This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
File:                     CE-I2DeiohMuqPb48tuCwcHpCos.cer (raw, json)
Hash identifier:          mNItPPF4Tvf+q8ntfcaX0TAkbhiOw/UxTQJ/Bn0JwLc=
Subject key identifier:   08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       60B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:37:00 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 103.92.228.0/22
                          IP: 118.82.48.0/20
                          IP: 123.0.64.0/18
                          IP: 183.91.96.0/19
                          IP: 202.151.96.0/19
                          IP: 202.231.176.0/20
                          IP: 210.251.176.0/20
                          IP: 219.100.108.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24757 (0x60b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:37:00 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:31:c3:5e:a3:9c:9d:ae:6b:85:7d:ff:bb:
                    73:7e:a3:ae:a1:fd:a7:5a:ed:1b:b4:ca:b9:7d:77:
                    bb:9e:10:80:c7:86:21:55:48:ec:9a:7d:8a:53:01:
                    48:bc:8e:69:6c:76:c0:5a:9e:1f:d1:85:9b:0d:f4:
                    0a:1c:7d:f7:7f:17:78:ac:6c:68:4f:00:ff:1f:b7:
                    6b:32:e3:ec:f7:63:05:e6:5a:52:0c:b3:40:f4:44:
                    1a:9f:bc:5a:4c:78:a6:b1:48:a2:a2:b0:61:17:95:
                    9a:cd:b2:78:4f:d8:7b:93:6e:28:75:9a:f6:a9:7c:
                    39:c9:fc:77:30:45:3b:b1:ea:b4:7a:ea:f9:61:b1:
                    d1:79:0f:0e:ff:2a:2d:b5:db:fb:27:c2:3b:32:07:
                    9e:ea:5b:c9:9c:46:bc:63:88:77:9f:20:f5:a7:82:
                    12:0b:f2:84:e3:d8:4b:62:5b:75:0b:05:1c:dd:3f:
                    05:38:80:7a:b0:b9:cc:62:9b:b9:f3:d9:d2:c0:2f:
                    ba:f7:1e:e4:c0:80:ae:04:5d:c6:bd:58:01:6d:e8:
                    ae:b6:3b:25:c4:4a:57:9f:35:fe:88:3e:81:dc:20:
                    91:88:86:2e:a8:41:6d:d5:d5:58:b5:63:91:96:b2:
                    f5:3a:97:36:01:73:f7:ce:9a:82:9f:01:85:44:7e:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.228.0/22
                  118.82.48.0/20
                  123.0.64.0/18
                  183.91.96.0/19
                  202.151.96.0/19
                  202.231.176.0/20
                  210.251.176.0/20
                  219.100.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:bf:29:fc:16:13:81:5a:e3:db:01:67:dc:a1:7c:14:0f:
         89:c9:2c:dc:e5:94:86:53:01:ac:82:71:b0:74:e1:b1:a5:aa:
         2d:9d:b2:c7:68:64:fe:d1:83:f7:6a:e7:06:61:2a:db:b2:6b:
         28:71:be:4b:bc:4f:6d:3d:1c:d2:84:a8:46:da:d0:62:85:70:
         42:ea:f4:df:58:8c:ec:48:f8:47:6f:6b:84:66:bb:93:5e:da:
         44:fa:c2:53:4e:84:0f:5f:17:2a:f9:69:a4:6b:17:e7:46:a4:
         ac:0b:d9:c3:cd:c8:b9:60:25:a1:3b:c0:df:77:e7:5a:f7:50:
         4f:ba:20:ea:8e:68:48:00:44:b6:dd:0e:ec:3e:65:ba:26:52:
         81:27:80:84:7e:f0:7c:3e:7a:a7:77:92:0a:fa:67:06:19:2f:
         45:cc:86:3f:f6:c7:b5:4d:28:42:12:18:2b:84:82:bc:a7:9a:
         3d:3e:e9:19:0e:ec:c2:25:07:10:9c:00:45:18:e4:82:7c:09:
         c9:1c:ce:d1:70:d7:1d:7d:1b:23:85:60:25:cc:f7:b9:fe:1c:
         07:fa:85:6c:a4:c4:9a:a0:9c:50:91:49:1d:5e:e0:7a:62:75:
         50:b0:8c:54:bc:27:ba:04:81:3a:4e:b1:55:12:d4:2d:4b:00:
         7e:26:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:42:56 2026 by rpki-client