This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.cer File: v1kKl-Vd7MNQM7AG0ANvk4-NeIw.cer (raw, json) Hash identifier: iX4/nFyIZmztisKt8SypCP4yNV4Q1zjcwZvBPmm6h+k= Subject key identifier: BF:59:0A:97:E5:5D:EC:C3:50:33:B0:06:D0:03:6F:93:8F:8D:78:8C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0274A8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918C287/7F4D1FDEBF7E11F09C365086C4F9AE02/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.mft caRepository: rsync://rpki.apnic.net/member_repository/A918C287/7F4D1FDEBF7E11F09C365086C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 12 Nov 2025 04:17:31 +0000 Certificate not after: Sat 01 May 2038 00:00:00 +0000 Subordinate resources: AS: 45163 AS: 55471 AS: 131211 IP: 203.176.189.0/24 IP: 2001:df0:90::/48 IP: 2401:4600::/32 IP: 2401:e640::/32 Validation: Failed, certificate revoked on Thu 27 Nov 2025 01:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160936 (0x274a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 12 04:17:31 2025 GMT Not After : May 1 00:00:00 2038 GMT Subject: CN=A918C287, serialNumber=BF590A97E55DECC35033B006D0036F938F8D788C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:ea:fd:cb:b0:60:af:ef:d8:b0:41:37:9e: ba:53:07:17:73:ac:2a:31:a7:a6:d2:d8:35:4c:44: 5a:68:d7:3b:45:3e:7a:6b:45:0c:97:f7:64:47:49: a6:59:6b:e5:aa:8b:2b:38:66:4d:05:f8:ca:27:60: 02:60:ee:40:2d:4c:33:ab:5f:9c:4b:7a:04:84:a2: 71:c6:1f:2e:56:46:a4:0a:c8:e4:af:98:27:69:c2: 44:39:32:f8:59:4e:83:6b:c1:9a:53:c2:0a:1a:62: f4:88:82:16:01:16:b7:0f:7d:f8:9d:f2:35:88:81: de:0e:01:82:4f:91:d4:50:e9:4e:44:97:bd:7a:1e: 61:c5:5f:9d:27:f6:e8:52:a9:03:ac:9a:5b:b9:f3: 3e:47:af:e5:ef:da:4d:09:cc:bf:59:7f:de:03:21: 9c:c3:9d:bf:1b:91:1e:47:a5:91:62:0c:77:50:f2: 7c:2e:71:94:99:d8:00:a3:93:11:9b:dd:c3:53:19: 28:6b:f6:5c:b3:36:6c:c9:5f:8e:35:f4:c7:17:3e: aa:53:e7:ff:5e:18:76:28:1b:70:90:9c:3e:cc:20: e6:61:e1:d4:84:3c:9c:fe:b0:ff:ba:41:22:fc:a9: b3:df:ab:f9:a5:1b:08:32:2d:a7:e8:57:1e:61:a9: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:0A:97:E5:5D:EC:C3:50:33:B0:06:D0:03:6F:93:8F:8D:78:8C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C287/7F4D1FDEBF7E11F09C365086C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C287/7F4D1FDEBF7E11F09C365086C4F9AE02/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45163 55471 131211 sbgp-ipAddrBlock: critical IPv4: 203.176.189.0/24 IPv6: 2001:df0:90::/48 2401:4600::/32 2401:e640::/32 Signature Algorithm: sha256WithRSAEncryption 92:aa:28:08:da:48:79:f1:b0:70:2d:ae:bb:74:f0:d7:15:89: 28:89:7c:d7:cd:b9:0b:ea:f6:91:31:91:92:af:67:d3:0a:31: fe:be:4d:9d:c2:b4:1c:23:a7:f9:e4:4e:11:78:6f:39:86:f7: 7c:4f:0b:53:7f:60:ab:d9:44:47:82:c1:0a:4f:93:ee:c5:4e: 48:ef:74:15:d9:b2:07:a6:2d:da:04:b4:66:b1:b5:a7:70:a5: 54:28:0c:f1:fd:62:46:a8:43:07:11:53:48:ce:f1:4e:65:a9: 94:d1:b7:a0:cd:62:3c:cf:05:1f:68:c3:c7:a8:13:eb:0c:83: 2a:ac:44:98:f8:44:14:c9:b1:51:9d:f0:c1:05:21:75:e2:28: 6d:b7:f0:32:b6:26:45:66:f5:40:c7:16:ed:16:fa:5e:ec:dd: dc:08:e3:6c:c9:63:63:5b:a8:af:a4:96:4c:62:6d:3f:cf:b3: a7:24:ac:0a:6f:3f:87:c2:46:9f:0f:c2:ec:97:cb:2c:43:5f: c8:4b:15:c5:a9:d3:1c:37:be:27:93:d0:15:95:b9:c7:fd:57: 22:d1:ea:15:ef:da:0b:af:6a:39:87:7f:84:dc:04:9c:08:37: ee:4f:fc:9e:3a:48:c5:33:a5:82:26:37:06:53:86:a0:ff:2b: f9:0d:1f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIDAnSoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMjA0MTczMVoXDTM4MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEMyODcxMTAvBgNVBAUTKEJGNTkwQTk3RTU1REVDQzM1MDMzQjAw NkQwMDM2RjkzOEY4RDc4OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Aer9y7Bgr+/YsEE3nrpTBxdzrCoxp6bS2DVMRFpo1ztFPnprRQyX92RHSaZZ a+Wqiys4Zk0F+MonYAJg7kAtTDOrX5xLegSEonHGHy5WRqQKyOSvmCdpwkQ5MvhZ ToNrwZpTwgoaYvSIghYBFrcPffid8jWIgd4OAYJPkdRQ6U5El716HmHFX50n9uhS qQOsmlu58z5Hr+Xv2k0JzL9Zf94DIZzDnb8bkR5HpZFiDHdQ8nwucZSZ2ACjkxGb 3cNTGShr9lyzNmzJX4419McXPqpT5/9eGHYoG3CQnD7MIOZh4dSEPJz+sP+6QSL8 qbPfq/mlGwgyLafoVx5hqXE5AgMBAAGjggM4MIIDNDAdBgNVHQ4EFgQUv1kKl+Vd 7MNQM7AG0ANvk4+NeIwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThDMjg3LzdGNEQxRkRFQkY3RTExRjA5QzM2NTA4NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4QzI4Ny83RjREMUZERUJGN0UxMUYwOUMzNjUwODZDNEY5QUUwMi92MWtLbC1W ZDdNTlFNN0FHMEFOdms0LU5lSXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDALBrAgMA2K8CAwIAizA+BggrBgEFBQcBBwEB/wQvMC0wDAQCAAEwBgME AMuwvTAdBAIAAjAXAwcAIAEN8ACQAwUAJAFGAAMFACQB5kAwDQYJKoZIhvcNAQEL BQADggEBAJKqKAjaSHnxsHAtrrt08NcViSiJfNfNuQvq9pExkZKvZ9MKMf6+TZ3C tBwjp/nkThF4bzmG93xPC1N/YKvZREeCwQpPk+7FTkjvdBXZsgemLdoEtGaxtadw pVQoDPH9YkaoQwcRU0jO8U5lqZTRt6DNYjzPBR9ow8eoE+sMgyqsRJj4RBTJsVGd 8MEFIXXiKG238DK2JkVm9UDHFu0W+l7s3dwI42zJY2NbqK+klkxibT/Ps6ckrApv P4fCRp8PwuyXyyxDX8hLFcWp0xw3vieT0BWVucf9VyLR6hXv2guvajmHf4TcBJwI N+5P/J46SMUzpYImNwZThqD/K/kNH4g= -----END CERTIFICATE-----Generated at Sun Dec 7 18:57:14 2025 by rpki-client