This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer File: ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer (raw, json) Hash identifier: rxGl0EbRbthl4snRURgPvS0p7J+BjLeJdpQKv5MLQVc= Subject key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FEE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 21 Dec 2025 14:14:09 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 149034 IP: 103.177.52.0/23 IP: 2400:3820::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163822 (0x27fee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 21 14:14:09 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:78:aa:52:d8:df:09:77:d8:95:12:3c:58: c3:21:23:c4:e7:4d:0f:f3:57:be:fe:e1:fa:e3:f4: f5:26:e0:9c:a2:d2:b5:c5:74:dc:4d:74:c8:c8:75: 98:40:bb:59:fa:bb:35:4d:c3:93:3d:d7:7c:55:21: 1f:89:bb:f4:1c:73:e8:6f:45:c5:f6:a5:ce:50:25: 85:11:77:33:b2:f1:28:1b:90:b7:ff:a7:2e:83:8e: 9c:15:94:1b:ec:02:e4:11:77:59:f7:74:c2:09:a6: 2c:54:bc:55:91:ee:ed:b3:2d:47:72:60:77:3e:65: 9b:2d:d3:0a:fd:64:b2:eb:50:2e:2c:1b:fd:c5:2c: 6f:5f:74:9c:18:0d:bf:e2:e7:10:bc:99:5c:b6:23: 83:be:e4:b9:1e:cd:77:9f:ea:8c:99:6c:9e:aa:69: 46:a9:41:8d:73:27:30:e4:e8:fb:8e:5c:73:10:76: b2:08:2b:c6:a3:60:7f:37:51:fe:5c:8a:00:25:ee: c4:58:fb:19:c6:dd:0c:42:57:5c:60:91:3e:3a:91: ff:fd:5b:a4:7a:3a:3d:6b:3c:b7:92:98:6a:2d:fd: 44:1d:88:07:f3:c9:02:ea:0a:43:38:52:d3:61:aa: e8:b7:37:7f:f3:ee:98:f6:46:5f:d5:8a:76:65:27: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149034 sbgp-ipAddrBlock: critical IPv4: 103.177.52.0/23 IPv6: 2400:3820::/32 Signature Algorithm: sha256WithRSAEncryption 5a:60:18:44:99:db:ce:54:22:88:1d:fc:1a:47:4c:01:d7:73: 63:cd:e9:aa:d6:87:d5:7a:97:ec:cd:39:17:ea:01:73:78:05: b8:da:3f:5e:b7:c1:e3:0b:8b:9e:c1:aa:46:b5:75:fd:a0:af: 5f:dc:0f:90:e5:36:90:6d:3f:98:da:26:51:b4:27:01:37:03: bf:f7:74:f1:a5:fa:83:ec:9c:a4:80:70:37:d1:48:c7:09:ff: 7f:d6:99:cf:f2:22:e1:28:8f:d8:7c:dd:ac:89:57:37:93:26: 89:1e:21:ca:ba:92:5e:c6:0b:4a:96:09:d9:b5:de:cd:4d:f4: 1f:ef:60:a5:58:94:b5:f8:db:e0:df:87:aa:71:7b:4c:ef:07: 2d:26:03:e5:02:e9:02:60:ef:f3:34:1f:9f:82:6a:31:4e:a1: 96:e4:bf:33:ec:d9:65:32:b8:6b:1c:20:ad:7c:25:01:b9:39: 60:8a:66:4f:1e:86:36:cd:62:fa:a0:83:12:13:cc:e9:0d:79: f8:d0:03:c5:45:1e:5f:d4:67:98:10:8d:00:15:d9:57:51:69: 92:8d:15:62:63:08:5f:14:d1:59:39:0e:e3:f9:48:83:7f:c9: bb:fd:f4:41:6f:1a:10:db:0f:a1:cf:ce:f5:2b:20:c4:2d:51: f9:10:b1:5f -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAn/uMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMTE0MTQwOVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3 RTJDRTY4OEMzRTQ2RkM1MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC623iqUtjfCXfYlRI8WMMhI8TnTQ/zV77+4frj9PUm4Jyi0rXFdNxNdMjIdZhA u1n6uzVNw5M913xVIR+Ju/Qcc+hvRcX2pc5QJYURdzOy8SgbkLf/py6DjpwVlBvs AuQRd1n3dMIJpixUvFWR7u2zLUdyYHc+ZZst0wr9ZLLrUC4sG/3FLG9fdJwYDb/i 5xC8mVy2I4O+5LkezXef6oyZbJ6qaUapQY1zJzDk6PuOXHMQdrIIK8ajYH83Uf5c igAl7sRY+xnG3QxCV1xgkT46kf/9W6R6Oj1rPLeSmGot/UQdiAfzyQLqCkM4UtNh qui3N3/z7pj2Rl/VinZlJxulAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUozzKgbVe BGVdG1p+LOaIw+RvxTAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVERjAwLzNBRTAwMzRBNEU3RTExRUM5RTI5ODQyOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFREYwMC8zQUUwMDM0QTRFN0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JW ZUJHVmRHMXAtTE9hSXctUnZ4VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkYqMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ7E0MA0EAgAC MAcDBQAkADggMA0GCSqGSIb3DQEBCwUAA4IBAQBaYBhEmdvOVCKIHfwaR0wB13Nj zemq1ofVepfszTkX6gFzeAW42j9et8HjC4uewapGtXX9oK9f3A+Q5TaQbT+Y2iZR tCcBNwO/93TxpfqD7JykgHA30UjHCf9/1pnP8iLhKI/YfN2siVc3kyaJHiHKupJe xgtKlgnZtd7NTfQf72ClWJS1+Nvg34eqcXtM7wctJgPlAukCYO/zNB+fgmoxTqGW 5L8z7NllMrhrHCCtfCUBuTlgimZPHoY2zWL6oIMSE8zpDXn40APFRR5f1GeYEI0A FdlXUWmSjRViYwhfFNFZOQ7j+UiDf8m7/fRBbxoQ2w+hz871KyDELVH5ELFf -----END CERTIFICATE-----Generated at Wed Dec 24 12:17:42 2025 by rpki-client