This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
File: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer (raw, json)
Hash identifier: bS+ucb3VPHaPIQWSDE/3GXbbOk6E4H05JY6n/4fl5nk=
Subject key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial: 143D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Jan 2026 01:32:42 +0000
Certificate not after: Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources: IP: 157.70.224.0/20
IP: 157.120.64.0 -- 157.120.111.255
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5181 (0x143d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Validity
Not Before: Jan 15 01:32:42 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:92:16:0e:15:2d:7d:d7:e2:e8:5a:e4:a5:
05:c3:5a:1d:04:72:af:cb:5e:d5:d9:71:96:75:ea:
f3:1e:9d:d7:33:1c:87:bf:01:cb:d6:5d:70:8a:16:
3b:80:55:39:6f:fa:a2:6a:0d:fa:73:08:db:00:b8:
91:dd:24:5d:75:0c:11:ea:d0:50:aa:7e:74:73:d0:
ff:48:9c:69:1e:85:cf:9c:a5:bd:8e:97:22:56:b7:
bb:85:2e:29:67:10:cb:4c:35:4c:29:77:f6:54:f9:
08:f0:cc:c6:0f:67:02:9c:39:d6:a1:d7:6b:54:2a:
34:4e:a7:62:de:7b:06:92:8b:3b:37:45:d0:32:80:
74:b7:e2:e0:89:00:34:81:4a:34:90:f5:75:4e:cf:
ce:f7:cc:44:d6:d7:d2:d2:17:26:6a:18:0d:d8:60:
2e:2a:6f:f1:fb:65:06:54:b5:8d:f1:58:5f:c0:a3:
d5:d3:d4:5f:9f:8f:56:5e:4f:23:be:5c:1e:58:d9:
c3:fa:9e:21:79:e8:86:64:39:2f:54:25:d5:f6:ef:
1d:58:1b:38:49:98:fe:41:5b:93:9e:83:e7:a4:95:
12:fd:25:ff:b6:07:6d:9d:2c:88:12:97:48:28:23:
c7:29:59:e1:97:b2:c9:d7:b4:81:3e:7d:84:2c:9d:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
X509v3 Authority Key Identifier:
keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.70.224.0/20
157.120.64.0-157.120.111.255
Signature Algorithm: sha256WithRSAEncryption
3d:fe:af:f8:3e:ec:6c:83:2f:d5:54:94:fa:37:81:c6:ea:11:
64:94:20:10:d1:07:dc:c8:8f:d9:65:d1:08:7c:5c:1f:56:43:
3e:84:a9:cb:a9:37:c5:59:c6:f7:53:1f:f9:3f:94:ea:14:82:
c6:6e:95:c2:c8:4a:41:4a:c0:bf:6f:60:cc:a1:b9:16:80:93:
ba:39:12:e2:ce:08:08:31:a8:99:b9:c8:c3:45:16:ca:1c:e7:
3b:c6:d7:1c:b9:ba:79:ff:52:e0:b6:a6:24:ce:38:18:04:bb:
e2:ba:6f:12:5b:f4:5d:ae:e1:8b:84:4a:bf:d9:56:26:fa:8f:
ea:b1:65:35:24:1a:dc:27:ba:9c:bd:1e:e6:74:2b:e0:9d:3c:
f3:21:1b:25:b7:f9:63:3c:a1:eb:64:2a:da:59:3f:8f:66:56:
49:7a:a7:37:91:bc:d7:c5:10:3a:a1:a4:ba:d6:b8:f4:c5:32:
a5:f8:4c:df:f5:36:86:fa:be:cc:b6:43:44:6d:c9:4a:ba:10:
7d:b4:eb:ea:a3:fb:2d:85:ba:45:70:93:6f:59:4f:db:da:ec:
e5:97:c5:ad:1d:05:0c:3f:7a:1f:3c:6b:dc:b5:0c:9a:82:4a:
e5:4b:ce:61:85:61:92:9f:eb:d7:69:2d:fb:72:1e:72:bf:2a:
32:df:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:23:40 2026 by rpki-client