This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
File:                     BQQBx4i1abPUQAQXMOKKmR9AGNI.cer (raw, json)
Hash identifier:          GA6urYTaw/LI1/GuQ6B5tlT3OsHdP4v8MJ7n4dfC/lM=
Subject key identifier:   05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       61A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:44:12 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 103.211.72.0/22
                          IP: 124.240.224.0/19
                          IP: 180.94.240.0/20
                          IP: 202.163.160.0/19
                          IP: 202.226.104.0/23
                          IP: 202.238.0.0/20
                          IP: 210.79.192.0/20
                          IP: 220.208.128.0/18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24997 (0x61a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:44:12 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=050401C788B569B3D440041730E28A991F4018D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:51:d2:86:3a:b3:a0:ae:d6:5b:31:a2:fd:
                    0b:c8:25:4e:5c:73:1c:e3:ce:17:1e:aa:11:33:54:
                    dc:02:47:99:e0:73:d9:69:9c:d3:06:73:47:c4:40:
                    12:94:b7:1f:21:66:92:1d:e4:dc:fc:37:c2:aa:d8:
                    11:09:fd:71:4d:b2:22:b9:08:a7:77:a9:6e:70:37:
                    eb:3d:94:83:39:09:06:75:13:1c:0c:76:31:c6:71:
                    9e:ea:28:0a:a0:29:86:8c:eb:cc:9b:85:dc:90:d6:
                    39:9c:33:0c:bd:95:de:d4:7d:ff:f8:a6:e8:56:51:
                    7a:7e:94:d9:95:9d:85:c7:f1:0c:10:e7:20:46:34:
                    8b:ff:20:ee:5d:20:88:e6:55:25:48:97:af:95:ef:
                    a2:5b:3a:6d:1b:e4:6f:c2:38:83:cf:d1:47:4a:5f:
                    cc:09:c5:37:9a:de:fd:5e:0b:45:c9:81:31:44:a7:
                    3b:86:e7:bf:ae:6b:d6:c8:d1:08:c3:30:c4:03:c0:
                    5e:8e:c5:ee:fa:a7:08:8a:f2:a2:04:23:e5:d6:04:
                    23:78:2c:fb:8e:e9:2f:d3:48:10:f1:e7:dd:ab:32:
                    57:82:dd:6c:68:11:a7:0f:fe:b3:2d:e5:06:c8:35:
                    24:66:49:c0:fa:19:39:0c:ac:62:d3:82:bf:30:94:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.72.0/22
                  124.240.224.0/19
                  180.94.240.0/20
                  202.163.160.0/19
                  202.226.104.0/23
                  202.238.0.0/20
                  210.79.192.0/20
                  220.208.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2b:6e:25:15:35:38:2e:1f:4c:ae:93:01:6f:48:f3:4f:71:ab:
         0e:6d:a1:52:10:d8:41:d0:cf:78:49:97:62:c8:f1:b8:1e:73:
         e9:f2:c1:a8:13:6b:a4:16:1e:43:d3:08:28:df:cf:3e:8d:54:
         50:94:59:09:eb:a5:29:1d:06:80:30:6d:c2:3e:49:40:09:78:
         21:73:5b:27:b6:b4:35:d7:80:3a:13:c1:d8:90:5b:27:1e:7f:
         60:99:bc:c1:0b:ce:89:41:e2:af:b8:5f:7b:47:dc:7c:d5:3d:
         83:1c:0c:ab:7f:c6:db:86:4f:fd:fc:1f:c3:57:14:f0:c0:87:
         ea:e5:d4:96:3c:65:36:4d:d2:fb:88:de:d2:20:ae:eb:a6:68:
         33:71:26:b8:05:77:ac:3a:a1:9a:e9:33:5e:12:a5:aa:d4:24:
         30:5d:bc:0e:3e:7d:dd:78:df:71:c7:25:51:ae:cc:84:19:11:
         e9:20:e0:c4:2c:b8:a9:60:25:7d:8e:5a:85:35:34:56:93:c4:
         b9:e2:49:f4:33:d2:3e:53:18:16:01:3b:00:5d:06:3f:15:ad:
         fa:6e:96:e9:7d:1e:da:6d:3e:70:c7:88:85:65:67:57:c6:a2:
         5d:24:71:86:7f:8f:e2:43:41:a1:ba:53:a6:b0:00:bd:2e:42:
         4f:3f:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:42 2026 by rpki-client