This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer (raw, json) Hash identifier: uJz9pVqkCGGZm7d8WSMiRrR9fQi78l2ASbmyYGIwCis= Subject key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F2A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft caRepository: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 04:31:24 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 144.79.45.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28458 (0x6f2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 1 04:31:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:a3:f1:49:e4:46:56:72:bd:12:3f:7e:f8: d0:1e:84:be:4a:c8:4c:ab:39:1c:79:4e:50:46:e3: a1:a2:13:ba:08:5c:e3:5f:a3:96:39:6b:7d:01:bc: 26:1b:08:e7:71:3c:c9:1e:de:f6:e9:58:23:b8:f3: d9:e1:ba:c2:df:f3:ab:3b:e4:c3:da:09:08:f4:97: 06:96:b7:fa:39:ac:f4:b5:60:17:c4:3f:e2:97:d6: 62:6c:7a:7b:0f:b2:5c:a1:72:7c:48:09:e2:4b:7e: bc:9e:c3:ea:e3:fc:19:e7:e0:39:48:4d:36:27:d1: 69:87:74:cd:69:ff:fc:47:3e:38:c3:19:26:03:52: 3b:89:d9:43:68:70:90:58:27:65:9f:73:62:43:f8: fe:3a:59:00:88:bb:a3:43:ee:7b:87:eb:a0:e9:4c: 89:31:eb:5e:41:0b:93:47:3a:62:00:0d:22:f2:a9: d0:77:c2:11:ce:a0:64:30:8c:36:2b:cf:2e:32:6c: cc:5a:3a:55:10:e7:64:d8:f3:62:51:14:5f:2f:67: 72:2b:ff:0b:2e:c4:ee:b5:08:aa:c3:22:43:76:93: 39:10:3e:61:d3:02:d9:a7:f0:f1:c1:a2:06:59:a8: ab:57:8d:49:7d:a7:bc:d4:87:d5:a6:ec:08:35:b8: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.45.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:ec:14:09:61:2c:a4:98:23:d2:8e:94:af:b8:07:16:d1:0e: 96:7e:b7:3e:84:e3:f1:64:12:92:8c:22:54:27:d1:4d:a0:a2: e2:a6:8e:06:b1:6d:f9:32:32:65:6c:73:92:1d:22:f9:03:d6: 4e:06:e6:2d:45:8e:f5:ff:87:10:e0:a8:e7:30:2a:e1:7c:98: 85:8d:af:06:50:21:0e:ff:df:d9:02:0b:77:63:2c:64:ab:5b: eb:94:48:b0:fc:77:1c:f3:73:3f:9e:5f:46:d7:a2:7f:1f:48: 00:02:65:14:52:9a:73:ca:e4:20:2e:07:5e:21:54:e3:c6:77: 4e:df:63:88:21:65:9a:26:25:81:27:da:0c:c0:5a:34:bf:a0: 99:41:f8:e3:6c:f4:33:83:0b:d8:a5:dc:04:4a:84:44:5e:0c: 6c:66:03:17:3b:57:fc:cb:73:91:38:64:71:f9:c0:4d:b8:b2: 0e:40:93:b8:ba:3f:d9:ed:76:1f:74:73:ab:40:8a:ac:9d:41: 4c:33:64:68:39:42:59:46:16:02:a7:9b:51:4f:84:f0:0e:84: 46:6e:12:25:2e:66:ec:14:e2:a6:9a:30:0b:12:44:62:3c:22: 2a:2c:48:09:c5:b9:84:1f:a2:d6:e7:9e:7a:ab:2b:cc:16:7f: 1f:fd:5a:f2 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICbyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAxMDQzMTI0WhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5OTREMTExMC8GA1UEBRMoQjY5NEE4QzUyOEYwQjlBNEQ0NTNCQzQ0 MjBFNTBCNTE5RENGRDBBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMoqo/FJ5EZWcr0SP3740B6EvkrITKs5HHlOUEbjoaITughc41+jljlrfQG8JhsI 53E8yR7e9ulYI7jz2eG6wt/zqzvkw9oJCPSXBpa3+jms9LVgF8Q/4pfWYmx6ew+y XKFyfEgJ4kt+vJ7D6uP8GefgOUhNNifRaYd0zWn//Ec+OMMZJgNSO4nZQ2hwkFgn ZZ9zYkP4/jpZAIi7o0Pue4froOlMiTHrXkELk0c6YgANIvKp0HfCEc6gZDCMNivP LjJszFo6VRDnZNjzYlEUXy9nciv/Cy7E7rUIqsMiQ3aTORA+YdMC2afw8cGiBlmo q1eNSX2nvNSH1absCDW44X8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS2lKjFKPC5 pNRTvEQg5QtRnc/QqzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk0RDEvOTUwRDc3MDJDRTZFMTFGMEIwMDFFRDRGQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk5NEQxLzk1MEQ3NzAyQ0U2RTExRjBCMDAxRUQ0RkM0RjlBRTAyL3RwU294U2p3 dWFUVVU3eEVJT1VMVVozUDBLcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPLTANBgkqhkiG9w0BAQsFAAOCAQEAHOwUCWEspJgj0o6Ur7gH FtEOln63PoTj8WQSkowiVCfRTaCi4qaOBrFt+TIyZWxzkh0i+QPWTgbmLUWO9f+H EOCo5zAq4XyYhY2vBlAhDv/f2QILd2MsZKtb65RIsPx3HPNzP55fRteifx9IAAJl FFKac8rkIC4HXiFU48Z3Tt9jiCFlmiYlgSfaDMBaNL+gmUH442z0M4ML2KXcBEqE RF4MbGYDFztX/MtzkThkcfnATbiyDkCTuLo/2e12H3Rzq0CKrJ1BTDNkaDlCWUYW AqebUU+E8A6ERm4SJS5m7BTippowCxJEYjwiKixICcW5hB+i1ueeeqsrzBZ/H/1a 8g== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:35 2025 by rpki-client