This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer File: 3owRZVEEK-jnJkvttYLwo3e7JL0.cer (raw, json) Hash identifier: Q9cAHFE/tD8bhAMJLO64P2lp/lB8+91oKd3sgAj3TOs= Subject key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E87 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 05:19:51 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 43.226.20.0/22 IP: 103.45.68.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 07:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163463 (0x27e87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 05:19:51 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:db:7b:9a:bc:28:07:54:29:b4:2a:80:d7: df:2b:20:21:ae:2b:96:32:2c:a4:53:d8:a9:6b:c4: 40:40:b9:b0:2e:f9:16:b5:72:5f:1e:50:d9:94:75: c1:23:07:13:35:94:80:bf:73:33:ec:1f:02:e3:85: 4b:a3:a5:18:56:da:7d:df:4d:5d:3f:e7:3c:9a:18: 42:f7:7b:57:30:8d:7a:59:2d:85:36:7a:1f:a1:8d: 08:41:73:42:38:c7:ec:d8:b9:39:2f:81:e5:de:21: 49:1b:09:a4:38:d7:b8:34:8d:0b:35:71:2c:9c:1d: 9b:20:81:0f:3b:af:c0:09:d7:74:7f:3c:18:d0:7b: c8:eb:5b:4d:d4:db:b3:e6:5d:db:8c:06:d1:f0:29: a7:67:71:51:73:4f:77:33:59:84:a2:2d:cc:f1:8f: 6d:3f:a7:95:f9:e3:ba:8a:41:bc:36:f7:6c:da:cd: bc:22:05:ae:6e:5c:07:8a:a2:25:b8:bc:96:e7:dc: d7:16:f1:fb:1b:55:de:c9:14:0f:aa:70:37:73:d8: 5e:90:aa:08:7e:c4:50:be:d0:79:7c:91:6e:d0:3e: 19:b6:c6:bd:7b:ae:85:30:17:89:43:a0:07:56:05: 76:2e:ff:60:15:66:e8:20:ac:b1:99:74:70:bc:59: 96:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.20.0/22 103.45.68.0/22 Signature Algorithm: sha256WithRSAEncryption c4:5b:a8:33:78:3f:a2:80:17:23:84:46:a3:ad:8b:1a:a3:63: 08:0c:a2:42:c9:e1:72:81:bf:7d:dd:34:d1:31:e9:f7:bb:13: 78:4d:4f:78:b7:9e:f6:2d:6f:bb:2d:c1:e6:c5:3d:a7:ad:28: 37:e1:a3:62:74:ba:00:b9:9b:bf:3e:e6:a7:d3:2d:ab:f6:b5: 40:7c:72:66:b7:b4:a9:24:9a:46:a1:34:f6:d9:ee:87:ae:68: 07:f7:ef:78:e7:6b:f2:80:b6:74:10:50:c3:6e:a1:ab:e4:cb: 9f:ad:de:cf:d7:53:fd:b0:f6:a0:ec:73:d8:fe:88:21:a5:d5: 5c:03:c6:a4:3a:21:4b:8f:5d:d2:c5:aa:83:ec:c3:3a:86:f5: 90:b0:b2:c9:eb:2e:8d:13:b3:61:a9:fa:f4:c6:32:2a:6e:9e: 95:3c:9a:50:cd:e2:c2:71:6c:dd:ea:86:2a:a9:eb:da:6d:91: 74:2e:f3:af:4f:99:f6:67:85:86:ed:53:b6:ef:1d:7d:ae:fd: da:dd:93:6f:c2:5d:5c:66:0b:10:c1:68:87:be:bc:05:f2:9e: 8d:91:ff:41:51:05:7c:5d:b6:54:b4:f6:e3:6b:dc:91:b2:34: 93:ec:b9:46:68:1e:97:c1:cf:02:0c:b7:69:9a:1f:1d:49:4d: de:0f:3c:be -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAn6HMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjA1MTk1MVoXDTI2MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDcxQTAxMTAvBgNVBAUTKERFOEMxMTY1NTEwNDJCRThFNzI2NEJF REI1ODJGMEEzNzdCQjI0QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf8Nt7mrwoB1QptCqA198rICGuK5YyLKRT2KlrxEBAubAu+Ra1cl8eUNmUdcEj BxM1lIC/czPsHwLjhUujpRhW2n3fTV0/5zyaGEL3e1cwjXpZLYU2eh+hjQhBc0I4 x+zYuTkvgeXeIUkbCaQ417g0jQs1cSycHZsggQ87r8AJ13R/PBjQe8jrW03U27Pm XduMBtHwKadncVFzT3czWYSiLczxj20/p5X547qKQbw292zazbwiBa5uXAeKoiW4 vJbn3NcW8fsbVd7JFA+qcDdz2F6Qqgh+xFC+0Hl8kW7QPhm2xr17roUwF4lDoAdW BXYu/2AVZuggrLGZdHC8WZY9AgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQU3owRZVEE K+jnJkvttYLwo3e7JL0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ3MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NzFBMC9ENjk5NERFNkRBM0UxMUYwODFGNUE0NTc4RUQzNjQxRC8zb3dSWlZF RUstam5Ka3Z0dFlMd28zZTdKTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAIr4hQDBAJnLUQwDQYJKoZIhvcNAQELBQADggEBAMRbqDN4P6KA FyOERqOtixqjYwgMokLJ4XKBv33dNNEx6fe7E3hNT3i3nvYtb7stwebFPaetKDfh o2J0ugC5m78+5qfTLav2tUB8cma3tKkkmkahNPbZ7oeuaAf373jna/KAtnQQUMNu oavky5+t3s/XU/2w9qDsc9j+iCGl1VwDxqQ6IUuPXdLFqoPswzqG9ZCwssnrLo0T s2Gp+vTGMipunpU8mlDN4sJxbN3qhiqp69ptkXQu869PmfZnhYbtU7bvHX2u/drd k2/CXVxmCxDBaIe+vAXyno2R/0FRBXxdtlS09uNr3JGyNJPsuUZoHpfBzwIMt2ma Hx1JTd4PPL4= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:35 2025 by rpki-client