This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
File:                     KJldaw3cIFs1lZMy0csdnYzwIoM.cer (raw, json)
Hash identifier:          B+uyj1iRZ6DDnSx2DZ1ibfWSMlW1fQw8gr59lI8gNcc=
Subject key identifier:   28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       60FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:39:21 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 103.28.24.0/22
                          IP: 122.200.32.0/22
                          IP: 122.255.76.0/22
                          IP: 203.95.24.0/21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24829 (0x60fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:39:21 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:96:30:35:9f:5f:51:71:39:f5:56:90:da:
                    78:2d:77:fd:77:2e:34:93:d1:b5:a1:89:d9:26:b6:
                    97:dc:9e:c1:13:aa:1f:80:bd:4d:84:af:20:57:58:
                    fa:c0:55:dc:5a:77:ee:45:d9:10:9e:f9:fa:00:f9:
                    ef:52:11:0d:00:76:c1:9d:e5:1e:4e:48:14:56:0e:
                    3d:b1:d7:d4:3a:7e:0b:72:2c:19:b8:cd:72:9c:b3:
                    28:3a:a1:15:2f:87:f9:2a:c5:2b:f9:86:63:04:93:
                    32:f1:b0:1d:e7:cb:d8:b8:6b:bc:d7:2b:08:38:7c:
                    7a:9d:6b:4a:c3:e3:98:92:e9:ef:1e:ec:a6:6c:3e:
                    25:5b:0f:93:0e:78:61:b2:53:f6:36:94:8a:52:65:
                    b4:5a:74:4a:22:e6:71:60:0f:c8:85:9c:ed:ed:0d:
                    10:80:11:86:0a:1f:4c:29:51:b3:b6:94:38:ef:a5:
                    51:89:2b:d6:ba:d5:e4:b1:a9:23:8b:d1:ee:ed:7e:
                    7e:81:8a:68:c9:10:99:f8:8a:75:2f:5e:e2:a0:f7:
                    6d:ac:48:42:a9:ab:8c:b7:5f:97:ad:0a:c4:fb:21:
                    c9:54:9e:db:0b:5b:bb:cb:a2:7a:17:2a:25:13:31:
                    6c:66:67:e8:74:46:d2:6c:c5:9d:cd:23:f1:79:c6:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.24.0/22
                  122.200.32.0/22
                  122.255.76.0/22
                  203.95.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:79:60:55:ac:94:92:a6:6a:c3:7b:38:90:8f:fd:f2:3a:b0:
         f2:6f:c9:ad:44:19:eb:39:8c:1d:43:f9:99:1c:b8:c1:80:cd:
         c0:8d:8a:3b:b8:a1:75:bb:76:70:f8:02:8a:fe:6c:7e:4a:04:
         08:18:a6:f8:93:f3:7d:d5:1e:6e:98:4b:d8:60:2f:90:ab:bc:
         ef:36:f8:8a:f2:e6:f4:00:47:1a:aa:72:d6:04:21:8f:dd:dc:
         58:92:4c:13:5a:29:48:2e:47:02:01:1c:2e:9e:6a:07:28:a6:
         ed:66:87:b7:95:8b:8f:ca:f6:ba:6a:8d:76:e4:23:ab:23:3f:
         e1:84:76:6a:5c:7e:d5:2b:01:61:17:85:1a:e6:23:0c:cb:29:
         19:7b:ab:cb:6b:c9:bd:7b:53:0e:61:73:02:e9:e0:14:dd:77:
         1b:8f:ba:42:bb:3c:c6:c0:7e:08:71:56:34:52:bb:82:7d:5c:
         e6:a0:5a:c4:4a:64:f2:f6:eb:51:18:8a:70:c2:25:09:3d:10:
         b3:d9:c7:0f:97:73:af:52:c2:48:f9:e8:b2:6f:65:7d:44:11:
         ee:12:b9:7b:52:04:87:7c:ec:da:8f:71:21:fe:ee:24:0a:c8:
         1c:1e:2d:d9:4f:d6:29:14:c7:8c:56:af:2f:f1:4d:6e:4c:b0:
         63:77:97:3a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICYP0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDExNTAxMzkyMVoXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoMjg5OTVENkIwRERDMjA1QjM1OTU5MzMyRDFDQjFEOUQ4Q0YwMjI4
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvgljA1n19RcTn1VpDa
eC13/XcuNJPRtaGJ2Sa2l9yewROqH4C9TYSvIFdY+sBV3Fp37kXZEJ75+gD571IR
DQB2wZ3lHk5IFFYOPbHX1Dp+C3IsGbjNcpyzKDqhFS+H+SrFK/mGYwSTMvGwHefL
2LhrvNcrCDh8ep1rSsPjmJLp7x7spmw+JVsPkw54YbJT9jaUilJltFp0SiLmcWAP
yIWc7e0NEIARhgofTClRs7aUOO+lUYkr1rrV5LGpI4vR7u1+foGKaMkQmfiKdS9e
4qD3baxIQqmrjLdfl60KxPshyVSe2wtbu8uiehcqJRMxbGZn6HRG0mzFnc0j8XnG
cvkCAwEAAaOCAp0wggKZMB0GA1UdDgQWBBQomV1rDdwgWzWVkzLRyx2djPAigzAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMTA2MDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzEwNjAyL0tK
bGRhdzNjSUZzMWxaTXkwY3Nkbll6d0lvTS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAJnHBgDBAJ6yCADBAJ6
/0wDBAPLXxgwDQYJKoZIhvcNAQELBQADggEBAIR5YFWslJKmasN7OJCP/fI6sPJv
ya1EGes5jB1D+ZkcuMGAzcCNiju4oXW7dnD4Aor+bH5KBAgYpviT833VHm6YS9hg
L5CrvO82+Iry5vQARxqqctYEIY/d3FiSTBNaKUguRwIBHC6eagcopu1mh7eVi4/K
9rpqjXbkI6sjP+GEdmpcftUrAWEXhRrmIwzLKRl7q8tryb17Uw5hcwLp4BTddxuP
ukK7PMbAfghxVjRSu4J9XOagWsRKZPL261EYinDCJQk9ELPZxw+Xc69Swkj56LJv
ZX1EEe4SuXtSBId87NqPcSH+7iQKyBweLdlP1ikUx4xWry/xTW5MsGN3lzo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:39 2026 by rpki-client