This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
File:                     8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer (raw, json)
Hash identifier:          v0Y1cfW2qktCkRbekNkh+vV2dafQIJthyJmsbPtnx70=
Subject key identifier:   F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5E93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:35:31 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2001:df0:2440::/48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 21:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24211 (0x5e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:35:31 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:ce:ea:35:77:07:d0:20:25:24:6a:bc:17:
                    26:4b:4b:94:78:f6:9a:94:3a:1e:08:6d:62:89:6e:
                    dc:c2:65:24:d6:c9:d6:68:3d:e2:49:3a:b3:88:a3:
                    3b:f3:97:bc:4c:c8:06:63:ad:6c:86:48:66:51:23:
                    f2:ab:f9:d1:cc:0d:72:54:6d:5d:ed:b8:bc:05:89:
                    78:9b:72:97:bb:01:be:4c:fa:cc:2a:e3:f5:39:19:
                    b8:5d:54:10:68:a7:23:b5:7e:c3:34:c3:6f:01:c3:
                    d1:3b:ff:87:99:f9:7c:15:4b:b6:c4:8b:46:b9:db:
                    7b:cd:24:1c:fd:ee:1d:e0:6f:c3:84:6f:33:73:f2:
                    1c:e6:a0:00:8f:b5:ea:7e:2a:07:32:e1:4c:d8:cf:
                    8f:59:6e:5e:34:ab:82:db:14:ee:38:3f:7d:49:1b:
                    20:f2:a9:09:0a:f0:3f:0f:ba:8b:0f:84:7b:fc:7e:
                    9f:6e:02:5f:71:f9:62:ed:de:8c:75:16:fb:96:eb:
                    ab:cf:de:7d:d3:f2:d9:70:2e:cb:2e:d6:e7:6d:38:
                    03:85:71:aa:63:7b:0e:26:00:1d:b0:c8:2f:e9:83:
                    3a:6b:09:29:3d:62:41:9f:26:61:9b:74:1e:a1:12:
                    4d:7c:cc:45:00:69:a3:7a:1e:41:72:4e:05:a9:68:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2440::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:0d:36:b4:1e:51:69:f0:91:23:f7:32:d2:be:38:f2:4f:
         96:9e:36:bb:c0:27:b7:21:6a:6f:42:49:e0:70:20:a9:05:36:
         f4:85:f6:fd:5c:cd:2a:20:2c:cf:3c:65:a2:d3:2b:3b:a3:6c:
         5f:89:04:30:53:df:08:bf:e0:1f:78:86:71:0f:04:5c:fc:e7:
         9e:cf:1a:e2:56:07:7e:b5:50:a4:7b:fa:67:29:54:87:85:ad:
         a7:59:ce:4c:f0:71:5a:a5:37:30:e0:5c:ef:65:de:5f:54:4f:
         dd:d4:f1:34:93:69:cf:a7:d1:2a:93:09:70:cb:a3:3e:bf:26:
         d1:8b:4d:37:ba:53:9f:ee:a1:3f:57:b7:0d:54:d2:35:43:d0:
         cf:6c:fb:4c:a3:af:04:2d:68:d8:2c:09:2f:9e:ea:b3:04:2b:
         ac:9f:da:dc:aa:61:80:9e:3e:08:c7:65:0a:5e:b9:6c:12:3a:
         b9:78:fa:1a:eb:6f:d1:e2:0f:ea:ad:bf:3e:fe:29:ba:12:12:
         37:0b:ea:0f:67:7d:8d:15:b7:ed:3b:38:b3:2d:ca:31:28:19:
         70:80:7a:6d:e1:0b:51:b0:cd:03:b4:d7:d6:b4:bc:e3:34:fc:
         0f:e2:cf:6d:02:0a:b2:0c:97:18:85:4e:e7:1c:db:8e:a5:d0:
         53:70:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:25:57 2025 by rpki-client