This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer File: oiK21tBSghQiHUrOpH4axhHvQno.cer (raw, json) Hash identifier: Z8a/ZmxTmY+dhm2lTqJbwAbgM+qlh65hkVqsceD+hqQ= Subject key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FB3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft caRepository: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 20 Dec 2025 12:31:47 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: AS: 133762 IP: 103.108.180.0/22 IP: 2402:6e40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163763 (0x27fb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 20 12:31:47 2025 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7f:a7:da:22:14:50:cc:d6:7b:b4:a9:97:99: c3:f4:0f:2b:8a:81:61:bb:5c:54:2d:49:d8:87:16: d6:88:84:98:df:a4:ad:ef:ee:a7:af:40:3c:94:ea: c7:cc:9c:28:32:a7:4a:d8:55:36:13:d3:5f:3f:3b: 6a:f7:d1:90:3f:fc:14:e7:45:30:13:61:8b:e7:e1: 26:40:bf:c4:58:58:63:4b:3c:37:a7:58:02:1c:e4: 9c:da:72:4c:41:87:84:13:f9:23:26:93:ca:c6:6a: 55:9e:e7:d5:60:a6:23:e8:16:a7:53:e2:cc:3d:c4: 0e:25:a5:ac:ad:d7:31:e6:55:e8:b4:29:34:76:69: a3:f8:22:ed:d5:92:3d:73:02:4b:d5:e7:09:e1:1d: 59:94:c3:a4:ad:f4:b3:e1:fe:80:83:f7:6b:d1:a2: 4e:00:12:5d:4f:1f:f2:16:1a:70:f3:96:c3:8e:c9: 64:b0:f1:1f:0a:73:5d:1a:71:fd:50:b8:e0:4e:5a: cf:dd:5c:e7:f5:d2:21:74:0c:34:46:24:23:4a:b5: 08:e2:8e:38:f2:cb:ab:0c:9c:8d:09:37:ad:20:78: f6:06:f5:5e:b9:45:b2:21:7f:a2:ba:1d:d3:c4:4c: 75:78:b6:0c:cd:a9:59:a2:1a:ad:71:18:56:5d:df: 7d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133762 sbgp-ipAddrBlock: critical IPv4: 103.108.180.0/22 IPv6: 2402:6e40::/32 Signature Algorithm: sha256WithRSAEncryption d4:94:e2:ea:a5:86:d1:97:3a:65:24:00:73:46:6a:e2:f5:93: ef:04:fc:16:bc:ac:f8:3c:87:eb:f4:62:57:e8:a9:8e:55:f7: df:f2:e2:1d:fc:0d:b1:75:ba:98:bf:db:f4:13:67:9a:81:e2: 43:bb:33:cc:e8:fb:d6:a1:1c:be:07:df:ef:82:c1:7e:80:b6: ae:a4:12:86:20:e9:4c:77:04:f2:3c:ef:86:d6:53:76:5b:aa: 53:89:82:7b:e0:8d:ff:ee:ac:00:73:4c:4c:9d:c3:3d:0a:7b: 8a:77:68:e7:a5:b1:de:da:d4:94:cf:17:f1:b5:69:d4:4b:d0: 46:24:23:70:0a:e2:62:f8:25:94:ed:df:7f:b1:4e:2f:75:ce: f6:80:5e:60:79:d0:91:a4:d2:ed:74:fb:98:57:c5:62:c1:00: 35:33:85:70:5d:65:82:e7:fb:47:d4:8d:b0:bc:80:4a:13:c6: 8e:89:9d:99:16:55:eb:c3:50:2c:9c:03:97:35:de:2d:0c:09: 2c:82:e3:17:fd:82:8c:0c:14:b7:4a:da:bc:5e:2b:c1:3e:30: 71:9e:35:0b:be:88:25:b1:1d:54:a5:68:d8:57:d6:1d:94:7a: 81:2b:18:b2:17:70:64:87:67:e7:bf:1f:1b:d5:fa:e4:c6:bf: c0:63:00:36 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAn+zMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMDEyMzE0N1oXDTI3MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUYxNzcxMTAvBgNVBAUTKEEyMjJCNkQ2RDA1MjgyMTQyMjFENEFD RUE0N0UxQUM2MTFFRjQyN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5f6faIhRQzNZ7tKmXmcP0DyuKgWG7XFQtSdiHFtaIhJjfpK3v7qevQDyU6sfM nCgyp0rYVTYT018/O2r30ZA//BTnRTATYYvn4SZAv8RYWGNLPDenWAIc5JzackxB h4QT+SMmk8rGalWe59VgpiPoFqdT4sw9xA4lpayt1zHmVei0KTR2aaP4Iu3Vkj1z AkvV5wnhHVmUw6St9LPh/oCD92vRok4AEl1PH/IWGnDzlsOOyWSw8R8Kc10acf1Q uOBOWs/dXOf10iF0DDRGJCNKtQjijjjyy6sMnI0JN60gePYG9V65RbIhf6K6HdPE THV4tgzNqVmiGq1xGFZd333vAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUoiK21tBS ghQiHUrOpH4axhHvQnowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFGMTc3LzgyRUU1ODI2MEUwNjExRUI4Njg3NkU1M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExRjE3Ny84MkVFNTgyNjBFMDYxMUVCODY4NzZFNTNDNEY5QUUwMi9vaUsyMXRC U2doUWlIVXJPcEg0YXhoSHZRbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgqCMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2y0MA0EAgAC MAcDBQAkAm5AMA0GCSqGSIb3DQEBCwUAA4IBAQDUlOLqpYbRlzplJABzRmri9ZPv BPwWvKz4PIfr9GJX6KmOVfff8uId/A2xdbqYv9v0E2eageJDuzPM6PvWoRy+B9/v gsF+gLaupBKGIOlMdwTyPO+G1lN2W6pTiYJ74I3/7qwAc0xMncM9CnuKd2jnpbHe 2tSUzxfxtWnUS9BGJCNwCuJi+CWU7d9/sU4vdc72gF5gedCRpNLtdPuYV8ViwQA1 M4VwXWWC5/tH1I2wvIBKE8aOiZ2ZFlXrw1AsnAOXNd4tDAksguMX/YKMDBS3Stq8 XivBPjBxnjULvoglsR1UpWjYV9YdlHqBKxiyF3Bkh2fnvx8b1frkxr/AYwA2 -----END CERTIFICATE-----Generated at Tue Dec 23 05:54:24 2025 by rpki-client