This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
File:                     -u9X_xRNJQlORg4P04yAN5M07W0.cer (raw, json)
Hash identifier:          gRIfSKZtpjXVZ3jPorPfqHsUzQtGarHhcR6tgBKT8ow=
Subject key identifier:   FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       60AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:36:44 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 61.245.112.0/21
                          IP: 103.198.212.0/22
                          IP: 182.50.164.0/22
                          IP: 202.88.192.0/21
                          IP: 202.127.80.0/20
                          IP: 219.100.184.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24746 (0x60aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:36:44 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:e8:fa:53:fe:c6:63:ff:c6:1e:a5:a7:3c:
                    5b:bd:dc:77:ee:10:75:e4:a9:1a:35:2b:83:5a:b7:
                    2a:60:39:d3:07:ed:e8:56:e9:b2:34:51:53:da:5a:
                    54:39:2a:05:0d:8d:05:9d:14:4b:d6:0a:51:d1:43:
                    78:4e:c2:bd:8b:13:c9:f7:17:9d:ec:79:18:73:14:
                    16:38:a0:c7:86:5f:99:16:85:56:93:4c:55:6b:67:
                    5e:cb:77:85:44:95:ca:1b:5d:51:43:ff:e7:3a:e6:
                    ab:0f:95:09:cc:bb:73:e7:e2:c8:a2:69:75:2e:5b:
                    68:60:77:e9:f8:5b:7a:f7:08:50:c1:b1:d6:46:b3:
                    e3:b6:db:93:5a:0a:99:2a:a7:9f:fd:eb:ee:b5:57:
                    ec:12:db:74:2f:3e:79:d8:73:30:46:b5:48:1a:23:
                    c5:34:ed:76:39:00:c9:25:10:fe:3c:17:a9:03:ce:
                    1f:48:f8:fa:6e:56:9a:07:45:8a:fe:44:9b:8f:28:
                    77:a7:ca:60:d1:09:81:85:3f:e0:bd:0a:4e:cf:36:
                    0f:b7:4d:6a:6f:d4:9e:ed:26:6d:60:93:c7:98:04:
                    84:4f:08:70:dd:a5:23:2d:80:67:26:e7:d8:b1:d4:
                    23:02:35:36:67:aa:33:5c:13:57:8b:59:02:ac:e8:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.112.0/21
                  103.198.212.0/22
                  182.50.164.0/22
                  202.88.192.0/21
                  202.127.80.0/20
                  219.100.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:73:02:c3:96:c5:45:f8:9c:c1:5a:92:66:2f:57:43:ce:b1:
         87:77:1d:45:0d:77:da:9b:f9:5f:f2:22:f7:54:4a:13:22:e9:
         a3:5a:87:1b:89:a4:79:b3:88:f2:12:ea:ec:41:7b:66:38:e5:
         05:14:88:13:8a:af:91:53:cc:8e:90:7d:fe:ae:f9:29:bb:ff:
         08:cf:61:72:7a:00:b3:96:4e:e5:06:b3:1f:28:05:23:17:f2:
         1a:dc:0f:7f:4b:8f:2e:c0:40:d2:28:a7:8d:37:ff:88:a2:2b:
         47:c7:26:e6:28:b4:4e:46:a8:80:b7:92:9c:a1:2b:4f:b6:11:
         ea:55:56:3e:83:ef:1a:62:70:59:3d:8e:ea:28:dd:17:59:40:
         1c:ae:b3:c6:95:14:b7:64:b0:70:fa:e5:9b:79:8e:79:b6:58:
         c0:5c:fc:aa:9d:98:a2:e0:32:be:1b:0e:11:f7:1a:97:e6:b9:
         4d:0d:c7:5d:db:23:e3:25:3f:5a:33:87:2e:58:d6:29:35:d3:
         70:08:a8:d1:a1:02:ab:f7:5f:5b:6a:fe:c4:14:b1:34:c1:26:
         a9:96:47:99:34:19:e3:11:a5:8b:5f:c3:6e:71:3e:44:7e:a9:
         ce:2a:94:0f:16:bd:69:4e:3d:da:c7:68:af:c9:7a:b1:16:41:
         3f:5e:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:46:12 2026 by rpki-client