This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer File: 125W2VTMXAD-XW6t2N9QJypb3yk.cer (raw, json) Hash identifier: iwAW/E6N3YlgHYWW5REuI/tmY/7EMOcWRzoE3FhqYwM= Subject key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FC6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 20 Dec 2025 13:51:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 138427 IP: 103.125.82.0/24 IP: 2001:df7:2700::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163782 (0x27fc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 20 13:51:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ee:a7:f2:04:c4:c0:51:95:0c:88:76:62:6f: e9:f4:b6:8d:28:1e:14:23:b0:46:4a:c5:12:b2:98: 9b:1a:27:f8:cf:cc:ee:67:d9:70:60:22:f3:f0:11: c8:c4:d7:d0:75:47:28:52:0b:b1:c5:24:0d:a4:30: 2d:c8:9e:e1:8f:30:5a:fa:42:ce:b3:cc:28:38:8c: 1f:d3:1a:72:1c:af:51:f8:d4:2c:3e:12:17:c7:5c: 7e:f4:71:76:38:25:f2:22:27:4e:7d:22:45:04:52: 4c:a0:8e:1c:32:88:00:f0:f4:f6:3a:c2:ae:a7:2d: a8:47:7a:23:6d:69:e2:49:a4:ba:15:09:35:15:5b: b8:1e:23:47:36:1d:c2:77:3f:97:de:88:a0:35:32: 36:7d:52:55:78:d0:f6:e0:be:72:cd:41:c8:4e:74: eb:88:64:4b:39:f1:bc:ff:ed:73:07:05:f9:fb:32: 0c:81:ab:ba:a3:f0:23:52:f5:84:77:82:b0:7d:f6: be:9d:9d:98:45:11:3f:68:a3:3d:b6:f4:4c:ab:ff: dd:4a:0b:f1:49:22:9c:01:d7:05:ab:1f:1b:32:32: f9:c8:9d:38:54:cd:c5:08:a3:76:1b:19:95:f8:f2: 44:be:a0:7f:de:3e:85:f1:7b:e8:88:05:ef:5d:75: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138427 sbgp-ipAddrBlock: critical IPv4: 103.125.82.0/24 IPv6: 2001:df7:2700::/48 Signature Algorithm: sha256WithRSAEncryption 48:6a:ef:31:e9:13:5b:29:45:9b:35:49:96:2b:b8:31:2f:76: fd:98:b2:35:04:c9:a5:05:dc:7b:ce:28:16:5c:4f:8d:f6:a3: f6:04:d8:2c:c0:e8:01:a0:e4:76:c8:f6:aa:e7:71:d9:1a:5c: d5:49:53:bb:36:1d:43:fa:a3:08:0d:8c:af:d4:9f:a4:6d:8c: a7:8d:61:f4:4a:a4:55:4c:33:05:21:84:0a:d3:36:8c:06:30: 69:ce:57:b6:5f:c9:58:1d:f4:08:e3:16:0b:f4:72:14:98:c6: 2e:90:fe:51:a7:da:07:1f:a7:9a:e6:40:79:79:5d:10:d5:86: f9:a9:4d:b7:60:f8:62:13:ad:01:6f:4e:92:31:9e:c5:ae:39: 80:2a:ca:77:6c:28:25:8f:53:1c:ce:b3:c9:93:d9:bc:79:70: 79:08:57:f1:0e:92:84:3e:cd:06:ce:77:27:8f:f4:e9:65:54: 56:72:a2:98:95:71:9c:23:82:2b:74:df:7e:c7:1b:38:d9:aa: 9b:14:7c:a9:00:53:97:1b:4f:7e:af:bd:6e:60:45:eb:16:34: c8:73:03:33:08:54:7a:69:f9:93:91:ee:4b:6f:ff:2c:ab:c4: ad:44:77:26:18:5b:0e:94:39:83:45:43:f4:e7:1e:ec:d1:e4: 9f:7d:86:a3 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAn/GMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMDEzNTEzMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQURCNDExMTAvBgNVBAUTKEQ3NkU1NkQ5NTRDQzVDMDBGRTVENkVB REQ4REY1MDI3MkE1QkRGMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCY7qfyBMTAUZUMiHZib+n0to0oHhQjsEZKxRKymJsaJ/jPzO5n2XBgIvPwEcjE 19B1RyhSC7HFJA2kMC3InuGPMFr6Qs6zzCg4jB/TGnIcr1H41Cw+EhfHXH70cXY4 JfIiJ059IkUEUkygjhwyiADw9PY6wq6nLahHeiNtaeJJpLoVCTUVW7geI0c2HcJ3 P5feiKA1MjZ9UlV40PbgvnLNQchOdOuIZEs58bz/7XMHBfn7MgyBq7qj8CNS9YR3 grB99r6dnZhFET9ooz229Eyr/91KC/FJIpwB1wWrHxsyMvnInThUzcUIo3YbGZX4 8kS+oH/ePoXxe+iIBe9ddSJRAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU125W2VTM XAD+XW6t2N9QJypb3ykwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFEQjQxLzE2MEI4MjRFMDIwMTExRUI4RTQ3Qjk1Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBREI0MS8xNjBCODI0RTAyMDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZU TVhBRC1YVzZ0Mk45UUp5cGIzeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhy7MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ31SMA8EAgAC MAkDBwAgAQ33JwAwDQYJKoZIhvcNAQELBQADggEBAEhq7zHpE1spRZs1SZYruDEv dv2YsjUEyaUF3HvOKBZcT432o/YE2CzA6AGg5HbI9qrncdkaXNVJU7s2HUP6owgN jK/Un6RtjKeNYfRKpFVMMwUhhArTNowGMGnOV7ZfyVgd9AjjFgv0chSYxi6Q/lGn 2gcfp5rmQHl5XRDVhvmpTbdg+GITrQFvTpIxnsWuOYAqyndsKCWPUxzOs8mT2bx5 cHkIV/EOkoQ+zQbOdyeP9OllVFZyopiVcZwjgit0337HGzjZqpsUfKkAU5cbT36v vW5gResWNMhzAzMIVHpp+ZOR7ktv/yyrxK1EdyYYWw6UOYNFQ/TnHuzR5J99hqM= -----END CERTIFICATE-----Generated at Wed Dec 24 12:20:11 2025 by rpki-client