This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
File:                     1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer (raw, json)
Hash identifier:          bS+ucb3VPHaPIQWSDE/3GXbbOk6E4H05JY6n/4fl5nk=
Subject key identifier:   D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       143D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:32:42 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 157.70.224.0/20
                          IP: 157.120.64.0 -- 157.120.111.255
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5181 (0x143d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Jan 15 01:32:42 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:92:16:0e:15:2d:7d:d7:e2:e8:5a:e4:a5:
                    05:c3:5a:1d:04:72:af:cb:5e:d5:d9:71:96:75:ea:
                    f3:1e:9d:d7:33:1c:87:bf:01:cb:d6:5d:70:8a:16:
                    3b:80:55:39:6f:fa:a2:6a:0d:fa:73:08:db:00:b8:
                    91:dd:24:5d:75:0c:11:ea:d0:50:aa:7e:74:73:d0:
                    ff:48:9c:69:1e:85:cf:9c:a5:bd:8e:97:22:56:b7:
                    bb:85:2e:29:67:10:cb:4c:35:4c:29:77:f6:54:f9:
                    08:f0:cc:c6:0f:67:02:9c:39:d6:a1:d7:6b:54:2a:
                    34:4e:a7:62:de:7b:06:92:8b:3b:37:45:d0:32:80:
                    74:b7:e2:e0:89:00:34:81:4a:34:90:f5:75:4e:cf:
                    ce:f7:cc:44:d6:d7:d2:d2:17:26:6a:18:0d:d8:60:
                    2e:2a:6f:f1:fb:65:06:54:b5:8d:f1:58:5f:c0:a3:
                    d5:d3:d4:5f:9f:8f:56:5e:4f:23:be:5c:1e:58:d9:
                    c3:fa:9e:21:79:e8:86:64:39:2f:54:25:d5:f6:ef:
                    1d:58:1b:38:49:98:fe:41:5b:93:9e:83:e7:a4:95:
                    12:fd:25:ff:b6:07:6d:9d:2c:88:12:97:48:28:23:
                    c7:29:59:e1:97:b2:c9:d7:b4:81:3e:7d:84:2c:9d:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.224.0/20
                  157.120.64.0-157.120.111.255

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:af:f8:3e:ec:6c:83:2f:d5:54:94:fa:37:81:c6:ea:11:
         64:94:20:10:d1:07:dc:c8:8f:d9:65:d1:08:7c:5c:1f:56:43:
         3e:84:a9:cb:a9:37:c5:59:c6:f7:53:1f:f9:3f:94:ea:14:82:
         c6:6e:95:c2:c8:4a:41:4a:c0:bf:6f:60:cc:a1:b9:16:80:93:
         ba:39:12:e2:ce:08:08:31:a8:99:b9:c8:c3:45:16:ca:1c:e7:
         3b:c6:d7:1c:b9:ba:79:ff:52:e0:b6:a6:24:ce:38:18:04:bb:
         e2:ba:6f:12:5b:f4:5d:ae:e1:8b:84:4a:bf:d9:56:26:fa:8f:
         ea:b1:65:35:24:1a:dc:27:ba:9c:bd:1e:e6:74:2b:e0:9d:3c:
         f3:21:1b:25:b7:f9:63:3c:a1:eb:64:2a:da:59:3f:8f:66:56:
         49:7a:a7:37:91:bc:d7:c5:10:3a:a1:a4:ba:d6:b8:f4:c5:32:
         a5:f8:4c:df:f5:36:86:fa:be:cc:b6:43:44:6d:c9:4a:ba:10:
         7d:b4:eb:ea:a3:fb:2d:85:ba:45:70:93:6f:59:4f:db:da:ec:
         e5:97:c5:ad:1d:05:0c:3f:7a:1f:3c:6b:dc:b5:0c:9a:82:4a:
         e5:4b:ce:61:85:61:92:9f:eb:d7:69:2d:fb:72:1e:72:bf:2a:
         32:df:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:23:40 2026 by rpki-client