This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer
File:                     7cCFCE-PE9kijJTC0vmDNjQeNz8.cer (raw, json)
Hash identifier:          NP2ptVOcMgieNp1iDkDFZMCqoEtgBK7fyBoN6S4GlFc=
Subject key identifier:   ED:C0:85:08:4F:8F:13:D9:22:8C:94:C2:D2:F9:83:36:34:1E:37:3F
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       61BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:45:00 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2406:9900::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25020 (0x61bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:45:00 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=EDC085084F8F13D9228C94C2D2F98336341E373F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:e4:c4:80:60:6b:6b:c0:02:f8:80:26:54:
                    aa:35:18:40:54:74:db:9a:ad:4b:6a:06:c3:55:15:
                    f1:bb:bc:40:f6:92:6a:1a:25:80:03:c8:95:ce:ec:
                    bf:c2:5b:d6:07:86:7b:2f:12:6c:34:b1:b2:98:b9:
                    5e:2e:1b:21:2d:04:31:68:48:59:8c:b8:72:42:7a:
                    b1:b1:07:1a:29:49:db:ad:95:5b:a3:96:78:6b:49:
                    8d:82:15:ce:f9:82:04:3d:ed:4c:df:80:ed:bb:d4:
                    e5:74:0d:63:6e:86:fc:da:4a:e8:a0:fd:b8:6f:42:
                    81:34:2f:65:40:4e:04:e3:5d:14:63:e7:13:54:10:
                    3a:9b:b2:47:69:d0:b1:c4:17:03:3d:9c:d0:e0:81:
                    a4:3b:65:a6:bf:da:f2:7c:01:f0:25:e6:26:c2:9e:
                    a0:59:9b:70:f0:08:b6:82:9c:7c:2e:63:3c:77:71:
                    c1:67:18:99:69:b6:91:67:7e:31:d9:9d:ab:84:aa:
                    7a:b5:00:1f:bf:3c:2e:71:09:32:d3:08:e1:22:0e:
                    c9:09:60:4e:6b:d1:ef:51:39:e4:1c:74:4b:48:25:
                    a6:73:3e:cb:c5:a9:1b:9f:b7:f4:85:ef:53:b4:08:
                    c3:14:86:36:c7:78:de:45:bf:05:14:c1:22:a9:3e:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C0:85:08:4F:8F:13:D9:22:8C:94:C2:D2:F9:83:36:34:1E:37:3F
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9900::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:7f:89:10:d7:9e:4e:e7:8e:00:0b:c9:f3:6b:7e:7a:42:
         a6:0e:e1:3b:53:6b:49:98:84:25:8a:e3:03:1f:5e:52:35:8f:
         b5:11:cc:d3:a5:c9:93:50:80:1f:f2:13:ec:e9:4f:3e:bb:a2:
         2a:a6:74:fe:5b:78:84:1e:36:ee:75:d0:59:74:e3:0a:74:81:
         ef:af:5a:7a:af:f0:a9:3a:1f:ba:50:b1:35:82:0f:57:05:d4:
         f9:23:67:b9:84:ed:64:66:bc:8f:0f:0c:b8:d3:56:0b:f4:20:
         48:c7:fe:ea:46:4f:bd:25:d4:1b:a7:67:3c:ae:89:c0:12:29:
         38:42:36:e9:ae:e6:96:d4:e2:73:63:0d:7e:ea:37:77:4d:6c:
         59:2f:af:a0:92:6f:fb:6f:7c:4c:c0:5c:f2:94:3a:12:f3:a8:
         3d:78:59:28:3c:4c:b4:ae:ce:f9:a6:25:55:9e:c9:95:03:aa:
         fb:41:1d:98:77:25:39:fc:08:b6:6c:c0:4f:7d:f2:c7:d8:b6:
         c4:57:27:90:60:ce:4a:a3:b2:74:95:40:cd:59:58:de:a3:e7:
         86:29:bc:02:54:5d:e5:c3:7a:09:8f:a3:e0:43:fc:55:e7:6f:
         25:0c:da:34:63:61:fb:76:37:df:37:d6:b9:c4:52:e7:ee:46:
         fc:4a:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:26:19 2026 by rpki-client