This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9hM65Yv3N_GdHXkc-luOk9VsfDk.cer
File:                     9hM65Yv3N_GdHXkc-luOk9VsfDk.cer (raw, json)
Hash identifier:          bKEZn8syolBNF+kmKTt4VK4ux31scJwIwJlTd+uUJmQ=
Subject key identifier:   F6:13:3A:E5:8B:F7:37:F1:9D:1D:79:1C:FA:5B:8E:93:D5:6C:7C:39
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5FF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/9hM65Yv3N_GdHXkc-luOk9VsfDk.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:31:20 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2401:a240::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24566 (0x5ff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:31:20 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=F6133AE58BF737F19D1D791CFA5B8E93D56C7C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:dd:0e:c9:0a:f3:16:29:a2:65:91:03:11:
                    c2:e6:eb:6c:6d:2b:1b:9b:90:75:5e:17:a2:77:e2:
                    20:e1:c7:fe:7d:7e:96:33:f1:1a:7a:f0:ac:da:b3:
                    b5:d2:04:6c:0d:3f:67:d6:b8:e9:75:07:da:38:c5:
                    29:1b:16:92:ea:4c:f8:83:50:2f:eb:5b:df:96:02:
                    9e:09:8a:15:19:2a:b8:49:ea:94:ee:b9:7f:c7:8b:
                    e5:52:c0:1e:15:19:82:a7:8d:98:6b:63:32:68:4f:
                    5a:36:1a:94:16:7d:67:34:90:25:15:91:6b:38:8c:
                    61:16:a1:8d:44:68:c3:1d:18:ef:ed:fb:25:fb:ed:
                    9a:99:fb:f3:f9:c4:72:36:fd:4d:58:34:4c:7c:4a:
                    72:f0:9b:e3:6b:de:7f:5a:e7:f5:3a:b6:71:c9:cb:
                    ac:0d:26:d8:2d:34:6b:8c:07:31:a3:c2:3d:09:05:
                    4b:0b:52:8d:0a:a8:bc:4d:30:93:d9:ed:bc:41:3e:
                    6c:f0:1f:c9:6c:dd:3e:0c:fa:7b:0c:d0:42:b4:d1:
                    e2:01:08:31:c8:8c:68:06:03:99:74:bc:e8:4a:2f:
                    e8:12:eb:56:62:68:9f:6f:78:51:f5:c4:df:56:b8:
                    d2:ed:c8:ae:fa:b5:18:b4:8f:59:8a:62:33:da:2b:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:13:3A:E5:8B:F7:37:F1:9D:1D:79:1C:FA:5B:8E:93:D5:6C:7C:39
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/9hM65Yv3N_GdHXkc-luOk9VsfDk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a240::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:b6:af:e6:0c:5a:05:ec:a6:e1:6c:e2:a3:ba:3e:49:28:97:
         93:0d:40:f2:66:9e:e6:65:9d:42:fe:2c:55:09:26:84:7f:b7:
         d3:14:e5:64:2a:b7:e2:14:c1:e3:ed:68:e9:f4:ef:49:6c:8f:
         dc:b4:ae:a4:76:23:a8:28:f4:f1:3a:05:4e:6e:6c:9d:a7:f8:
         c5:c3:a4:33:06:76:7e:a9:d4:bc:c5:b7:95:28:c1:7b:75:ef:
         14:73:fe:17:e2:c7:64:a6:ea:57:cb:31:3f:1c:af:d5:d0:cb:
         1a:33:05:13:ac:e8:1d:d9:1a:92:66:04:4b:ca:e2:5a:c6:46:
         47:40:e9:2e:9e:90:70:da:db:e2:58:a2:80:ea:7e:05:d7:a0:
         05:8f:35:91:6e:6f:3f:88:47:38:71:81:98:70:4e:c7:bc:5c:
         15:02:57:aa:45:b6:c5:03:02:9a:41:ae:c0:54:5f:3a:fa:5f:
         bc:38:8d:90:f9:05:89:b7:81:7f:b6:df:0c:12:32:a6:ea:2e:
         95:83:5b:22:b3:6c:5b:de:38:26:a9:c4:fa:11:10:27:9b:4f:
         a2:c0:13:41:99:f2:5b:38:60:5b:f2:58:83:8b:bc:02:e1:57:
         94:11:6b:2d:59:bc:fb:aa:3f:36:7d:db:5c:18:24:dc:48:ae:
         7d:ef:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:24 2026 by rpki-client