This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer File: x-37dX9ZS98jrdcSH12-PSWuAPw.cer (raw, json) Hash identifier: JqxoAUcyuIwKEj3SACqM7s2F+VTSfbRpVc4pGp5CjbA= Subject key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A01 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 12:24:23 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: AS: 137523 IP: 103.97.176.0/22 IP: 103.148.244.0/23 IP: 103.158.36.0/23 IP: 103.242.12.0/22 IP: 2401:89c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 01:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162305 (0x27a01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 12:24:23 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b1:16:9e:85:87:8d:64:47:69:ca:24:f6:78: 34:79:51:9a:16:30:68:08:65:c0:7a:60:2b:68:61: 50:a2:a6:0d:81:a6:94:f7:06:16:a6:89:71:27:d4: 6c:26:eb:28:92:d4:60:db:96:81:33:12:32:64:85: fa:05:25:39:4d:0f:3e:76:5f:0a:fa:3e:8d:d4:8c: fa:af:2b:f8:66:40:6b:d4:c9:e8:ef:82:b4:6b:96: 31:c9:8b:d0:7b:b8:06:8a:0f:b6:ba:74:69:f2:f4: 91:fc:40:b9:fa:57:f8:53:6c:42:27:c5:2d:db:92: db:16:da:e3:4e:aa:60:c7:08:00:db:e2:e4:8e:87: 6b:69:bf:e0:78:77:00:70:bd:ee:f1:b5:eb:c2:3e: 9e:37:51:bd:46:60:9e:37:bd:b1:10:c7:2f:d9:7d: ac:2d:79:c5:61:8b:85:00:8a:8d:55:12:a1:bd:13: cf:7e:6a:bf:16:f3:6f:ab:67:d3:ee:21:c8:e5:83: f6:0b:1e:d9:6f:59:3d:24:85:03:0e:a0:0c:12:c5: cc:c0:e6:fb:ed:33:04:ba:81:f5:b1:f3:15:d1:54: ec:7c:b3:79:65:15:82:c2:2b:37:06:80:13:4d:4f: 4f:6b:3f:a0:a3:01:5e:ab:40:6d:4f:e7:1c:a7:ae: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137523 sbgp-ipAddrBlock: critical IPv4: 103.97.176.0/22 103.148.244.0/23 103.158.36.0/23 103.242.12.0/22 IPv6: 2401:89c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:3d:a9:ad:46:f6:bc:39:f2:c6:f5:db:71:0b:fb:40:89:1f: 69:d0:17:26:2d:1c:fc:aa:2e:c1:10:d3:6c:a7:a7:39:3f:93: b6:c3:da:f6:20:7a:66:d8:b3:a9:c8:00:90:9d:7b:5b:18:91: ad:2c:51:ec:2b:73:d7:b5:e2:d8:00:52:9d:c6:ad:58:65:7c: b4:07:86:df:00:98:96:c4:56:87:b8:00:db:1a:f8:6c:85:fe: df:e4:db:a3:c6:de:62:9c:c8:fb:0f:d4:96:3e:17:1b:44:b4: 78:cf:80:8f:56:3d:71:15:ac:17:05:82:2a:18:63:4e:c8:0c: 0d:7b:a2:a4:5c:e9:85:4d:c8:83:1f:3b:79:1f:67:86:3b:54: a1:dc:f7:c8:80:75:aa:d4:9a:56:4c:ff:72:f3:95:c1:f3:c7: 8e:ce:e1:52:d7:e3:80:e0:47:82:68:a8:34:67:42:4e:94:da: e6:fb:4a:6e:9e:61:97:b4:fe:b4:4f:25:33:85:9e:95:47:d4: 05:89:3e:25:e3:32:1b:bb:f1:22:84:6d:f8:da:5c:92:08:88: ca:c0:8d:16:83:77:da:42:7a:1e:8d:e2:78:eb:f8:a9:5f:72: 86:a4:f7:29:be:07:96:f6:4b:07:e5:87:41:0e:4b:80:af:53: 64:7a:b2:93 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAnoBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTEyMjQyM1oXDTI2MTAzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcx MjFGNURCRTNEMjVBRTAwRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxsRaehYeNZEdpyiT2eDR5UZoWMGgIZcB6YCtoYVCipg2BppT3BhamiXEn1Gwm 6yiS1GDbloEzEjJkhfoFJTlNDz52Xwr6Po3UjPqvK/hmQGvUyejvgrRrljHJi9B7 uAaKD7a6dGny9JH8QLn6V/hTbEInxS3bktsW2uNOqmDHCADb4uSOh2tpv+B4dwBw ve7xtevCPp43Ub1GYJ43vbEQxy/ZfawtecVhi4UAio1VEqG9E89+ar8W82+rZ9Pu Icjlg/YLHtlvWT0khQMOoAwSxczA5vvtMwS6gfWx8xXRVOx8s3llFYLCKzcGgBNN T09rP6CjAV6rQG1P5xynriQLAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUx+37dX9Z S98jrdcSH12+PSWuAPwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY4NTc5LzAxNzYwM0ZDQ0VCMjExRUNBRTAwMTgyM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5 WlM5OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhkzMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCZ2GwAwQBZ5T0 AwQBZ54kAwQCZ/IMMA0EAgACMAcDBQAkAYnAMA0GCSqGSIb3DQEBCwUAA4IBAQAX PamtRva8OfLG9dtxC/tAiR9p0BcmLRz8qi7BENNsp6c5P5O2w9r2IHpm2LOpyACQ nXtbGJGtLFHsK3PXteLYAFKdxq1YZXy0B4bfAJiWxFaHuADbGvhshf7f5Nujxt5i nMj7D9SWPhcbRLR4z4CPVj1xFawXBYIqGGNOyAwNe6KkXOmFTciDHzt5H2eGO1Sh 3PfIgHWq1JpWTP9y85XB88eOzuFS1+OA4EeCaKg0Z0JOlNrm+0punmGXtP60TyUz hZ6VR9QFiT4l4zIbu/EihG342lySCIjKwI0Wg3faQnoejeJ46/ipX3KGpPcpvgeW 9ksH5YdBDkuAr1NkerKT -----END CERTIFICATE-----Generated at Thu Dec 4 03:35:53 2025 by rpki-client