e:9a:b4:2d:79:6b:56:6b:b2:cd:76: 14:70:65:b0:8a:f6:9a:3f:fa:08:f8:ea:a9:c3:34: 09:86:3a:91:11:fb:36:5b:6a:f3:79:12:38:05:d2: 71:a5:d4:2a:09:e1:a4:c3:45:a1:ff:1d:2d:2d:28: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 130.195.0.0/19 130.195.52.0/24 130.195.55.0-130.195.56.255 130.195.193.0/24 130.195.196.0/23 130.195.199.0/24 130.195.246.0/24 130.195.248.0/24 130.195.252.0/22 192.107.10.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:a2:9f:dd:b1:75:d9:61:e3:f1:4f:13:29:73:16:77:04:32: d2:4b:75:03:ff:23:c4:f7:9a:55:01:90:bb:c0:1a:9c:c3:6c: 62:53:d3:c9:db:e0:15:c2:b9:ca:29:aa:8e:bf:84:6b:7c:f4: b9:cc:af:3b:10:5c:db:3d:de:48:28:c5:4e:af:a6:e3:8b:d2: eb:88:ee:9b:26:db:73:86:2a:b4:b9:5f:45:aa:75:1d:2c:0b: 3c:26:85:80:a0:ba:75:6e:28:a8:16:b1:0e:48:a8:6d:83:56: 88:5f:85:01:f0:5f:ef:3d:26:57:4e:2d:8c:ae:e0:f8:fe:d6: 46:57:63:be:03:0c:a5:88:9f:47:53:05:18:4a:20:07:3f:cd: dc:c0:b3:39:a1:21:3f:17:49:3f:84:15:85:3a:ea:e9:47:0b: 13:93:b1:4d:fb:e3:63:30:75:61:d0:d9:32:a7:ac:e6:b3:3c: 64:21:d4:b7:02:64:25:0b:0b:e3:73:fd:76:4f:2b:4e:f8:80: 87:60:1f:00:77:e5:da:af:f8:e9:08:4f:6d:c6:39:e0:93:9b: bb:ef:78:f5:af:80:e4:29:17:05:db:95:af:51:38:90:2f:a8: 3e:c1:a7:90:af:85:68:f1:7d:a4:70:af:61:ed:2c:48:59:c8: b5:75:0b:7d -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgICba4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTA3MTcwODU5WhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFBRTg1RTExMC8GA1UEBRMoOTBBQTMzMEY4OTc2QkY2QzQwNDlFNjcz QzI4MjFGRDI5MUQ0M0JDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOgKmjWXz4NEJpEVS82xf6klKRFLEP2ZhBeGmpxOqr7hCdMNJCweXicUimor/jF2 A3oLYiYQ9vDAuV4plm+HUDG1djUhB1+OTF1FVwqSn6sfRlGBo729TL73e33kl/B4 u5UQDyNyq+fZKTFo/sWDBab7dX0aE7fTDh50zBfbI/uLXwY6JPqICNYn48M+plDF vp7D3I0Xgh+REB+idrwXjKO2yCizELZV7jcnLneWDhdtGkNGS8OzWhXUg5frqKRZ xDq73r6XQl6atC15a1Zrss12FHBlsIr2mj/6CPjqqcM0CYY6kRH7Nltq83kSOAXS caXUKgnhpMNFof8dLS0otrsCAwEAAaOCAzEwggMtMB0GA1UdDgQWBBSQqjMPiXa/ bEBJ5nPCgh/SkdQ7wTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUU4NUUvMUExNkVCODZGM0VBMTFFQkIyNThCQTdCQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFFODVFLzFBMTZFQjg2RjNFQTExRUJCMjU4QkE3QkM0RjlBRTAyL2tLb3pENGwy djJ4QVNlWnp3b0lmMHBIVU84RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBdBggrBgEFBQcBBwEB/wROMEww SgQCAAEwRAMEBYLDAAMEAILDNDAMAwQAgsM3AwQAgsM4AwQAgsPBAwQBgsPEAwQA gsPHAwQAgsP2AwQAgsP4AwQCgsP8AwQAwGsKMA0GCSqGSIb3DQEBCwUAA4IBAQBu op/dsXXZYePxTxMpcxZ3BDLSS3UD/yPE95pVAZC7wBqcw2xiU9PJ2+AVwrnKKaqO v4RrfPS5zK87EFzbPd5IKMVOr6bji9LriO6bJttzhiq0uV9FqnUdLAs8JoWAoLp1 biioFrEOSKhtg1aIX4UB8F/vPSZXTi2MruD4/tZGV2O+AwyliJ9HUwUYSiAHP83c wLM5oSE/F0k/hBWFOurpRwsTk7FN++NjMHVh0Nkyp6zmszxkIdS3AmQlCwvjc/12 TytO+ICHYB8Ad+Xar/jpCE9txjngk5u773j1r4DkKRcF25WvUTiQL6g+waeQr4Vo 8X2kcK9h7SxIWci1dQt9 -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:58 2025 by rpki-client