This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer File: uokBTrxJS2f9iz-C6LOO9vbFck0.cer (raw, json) Hash identifier: 6nEKQleGjdR/MxtA+QqB5YN7EVVql+DL/TEyzZc2pRo= Subject key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276F1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 16:44:12 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 152174 AS: 152188 IP: 202.50.242.0/24 IP: 2001:def:4000::/48 IP: 2401:5aa0::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161521 (0x276f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 21 16:44:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:14:ae:46:9f:5e:83:6b:51:be:4b:48:78: 68:df:e6:fd:eb:76:31:91:51:4b:6b:3b:ef:85:12: 8a:7f:45:05:8c:56:b3:b0:30:6f:ba:50:39:62:24: 85:0f:c6:e9:99:d2:e1:eb:4c:7f:6d:6a:38:43:1f: 74:b2:22:b7:ad:98:3a:2b:10:ca:2c:8d:4a:21:f1: f9:14:78:e4:54:39:a0:33:7f:de:40:14:60:50:77: 68:7e:e4:c4:42:84:fc:d6:d1:c0:03:53:bd:3e:64: a8:cb:11:c3:41:c3:67:c9:2c:81:ba:74:33:a9:7a: 52:85:28:f6:da:6d:8d:06:39:c1:75:a6:af:5b:ab: 98:60:d7:38:e5:00:b2:4b:1f:3d:18:dc:ff:66:1c: 92:ca:e3:ad:1a:06:96:34:35:2c:0a:de:85:8a:47: b9:cc:bb:ef:45:5b:c2:f0:6a:9c:5f:37:6d:ad:b5: 3a:3c:39:cb:1b:60:7c:b2:17:8b:65:b0:cf:d4:ff: 80:a5:18:d3:01:cb:bf:ed:58:df:d4:13:56:ce:a6: 95:82:2d:b4:48:c0:7e:63:c5:8f:33:0b:ab:f5:8b: f4:cf:42:d0:62:69:6d:75:27:8f:cc:17:57:2d:c7: 62:de:29:52:55:2f:e5:84:b4:2a:d3:7d:da:19:15: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152174 152188 sbgp-ipAddrBlock: critical IPv4: 202.50.242.0/24 IPv6: 2001:def:4000::/48 2401:5aa0::/31 Signature Algorithm: sha256WithRSAEncryption 80:a5:e3:42:b3:ae:2c:8e:19:eb:d5:d9:2e:e0:08:ce:a3:77: 8f:fc:36:87:5d:30:2c:26:8f:53:64:aa:85:55:a3:33:29:1e: 49:3d:20:b1:ef:fc:63:70:24:29:ee:e6:bf:d8:aa:be:cd:bb: c5:f6:ce:1d:4e:e1:15:12:5b:36:e7:ef:9a:06:f1:4c:c5:eb: 47:34:5c:3d:44:1e:19:2e:64:1a:00:1f:43:f6:23:0e:b4:0b: 4a:10:ce:b9:6a:27:63:70:b1:41:10:d2:4e:f7:d2:c2:95:88: ab:7d:8a:55:7f:f7:ec:99:7b:bf:d1:f2:9a:a4:2f:2d:e5:ac: ec:26:90:d2:6a:93:95:38:a4:be:43:a9:8c:45:86:a6:f7:8f: 24:3c:06:8e:23:64:4c:1d:07:4c:f0:52:4c:20:ab:8f:9e:7a: dc:22:94:be:c3:38:71:e0:bf:ac:44:34:5e:ab:4c:d0:e9:75: a0:15:f1:b0:fb:50:05:42:6c:75:eb:24:9c:bd:d8:13:3b:68: a8:ef:86:d2:2d:49:48:07:a1:75:d6:25:3a:90:95:fb:89:8b: 34:65:8f:81:50:e3:47:71:7b:87:0d:cc:22:8f:e6:80:8d:56: 8c:10:28:92:69:9c:a6:1b:21:e4:06:6b:dd:b8:98:f4:ce:83: f7:2e:c2:fa -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgIDAnbxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMTE2NDQxMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4 MkU4QjM4RUY2RjZDNTcyNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC15hSuRp9eg2tRvktIeGjf5v3rdjGRUUtrO++FEop/RQWMVrOwMG+6UDliJIUP xumZ0uHrTH9tajhDH3SyIretmDorEMosjUoh8fkUeORUOaAzf95AFGBQd2h+5MRC hPzW0cADU70+ZKjLEcNBw2fJLIG6dDOpelKFKPbabY0GOcF1pq9bq5hg1zjlALJL Hz0Y3P9mHJLK460aBpY0NSwK3oWKR7nMu+9FW8LwapxfN22ttTo8OcsbYHyyF4tl sM/U/4ClGNMBy7/tWN/UE1bOppWCLbRIwH5jxY8zC6v1i/TPQtBiaW11J4/MF1ct x2LeKVJVL+WEtCrTfdoZFf3DAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUuokBTrxJ S2f9iz+C6LOO9vbFck0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM0RUM3Lzc1NzU3ODcwQkZFNTExRUVBQUNFNDMxMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4 SlMyZjlpei1DNkxPTzl2YkZjazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAlJuAgMCUnwwNwYIKwYBBQUHAQcBAf8EKDAmMAwEAgABMAYDBADKMvIw FgQCAAIwEAMHACABDe9AAAMFASQBWqAwDQYJKoZIhvcNAQELBQADggEBAICl40Kz riyOGevV2S7gCM6jd4/8NoddMCwmj1NkqoVVozMpHkk9ILHv/GNwJCnu5r/Yqr7N u8X2zh1O4RUSWzbn75oG8UzF60c0XD1EHhkuZBoAH0P2Iw60C0oQzrlqJ2NwsUEQ 0k730sKViKt9ilV/9+yZe7/R8pqkLy3lrOwmkNJqk5U4pL5DqYxFhqb3jyQ8Bo4j ZEwdB0zwUkwgq4+eetwilL7DOHHgv6xENF6rTNDpdaAV8bD7UAVCbHXrJJy92BM7 aKjvhtItSUgHoXXWJTqQlfuJizRlj4FQ40dxe4cNzCKP5oCNVowQKJJpnKYbIeQG a924mPTOg/cuwvo= -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:01 2025 by rpki-client