This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer File: QNueLLrezam5cjUQIVB63NGlYn8.cer (raw, json) Hash identifier: zL5MKqRlHh2CLiZxPwC+7DxaSAJNAwKi6piXL9yPE8Y= Subject key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BAC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 03:45:31 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133933 IP: 103.48.24.0/23 IP: 103.104.84.0/23 IP: 2402:9ec0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162732 (0x27bac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 03:45:31 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:9a:93:54:e3:87:90:2c:2f:06:47:3d:bc: 87:ae:ba:92:ef:9f:12:e2:7c:94:dd:8a:02:9b:7e: 1d:61:c6:2b:11:11:cc:3f:a6:8a:91:32:c2:3d:b0: c9:74:71:ad:1b:68:9e:82:f2:b7:d1:85:ad:f8:a7: 32:70:78:40:47:eb:78:79:bd:38:85:88:1e:34:ee: 74:c8:78:ec:fd:48:e8:11:3a:4b:83:1b:43:24:03: 6f:b8:3c:36:44:b4:7e:b3:f0:51:0b:1e:f6:cc:a3: 03:51:e7:bc:ea:d3:b6:62:81:46:2f:5f:22:87:e7: b2:59:42:86:2d:a6:60:a1:9c:88:c1:a3:63:aa:78: 47:25:eb:6e:97:6b:60:3e:ff:69:d8:b9:2c:d4:b7: 09:32:48:e3:4e:8c:23:c1:0b:a2:83:cf:1b:96:77: eb:24:9f:56:ad:d9:93:f0:df:05:c3:2b:26:56:53: fe:49:fa:8d:52:9a:ee:57:c3:05:47:fd:7e:93:6b: 2d:b4:90:d1:13:95:9a:be:b3:34:72:cf:06:f1:59: 9c:ff:a2:33:14:9e:86:9c:15:6f:7d:01:98:2c:e5: 99:b4:6a:71:c8:fa:80:1c:04:ac:d3:13:01:25:6a: b5:41:6b:de:1d:78:59:46:36:ce:a2:e3:bb:04:25: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133933 sbgp-ipAddrBlock: critical IPv4: 103.48.24.0/23 103.104.84.0/23 IPv6: 2402:9ec0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:bd:06:15:23:45:4c:3e:5c:71:6c:4b:2d:09:1a:84:b3:20: 17:65:fd:8e:29:db:15:f6:d4:bd:78:d5:0f:e0:dd:0e:e1:cb: 5b:fb:ee:79:f1:fa:7a:f1:58:ab:3c:a3:e7:09:a9:23:bc:45: e4:7c:cc:42:7f:ec:ec:e3:24:9e:53:22:03:08:f1:e9:8d:8c: 5f:40:59:37:92:9b:b0:c5:97:ac:1d:2f:be:0d:91:8c:26:37: 05:04:5e:de:8c:a6:67:50:3a:5e:6f:27:0c:f1:71:d1:5e:59: 58:a4:0e:da:f8:c3:0d:1f:af:b1:1e:40:89:3a:de:87:c0:f9: e2:19:e4:2a:a9:db:79:a5:15:4d:9b:fd:40:5d:a9:06:d8:e1: 03:74:34:59:3a:f9:8a:d6:83:4b:75:8c:f8:78:5a:fc:33:a1: d9:e8:08:25:11:d6:14:32:8b:7b:6c:63:e3:0e:22:75:80:d3: 63:41:f1:c3:19:3c:c1:2c:ae:28:2e:0c:cd:9e:02:52:e7:dd: 31:4a:01:67:78:02:e4:a8:12:2b:8f:27:fb:7e:56:3f:ba:83: cc:0d:76:7b:57:d9:ec:94:60:6e:fb:48:64:73:d7:f2:74:ee: 65:8e:8a:23:59:61:0a:be:94:de:0a:a5:fd:f8:08:ca:ec:c9: 70:ef:ca:1c -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnusMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDAzNDUzMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUx MDIxNTA3QURDRDFBNTYyN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzVZqTVOOHkCwvBkc9vIeuupLvnxLifJTdigKbfh1hxisREcw/poqRMsI9sMl0 ca0baJ6C8rfRha34pzJweEBH63h5vTiFiB407nTIeOz9SOgROkuDG0MkA2+4PDZE tH6z8FELHvbMowNR57zq07ZigUYvXyKH57JZQoYtpmChnIjBo2OqeEcl626Xa2A+ /2nYuSzUtwkySONOjCPBC6KDzxuWd+skn1at2ZPw3wXDKyZWU/5J+o1Smu5XwwVH /X6Tay20kNETlZq+szRyzwbxWZz/ojMUnoacFW99AZgs5Zm0anHI+oAcBKzTEwEl arVBa94deFlGNs6i47sEJb1TAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUQNueLLre zam5cjUQIVB63NGlYn8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM4QjRGL0RENzMyNjQ4NjhCQzExRUM4NzgwNzk0OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDOEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExy ZXphbTVjalVRSVZCNjNOR2xZbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgstMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZzAYAwQBZ2hU MA0EAgACMAcDBQAkAp7AMA0GCSqGSIb3DQEBCwUAA4IBAQBtvQYVI0VMPlxxbEst CRqEsyAXZf2OKdsV9tS9eNUP4N0O4ctb++558fp68VirPKPnCakjvEXkfMxCf+zs 4ySeUyIDCPHpjYxfQFk3kpuwxZesHS++DZGMJjcFBF7ejKZnUDpebycM8XHRXllY pA7a+MMNH6+xHkCJOt6HwPniGeQqqdt5pRVNm/1AXakG2OEDdDRZOvmK1oNLdYz4 eFr8M6HZ6AglEdYUMot7bGPjDiJ1gNNjQfHDGTzBLK4oLgzNngJS590xSgFneALk qBIrjyf7flY/uoPMDXZ7V9nslGBu+0hkc9fydO5ljoojWWEKvpTeCqX9+AjK7Mlw 78oc -----END CERTIFICATE-----Generated at Mon Dec 8 18:03:38 2025 by rpki-client