This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer (raw, json) Hash identifier: EozJcimE44SPc1kMpwPmpjdbLijOiOJ8PPhJCgYhG0g= Subject key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FDF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 21 Dec 2025 12:20:36 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 139877 IP: 103.145.156.0/24 IP: 103.176.72.0/24 IP: 2001:df2:1b80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163807 (0x27fdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 21 12:20:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:1e:b6:71:38:94:c2:c1:9f:3e:f0:0a:69: 93:93:18:be:e9:99:ad:da:c4:50:bc:9e:56:e5:f3: 83:4f:98:c3:c7:46:12:02:34:a1:72:87:6c:81:4e: a6:dc:3d:52:01:eb:45:19:eb:af:c5:3b:ce:fc:3d: 7a:4d:31:ed:fb:b8:7a:db:73:4e:cc:81:b1:48:32: 63:c6:7c:d6:ed:4a:03:2d:ab:25:84:8c:db:83:84: dd:43:40:05:55:06:1f:6b:8b:5e:61:98:47:70:9c: db:c7:9e:24:cd:6c:f5:03:3b:15:b2:9d:30:8a:56: ca:fc:f0:6f:e9:0c:8c:77:4c:14:44:81:1e:28:1a: 00:1f:29:e7:3e:75:da:6f:b7:b3:49:7f:49:ac:3a: 32:b3:1e:a4:27:7a:8c:4d:db:81:50:23:4f:7a:08: 9a:80:9e:27:ea:c0:b6:cc:b6:28:44:08:5b:af:eb: 15:40:51:22:6e:64:0c:88:42:59:cd:23:24:75:3d: 8a:2f:80:f6:40:e7:77:96:71:26:71:46:49:e2:97: ae:84:88:c0:a6:b1:4e:cc:74:b0:66:a6:2c:f8:10: 90:8b:9d:53:bd:7c:eb:cf:49:17:41:6e:f6:f9:18: 98:76:d2:7b:0d:5b:9b:96:98:0d:21:13:ed:7b:93: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139877 sbgp-ipAddrBlock: critical IPv4: 103.145.156.0/24 103.176.72.0/24 IPv6: 2001:df2:1b80::/48 Signature Algorithm: sha256WithRSAEncryption d2:de:11:15:f0:1f:3f:a5:4f:42:15:cd:87:04:f3:59:6d:bd: 3e:98:84:cd:fa:ea:94:d3:c7:9a:e8:ae:09:b5:9a:8d:ed:0f: 51:7e:ec:55:b4:19:59:99:14:37:da:53:94:6e:9c:e8:e0:29: 29:99:c7:a5:7b:82:3c:1b:31:97:ce:ff:ef:75:c4:a6:a9:4b: ea:5d:35:4c:1f:eb:b8:48:5c:90:c5:3d:77:bb:c1:26:6b:ed: de:29:73:8f:ff:9e:e1:62:fc:90:4a:cf:48:fb:2d:71:19:14: 05:08:90:bb:7d:7f:79:61:45:de:ba:0c:61:d6:78:10:4a:77: 95:61:e5:65:db:30:22:92:41:18:ff:6c:96:0a:f3:80:57:fb: 95:c7:13:9e:79:a2:9d:c3:7b:43:e6:a6:83:73:34:ae:b6:18: 92:e3:94:ce:35:62:c7:c5:a8:4f:e2:c7:ee:c5:3a:01:3f:41: 4e:38:16:01:f9:e6:7d:d8:8b:1a:c8:5f:7a:04:b6:20:a5:75: e2:e9:09:72:cb:6c:d6:ff:9e:0a:93:8a:27:17:20:13:f2:67: 41:b0:b3:a7:70:15:e7:d5:b4:0c:0c:d2:9b:03:a8:ea:2a:77: 56:df:c2:5d:c5:d1:c4:61:bd:9c:fc:c3:71:b7:f9:17:e6:a7: 67:00:bc:01 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAn/fMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMTEyMjAzNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJF NTU4NENGOTkzRjA1QkQ5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZdR62cTiUwsGfPvAKaZOTGL7pma3axFC8nlbl84NPmMPHRhICNKFyh2yBTqbc PVIB60UZ66/FO878PXpNMe37uHrbc07MgbFIMmPGfNbtSgMtqyWEjNuDhN1DQAVV Bh9ri15hmEdwnNvHniTNbPUDOxWynTCKVsr88G/pDIx3TBREgR4oGgAfKec+ddpv t7NJf0msOjKzHqQneoxN24FQI096CJqAnifqwLbMtihECFuv6xVAUSJuZAyIQlnN IyR1PYovgPZA53eWcSZxRknil66EiMCmsU7MdLBmpiz4EJCLnVO9fOvPSRdBbvb5 GJh20nsNW5uWmA0hE+17k40rAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUG24yksg1 ZU5JFJLlWEz5k/Bb2ZAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEwQTY5L0UzQUJEMDQyMjE0MTExRUFCREY2Nzc2OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExMEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3Nn MVpVNUpGSkxsV0V6NWtfQmIyWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiJlMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ5GcAwQAZ7BI MA8EAgACMAkDBwAgAQ3yG4AwDQYJKoZIhvcNAQELBQADggEBANLeERXwHz+lT0IV zYcE81ltvT6YhM366pTTx5rorgm1mo3tD1F+7FW0GVmZFDfaU5RunOjgKSmZx6V7 gjwbMZfO/+91xKapS+pdNUwf67hIXJDFPXe7wSZr7d4pc4//nuFi/JBKz0j7LXEZ FAUIkLt9f3lhRd66DGHWeBBKd5Vh5WXbMCKSQRj/bJYK84BX+5XHE555op3De0Pm poNzNK62GJLjlM41YsfFqE/ix+7FOgE/QU44FgH55n3YixrIX3oEtiCldeLpCXLL bNb/ngqTiicXIBPyZ0Gws6dwFefVtAwM0psDqOoqd1bfwl3F0cRhvZz8w3G3+Rfm p2cAvAE= -----END CERTIFICATE-----Generated at Tue Dec 23 09:43:09 2025 by rpki-client