This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer File: J12XgrE-mRKM008iwJ_o57XLpws.cer (raw, json) Hash identifier: F7A/pmXY9FPGQejeaaU27bd0pufMoCRnebUDPgpCo0U= Subject key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:36:23 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 49.156.192.0/18 IP: 58.3.0.0/16 IP: 61.114.128.0/19 IP: 61.203.192.0/19 IP: 103.2.4.0/22 IP: 110.54.0.0/17 IP: 114.142.0.0/17 IP: 115.124.128.0/17 IP: 116.94.0.0/16 IP: 119.47.32.0/19 IP: 119.47.128.0/17 IP: 124.150.176.0 -- 124.150.255.255 IP: 124.159.0.0/16 IP: 125.31.64.0/18 IP: 125.56.0.0/17 IP: 175.28.128.0/17 IP: 202.146.16.0/21 IP: 202.220.40.0/21 IP: 202.226.224.0/19 IP: 203.114.192.0/19 IP: 203.135.192.0/18 IP: 203.179.192.0/19 IP: 210.143.64.0/19 IP: 210.191.64.0/18 IP: 210.203.192.0/18 IP: 210.235.160.0/19 IP: 210.238.32.0/19 IP: 210.252.0.0/18 IP: 211.9.64.0/18 IP: 211.132.96.0/19 IP: 218.40.224.0/20 IP: 218.219.96.0 -- 218.219.143.255 IP: 219.99.176.0/20 IP: 222.159.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23728 (0x5cb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:36:23 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:fd:c9:cf:fb:93:98:52:f4:23:a3:e0:55: e8:c2:48:ca:65:52:06:0b:c9:69:dc:eb:16:2a:ef: b5:19:fa:a3:c6:38:94:87:f1:6c:a8:40:43:c4:e6: 4f:dc:84:33:29:d9:9c:f0:b8:7c:b1:1b:7a:d4:f1: 11:56:67:fa:dd:ba:c2:55:5f:a1:83:95:c1:96:2d: 47:07:2d:55:43:ca:f8:33:0b:70:cf:5d:68:24:18: f2:33:bc:87:cc:0f:32:0d:00:93:ef:d1:d2:20:ca: 65:f5:c8:ea:db:b6:b9:ee:f7:ec:0c:df:23:e3:5e: 39:ec:31:20:0d:a8:48:53:02:bc:84:92:9e:1d:0a: 68:d7:67:ca:3c:41:b9:61:b8:cf:fc:05:48:b6:8b: 23:a2:b1:bc:77:63:7d:67:1f:71:93:8b:e9:a3:dd: 19:d4:af:f0:99:b3:2a:8b:76:e9:ef:4d:33:7e:21: e5:b0:1e:42:a7:f8:d7:97:b1:c3:ad:6a:3e:ca:ca: 13:fa:b1:fb:5b:2c:82:b5:a9:f0:00:1c:00:9a:2f: 32:7e:8e:66:35:02:cf:0d:76:7b:f6:ee:ca:22:de: bf:8b:5c:fa:0c:47:9e:e2:0a:41:c2:5c:89:55:df: 94:68:e4:c3:23:b2:4a:50:87:3e:fc:f4:f1:43:d2: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.156.192.0/18 58.3.0.0/16 61.114.128.0/19 61.203.192.0/19 103.2.4.0/22 110.54.0.0/17 114.142.0.0/17 115.124.128.0/17 116.94.0.0/16 119.47.32.0/19 119.47.128.0/17 124.150.176.0-124.150.255.255 124.159.0.0/16 125.31.64.0/18 125.56.0.0/17 175.28.128.0/17 202.146.16.0/21 202.220.40.0/21 202.226.224.0/19 203.114.192.0/19 203.135.192.0/18 203.179.192.0/19 210.143.64.0/19 210.191.64.0/18 210.203.192.0/18 210.235.160.0/19 210.238.32.0/19 210.252.0.0/18 211.9.64.0/18 211.132.96.0/19 218.40.224.0/20 218.219.96.0-218.219.143.255 219.99.176.0/20 222.159.0.0/16 Signature Algorithm: sha256WithRSAEncryption 47:c4:1d:65:e0:3b:d6:6c:85:c1:5d:f9:55:12:9c:7f:12:2a: c3:76:9d:42:7d:2b:07:b0:fa:f4:2f:c7:5f:4e:5f:4f:a3:a9: 30:bb:d4:e1:f9:82:d2:7a:03:2e:35:fa:3b:e8:68:a8:48:9b: e4:8f:b1:ad:8f:ff:37:0f:ab:a9:92:5c:9e:f0:c3:94:3e:69: 85:a0:a6:2c:bc:63:0f:68:b1:16:b3:42:be:f6:31:ee:cb:5f: e4:06:7d:da:d0:e1:7a:b0:82:73:a9:e2:10:a6:d0:eb:01:62: 9d:ae:5f:dd:96:85:13:8b:06:ab:e6:fc:66:2d:be:37:10:19: 05:ac:5a:33:49:d9:5c:8e:64:42:9b:a6:8f:aa:d6:ae:a9:94: 12:b6:5f:f4:64:ae:69:90:c8:3d:2b:4a:48:25:6c:d5:31:5f: f0:df:5e:d6:31:81:1f:38:10:90:a1:d9:48:ac:4f:42:24:db: 10:a2:12:74:e4:ba:86:ac:28:f3:ee:8b:7b:d7:cf:08:c5:fb: 80:78:7e:0e:6d:65:60:bd:ee:86:88:a9:00:d6:6a:4a:9d:df: 23:9b:6b:2f:e0:17:6f:d9:c5:57:7b:92:37:b3:2f:c2:8a:a0: a9:c8:f3:eb:db:60:dc:3a:19:bf:21:32:ea:54:5e:48:73:61: 3c:eb:f9:c3 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgICXLAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxMzYyM1oXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoMjc1RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcw QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANH1/cnP+5OYUvQjo+BV 6MJIymVSBgvJadzrFirvtRn6o8Y4lIfxbKhAQ8TmT9yEMynZnPC4fLEbetTxEVZn +t26wlVfoYOVwZYtRwctVUPK+DMLcM9daCQY8jO8h8wPMg0Ak+/R0iDKZfXI6tu2 ue737AzfI+NeOewxIA2oSFMCvISSnh0KaNdnyjxBuWG4z/wFSLaLI6KxvHdjfWcf cZOL6aPdGdSv8JmzKot26e9NM34h5bAeQqf415exw61qPsrKE/qx+1ssgrWp8AAc AJovMn6OZjUCzw12e/buyiLev4tc+gxHnuIKQcJciVXflGjkwyOySlCHPvz08UPS st0CAwEAAaOCA1wwggNYMB0GA1UdDgQWBBQnXZeCsT6ZEozTTyLAn+jntcunCzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8yNDkvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzI0OS9KMTJYZ3JF LW1SS00wMDhpd0pfbzU3WExwd3MubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MIH0BggrBgEFBQcBBwEB/wSB5DCB4TCB3gQCAAEwgdcDBAYxnMADAwA6AwMEBT1y gAMEBT3LwAMEAmcCBAMEB242AAMEB3KOAAMEB3N8gAMDAHReAwQFdy8gAwQHdy+A MAsDBAR8lrADAwB8lgMDAHyfAwQGfR9AAwQHfTgAAwQHrxyAAwQDypIQAwQDytwo AwQFyuLgAwQFy3LAAwQGy4fAAwQFy7PAAwQF0o9AAwQG0r9AAwQG0svAAwQF0uug AwQF0u4gAwQG0vwAAwQG0wlAAwQF04RgAwQE2ijgMAwDBAXa22ADBATa24ADBATb Y7ADAwDenzANBgkqhkiG9w0BAQsFAAOCAQEAR8QdZeA71myFwV35VRKcfxIqw3ad Qn0rB7D69C/HX05fT6OpMLvU4fmC0noDLjX6O+hoqEib5I+xrY//Nw+rqZJcnvDD lD5phaCmLLxjD2ixFrNCvvYx7stf5AZ92tDherCCc6niEKbQ6wFina5f3ZaFE4sG q+b8Zi2+NxAZBaxaM0nZXI5kQpumj6rWrqmUErZf9GSuaZDIPStKSCVs1TFf8N9e 1jGBHzgQkKHZSKxPQiTbEKISdOS6hqwo8+6Le9fPCMX7gHh+Dm1lYL3uhoipANZq Sp3fI5trL+AXb9nFV3uSN7Mvwoqgqcjz69tg3DoZvyEy6lReSHNhPOv5ww== -----END CERTIFICATE-----Generated at Sat Dec 6 21:08:17 2025 by rpki-client