This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/JXco2IS3-bpoWu8ll-xxS-IjkBE.cer
File:                     JXco2IS3-bpoWu8ll-xxS-IjkBE.cer (raw, json)
Hash identifier:          oLoo1JwnJWt2PkBwJYxrBCVJYGStt3WireaFAMvA5zI=
Subject key identifier:   25:77:28:D8:84:B7:F9:BA:68:5A:EF:25:97:EC:71:4B:E2:23:90:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5FF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/JXco2IS3-bpoWu8ll-xxS-IjkBE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:31:13 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2407:d440::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24562 (0x5ff2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:31:13 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=257728D884B7F9BA685AEF2597EC714BE2239011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:b6:12:54:e8:b1:24:4b:41:a1:a8:2f:30:
                    04:f9:79:7d:be:8b:50:04:55:1c:01:cf:45:bd:8d:
                    ca:38:0e:dd:c5:4d:e8:de:95:5b:7a:64:4a:eb:05:
                    c8:d1:8d:e6:72:df:74:ff:24:4e:6a:db:0b:04:63:
                    9d:f3:ea:c8:26:0d:6e:59:f2:a6:ad:c4:52:c8:c1:
                    78:bc:e6:fa:0f:67:9e:9a:a5:59:f8:37:49:ae:87:
                    25:71:07:02:1b:4f:9a:f3:a5:a1:75:55:40:74:3c:
                    2d:29:13:7d:40:99:26:d2:08:be:fb:f7:e9:f6:2d:
                    f5:63:9a:94:d1:38:9e:96:12:89:da:e4:87:d5:7d:
                    44:9c:28:98:cc:e5:ea:8c:a4:4e:fe:f5:6b:1d:8c:
                    19:01:64:e1:74:ce:c5:b1:2b:0f:82:f1:1a:03:83:
                    e7:99:39:5f:aa:31:3a:71:fb:f0:08:32:a9:07:7a:
                    19:84:d0:13:96:0c:2c:db:a2:fb:06:bf:16:1a:8f:
                    a8:35:f9:fb:58:cc:aa:8b:9e:ef:31:3b:49:32:88:
                    c9:71:29:a9:b5:a2:37:13:8c:af:79:35:b9:26:04:
                    4a:80:c2:5c:0d:bc:ce:0f:24:8e:ae:d5:d2:dd:10:
                    af:b1:cd:c7:62:0b:38:7c:8d:20:c5:51:57:e0:82:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:28:D8:84:B7:F9:BA:68:5A:EF:25:97:EC:71:4B:E2:23:90:11
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30383/JXco2IS3-bpoWu8ll-xxS-IjkBE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:e2:c5:4f:32:52:f4:f5:a8:e6:2b:88:67:09:8b:2f:b4:c5:
         ca:6a:59:8b:e6:2b:f2:7b:df:91:21:d3:1a:55:16:7a:30:39:
         a7:31:78:7d:ad:8d:bb:d1:55:ce:28:f7:a1:ce:3f:e2:d5:a0:
         db:6b:60:f0:cd:af:83:7f:01:cc:32:18:4a:f8:e5:9c:30:b1:
         7d:a7:00:f6:37:2d:2b:96:c4:0a:bb:9a:ae:a4:8d:95:d5:e6:
         73:45:27:14:a2:b2:ce:4c:8d:a0:fb:5b:24:03:da:b0:b4:64:
         bb:3c:36:f1:6a:ae:c6:27:92:fc:ee:4a:19:eb:50:ac:43:e6:
         c7:61:38:e6:60:41:ed:a8:2f:fa:e5:88:9b:e9:b7:60:a4:43:
         24:80:f2:a1:58:b8:d0:7b:38:3e:45:de:b1:9c:f0:83:1f:84:
         a0:e0:f0:e8:e2:0f:b8:a3:ec:2a:61:ef:bf:87:fe:6e:16:4d:
         e7:53:05:9d:89:37:01:05:c9:7f:be:b7:33:8b:f5:38:92:d1:
         ed:d1:e3:70:90:ca:04:c5:e4:c4:d4:1b:3d:59:58:fa:3d:ab:
         0c:fa:f5:3f:4b:10:b4:0f:86:31:09:94:6c:ef:02:42:3b:2b:
         03:37:9a:72:f4:16:55:6e:ea:b4:ae:39:d9:0d:be:11:a8:77:
         b4:d1:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----