This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
File: KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer (raw, json)
Hash identifier: 0wSt/JPyTZ/SymobGOfxfOGkGwLGXxUk19rHfyTM57w=
Subject key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial: 136E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Nov 2025 01:32:38 +0000
Certificate not after: Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources: IP: 157.65.8.0/21
IP: 157.65.176.0/21
IP: 157.65.192.0/21
IP: 157.65.216.0/21
IP: 157.67.0.0/16
IP: 160.13.0.0/16
IP: 172.122.0.0/15
IP: 192.244.32.0/19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4974 (0x136e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Validity
Not Before: Nov 15 01:32:38 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:c5:af:04:e3:2e:c0:9a:b4:fc:8c:99:dc:
a4:c5:f2:6e:16:1f:f4:ae:81:26:99:5c:bf:2e:26:
e8:91:a4:fa:e2:50:55:32:40:3a:cf:33:2d:d7:d4:
64:f6:ce:05:a9:ba:a9:f2:ea:04:2d:67:d6:71:90:
b4:ca:8e:c2:e5:81:d6:43:33:72:a7:ea:57:d2:56:
7b:b2:cf:b4:25:d4:7a:80:4c:36:2d:e0:47:6c:c3:
7e:6f:8a:ad:b7:73:f6:9d:63:b5:f6:40:6e:ae:77:
9c:96:6f:f2:99:f9:91:78:f1:48:ac:71:aa:9d:7c:
bd:76:09:33:63:b1:c0:4b:cf:d4:2e:7c:ce:70:8c:
15:0e:c0:1d:10:e9:30:77:40:e7:f1:41:1c:f3:4a:
8b:1f:35:cc:64:8f:f7:50:09:4a:b8:92:d9:45:b2:
0f:01:ac:f1:04:00:20:6e:0c:23:b5:80:c6:26:90:
45:1e:83:4e:8a:62:3f:4c:ca:76:20:08:ce:6d:99:
e9:02:3c:41:e9:dd:8b:fa:f9:e3:65:0e:ea:cc:3a:
a6:24:dc:31:02:7c:f6:d7:ac:70:3c:d9:5e:1d:18:
c8:c8:27:fa:11:35:2b:a1:f5:82:fd:4d:7c:d8:ca:
96:2e:04:59:e6:ac:a3:7f:37:2e:a6:ab:04:b5:db:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Authority Key Identifier:
keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.8.0/21
157.65.176.0/21
157.65.192.0/21
157.65.216.0/21
157.67.0.0/16
160.13.0.0/16
172.122.0.0/15
192.244.32.0/19
Signature Algorithm: sha256WithRSAEncryption
17:a6:08:14:8b:d2:90:b6:4e:ad:6e:80:31:48:6c:d5:90:71:
6e:20:cc:44:32:ca:55:01:bc:6f:af:45:6e:d4:0f:92:50:fb:
bb:f9:58:13:8a:18:68:9b:1d:c3:9a:95:d5:fc:d6:9b:7a:4e:
37:23:5c:7f:e2:8e:cc:6c:c4:4a:c6:c7:ad:63:f1:25:7d:25:
63:18:93:8e:7b:16:dd:35:20:aa:e0:06:56:91:a7:54:47:98:
e1:59:85:35:08:9d:13:17:6d:96:75:6d:6a:14:9c:a1:b1:9d:
21:60:79:a7:1a:a1:9a:91:83:51:eb:05:4e:b7:4e:b8:a7:ae:
b2:80:7c:61:c1:fb:54:de:a1:d1:4e:e2:70:23:30:4f:36:c6:
af:c2:97:75:ca:90:2e:9d:02:74:fb:ac:61:95:74:e4:b2:19:
29:b0:74:03:9d:f3:13:59:0c:1a:74:72:67:6d:14:f5:d0:48:
ba:64:3c:7d:c8:8b:3e:ea:02:b1:c5:5e:f8:c7:c7:12:a9:c2:
2c:69:6b:f0:f7:b4:4c:d5:32:54:65:d0:af:ac:31:97:79:e3:
c7:a5:6b:02:bb:fc:19:53:53:5e:83:47:60:c7:2c:54:0b:d0:
ad:1c:98:12:5e:34:dc:dc:66:2b:88:5d:e6:f6:3a:d7:ec:b4:
58:52:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:09:45 2025 by rpki-client