This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
File: KJldaw3cIFs1lZMy0csdnYzwIoM.cer (raw, json)
Hash identifier: B+uyj1iRZ6DDnSx2DZ1ibfWSMlW1fQw8gr59lI8gNcc=
Subject key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 60FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Jan 2026 01:39:21 +0000
Certificate not after: Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources: IP: 103.28.24.0/22
IP: 122.200.32.0/22
IP: 122.255.76.0/22
IP: 203.95.24.0/21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24829 (0x60fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jan 15 01:39:21 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:96:30:35:9f:5f:51:71:39:f5:56:90:da:
78:2d:77:fd:77:2e:34:93:d1:b5:a1:89:d9:26:b6:
97:dc:9e:c1:13:aa:1f:80:bd:4d:84:af:20:57:58:
fa:c0:55:dc:5a:77:ee:45:d9:10:9e:f9:fa:00:f9:
ef:52:11:0d:00:76:c1:9d:e5:1e:4e:48:14:56:0e:
3d:b1:d7:d4:3a:7e:0b:72:2c:19:b8:cd:72:9c:b3:
28:3a:a1:15:2f:87:f9:2a:c5:2b:f9:86:63:04:93:
32:f1:b0:1d:e7:cb:d8:b8:6b:bc:d7:2b:08:38:7c:
7a:9d:6b:4a:c3:e3:98:92:e9:ef:1e:ec:a6:6c:3e:
25:5b:0f:93:0e:78:61:b2:53:f6:36:94:8a:52:65:
b4:5a:74:4a:22:e6:71:60:0f:c8:85:9c:ed:ed:0d:
10:80:11:86:0a:1f:4c:29:51:b3:b6:94:38:ef:a5:
51:89:2b:d6:ba:d5:e4:b1:a9:23:8b:d1:ee:ed:7e:
7e:81:8a:68:c9:10:99:f8:8a:75:2f:5e:e2:a0:f7:
6d:ac:48:42:a9:ab:8c:b7:5f:97:ad:0a:c4:fb:21:
c9:54:9e:db:0b:5b:bb:cb:a2:7a:17:2a:25:13:31:
6c:66:67:e8:74:46:d2:6c:c5:9d:cd:23:f1:79:c6:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.24.0/22
122.200.32.0/22
122.255.76.0/22
203.95.24.0/21
Signature Algorithm: sha256WithRSAEncryption
84:79:60:55:ac:94:92:a6:6a:c3:7b:38:90:8f:fd:f2:3a:b0:
f2:6f:c9:ad:44:19:eb:39:8c:1d:43:f9:99:1c:b8:c1:80:cd:
c0:8d:8a:3b:b8:a1:75:bb:76:70:f8:02:8a:fe:6c:7e:4a:04:
08:18:a6:f8:93:f3:7d:d5:1e:6e:98:4b:d8:60:2f:90:ab:bc:
ef:36:f8:8a:f2:e6:f4:00:47:1a:aa:72:d6:04:21:8f:dd:dc:
58:92:4c:13:5a:29:48:2e:47:02:01:1c:2e:9e:6a:07:28:a6:
ed:66:87:b7:95:8b:8f:ca:f6:ba:6a:8d:76:e4:23:ab:23:3f:
e1:84:76:6a:5c:7e:d5:2b:01:61:17:85:1a:e6:23:0c:cb:29:
19:7b:ab:cb:6b:c9:bd:7b:53:0e:61:73:02:e9:e0:14:dd:77:
1b:8f:ba:42:bb:3c:c6:c0:7e:08:71:56:34:52:bb:82:7d:5c:
e6:a0:5a:c4:4a:64:f2:f6:eb:51:18:8a:70:c2:25:09:3d:10:
b3:d9:c7:0f:97:73:af:52:c2:48:f9:e8:b2:6f:65:7d:44:11:
ee:12:b9:7b:52:04:87:7c:ec:da:8f:71:21:fe:ee:24:0a:c8:
1c:1e:2d:d9:4f:d6:29:14:c7:8c:56:af:2f:f1:4d:6e:4c:b0:
63:77:97:3a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICYP0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDExNTAxMzkyMVoXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoMjg5OTVENkIwRERDMjA1QjM1OTU5MzMyRDFDQjFEOUQ4Q0YwMjI4
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvgljA1n19RcTn1VpDa
eC13/XcuNJPRtaGJ2Sa2l9yewROqH4C9TYSvIFdY+sBV3Fp37kXZEJ75+gD571IR
DQB2wZ3lHk5IFFYOPbHX1Dp+C3IsGbjNcpyzKDqhFS+H+SrFK/mGYwSTMvGwHefL
2LhrvNcrCDh8ep1rSsPjmJLp7x7spmw+JVsPkw54YbJT9jaUilJltFp0SiLmcWAP
yIWc7e0NEIARhgofTClRs7aUOO+lUYkr1rrV5LGpI4vR7u1+foGKaMkQmfiKdS9e
4qD3baxIQqmrjLdfl60KxPshyVSe2wtbu8uiehcqJRMxbGZn6HRG0mzFnc0j8XnG
cvkCAwEAAaOCAp0wggKZMB0GA1UdDgQWBBQomV1rDdwgWzWVkzLRyx2djPAigzAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMTA2MDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzEwNjAyL0tK
bGRhdzNjSUZzMWxaTXkwY3Nkbll6d0lvTS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAJnHBgDBAJ6yCADBAJ6
/0wDBAPLXxgwDQYJKoZIhvcNAQELBQADggEBAIR5YFWslJKmasN7OJCP/fI6sPJv
ya1EGes5jB1D+ZkcuMGAzcCNiju4oXW7dnD4Aor+bH5KBAgYpviT833VHm6YS9hg
L5CrvO82+Iry5vQARxqqctYEIY/d3FiSTBNaKUguRwIBHC6eagcopu1mh7eVi4/K
9rpqjXbkI6sjP+GEdmpcftUrAWEXhRrmIwzLKRl7q8tryb17Uw5hcwLp4BTddxuP
ukK7PMbAfghxVjRSu4J9XOagWsRKZPL261EYinDCJQk9ELPZxw+Xc69Swkj56LJv
ZX1EEe4SuXtSBId87NqPcSH+7iQKyBweLdlP1ikUx4xWry/xTW5MsGN3lzo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:39 2026 by rpki-client