This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer File: KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer (raw, json) Hash identifier: roq9XUwDuoO8QsMXOEUkodyjNuiKt28hRQheIO3a0dM= Subject key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 60F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 Jan 2026 01:39:01 +0000 Certificate not after: Fri 15 Jan 2027 01:30:02 +0000 Subordinate resources: IP: 27.112.124.0/22 IP: 49.239.64.0/18 IP: 58.138.0.0 -- 58.138.191.255 IP: 61.211.96.0/19 IP: 101.128.128.0/17 IP: 103.2.57.0 -- 103.2.59.255 IP: 113.197.128.0/17 IP: 116.118.192.0/20 IP: 118.151.0.0 -- 118.151.191.255 IP: 119.10.192.0/18 IP: 121.102.0.0/16 IP: 121.200.200.0/21 IP: 124.41.0.0 -- 124.41.191.255 IP: 124.147.64.0/18 IP: 125.30.0.0/16 IP: 133.110.0.0/16 IP: 133.137.0.0/16 IP: 133.142.0.0/16 IP: 133.159.0.0/16 IP: 133.218.0.0/16 IP: 133.236.0.0/16 IP: 133.238.8.0 -- 133.238.255.255 IP: 150.31.0.0/16 IP: 163.49.0.0/16 IP: 163.131.0.0/16 IP: 163.140.0.0/16 IP: 163.218.0.0/16 IP: 202.16.104.0/21 IP: 202.32.0.0/16 IP: 202.48.108.0/23 IP: 202.141.192.0/20 IP: 202.214.0.0/16 IP: 202.221.0.0/16 IP: 202.224.128.0/18 IP: 202.232.0.0/16 IP: 202.238.128.0/17 IP: 202.245.133.0/24 IP: 202.247.136.0/21 IP: 202.247.160.0/19 IP: 202.253.115.0/24 IP: 203.180.0.0/16 IP: 210.128.0.0/16 IP: 210.130.0.0/16 IP: 210.133.192.0/18 IP: 210.138.0.0/16 IP: 210.142.128.0/19 IP: 210.148.0.0/15 IP: 210.173.0.0/19 IP: 211.14.32.0/19 IP: 218.42.160.0/19 IP: 218.228.96.0/19 IP: 219.105.0.0/19 IP: 219.111.0.0/17 IP: 219.119.0.0/16 IP: 219.121.160.0/19 IP: 219.126.128.0/17 IP: 220.100.0.0/16 IP: 220.156.0.0 -- 220.156.159.255 IP: 220.208.192.0/19 IP: 220.210.128.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24821 (0x60f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jan 15 01:39:01 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:87:9f:aa:a3:5a:09:42:a3:66:6a:a3:4d: 40:96:73:80:f2:96:56:78:fc:9f:31:04:7a:71:66: f3:71:2e:24:a5:f0:35:60:a6:75:f2:e5:5f:73:ba: 88:97:fb:d1:d1:fa:c5:b9:18:cf:2d:68:51:7d:72: a5:f4:42:11:fe:58:96:54:28:d6:a6:c1:49:2b:28: 05:8d:ff:47:d8:40:da:b2:84:2d:5e:02:bb:40:ab: 8a:35:c1:32:86:21:c2:94:11:53:75:8d:9e:df:ea: 6a:ab:80:3c:4f:a2:39:e1:25:73:1b:9d:20:5a:82: bf:1e:0d:ed:0c:7a:88:c4:b0:fc:bd:1f:80:4a:a0: e4:2f:a2:fe:60:84:f2:b9:94:b8:8e:e5:b9:70:0c: ec:7e:41:64:2f:e8:6a:93:ec:ae:37:3f:58:19:5e: 48:a4:b5:95:9b:a8:e9:32:91:70:e7:60:61:32:c7: d2:6e:62:60:11:5e:54:6d:3d:ce:5b:7d:f1:d1:05: 61:e2:80:8d:e3:eb:5d:c4:b2:76:e8:e7:fd:20:e0: 15:fa:6c:9d:ae:06:3f:32:83:fc:c0:ce:24:32:e1: 8e:9f:97:d7:a9:ee:b5:83:d6:ad:5b:1a:eb:30:ec: 07:12:9f:81:ec:16:fb:cc:a0:5d:67:ce:cc:9a:9a: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.112.124.0/22 49.239.64.0/18 58.138.0.0-58.138.191.255 61.211.96.0/19 101.128.128.0/17 103.2.57.0-103.2.59.255 113.197.128.0/17 116.118.192.0/20 118.151.0.0-118.151.191.255 119.10.192.0/18 121.102.0.0/16 121.200.200.0/21 124.41.0.0-124.41.191.255 124.147.64.0/18 125.30.0.0/16 133.110.0.0/16 133.137.0.0/16 133.142.0.0/16 133.159.0.0/16 133.218.0.0/16 133.236.0.0/16 133.238.8.0-133.238.255.255 150.31.0.0/16 163.49.0.0/16 163.131.0.0/16 163.140.0.0/16 163.218.0.0/16 202.16.104.0/21 202.32.0.0/16 202.48.108.0/23 202.141.192.0/20 202.214.0.0/16 202.221.0.0/16 202.224.128.0/18 202.232.0.0/16 202.238.128.0/17 202.245.133.0/24 202.247.136.0/21 202.247.160.0/19 202.253.115.0/24 203.180.0.0/16 210.128.0.0/16 210.130.0.0/16 210.133.192.0/18 210.138.0.0/16 210.142.128.0/19 210.148.0.0/15 210.173.0.0/19 211.14.32.0/19 218.42.160.0/19 218.228.96.0/19 219.105.0.0/19 219.111.0.0/17 219.119.0.0/16 219.121.160.0/19 219.126.128.0/17 220.100.0.0/16 220.156.0.0-220.156.159.255 220.208.192.0/19 220.210.128.0/18 Signature Algorithm: sha256WithRSAEncryption 6b:b4:1a:9d:82:8b:3d:af:bb:12:73:76:66:d6:5b:04:f4:0c: b1:85:de:da:d3:cd:b6:ec:70:a1:e2:27:18:01:00:ef:96:79: 16:d4:7e:47:a2:75:94:b6:85:bb:28:15:e6:4d:7a:fe:e8:ff: 2a:00:39:48:cb:ab:12:fd:7a:62:85:2c:6a:92:0a:7c:99:6e: e9:99:9c:96:da:24:51:7e:6f:b4:80:a4:62:74:be:4a:92:65: 26:fd:be:d7:99:84:c4:7a:5e:14:31:5a:55:37:92:67:62:9e: 59:af:ae:86:e3:1b:8d:a9:a6:13:a4:b2:2a:ab:fc:17:e1:ea: cc:f7:1f:67:5a:66:0d:ea:63:c6:88:b8:1f:63:27:f1:13:c5: e4:e3:f4:66:a5:c8:ff:a1:2d:33:ba:75:05:97:99:11:14:32: 6d:dc:41:0e:cb:e2:c2:98:82:63:18:7e:11:33:a3:c9:8c:6e: 68:9a:60:c7:f2:ab:9d:c8:ca:66:54:84:77:84:d4:11:79:c2: 06:ad:97:25:0f:83:86:08:46:9e:a0:c4:49:a3:5a:a1:56:41: 7a:c4:c1:ff:37:e5:34:b3:b8:8f:ce:eb:14:3b:ac:68:c9:a9: 40:56:a5:79:e9:8b:c3:77:35:ba:7c:06:15:ac:5a:c8:32:ec: f5:f5:5a:ba -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgICYPUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDExNTAxMzkwMVoXDTI3MDExNTAxMzAwMlowMzEx MC8GA1UEAxMoMjk4M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJG OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKzXh5+qo1oJQqNmaqNN QJZzgPKWVnj8nzEEenFm83EuJKXwNWCmdfLlX3O6iJf70dH6xbkYzy1oUX1ypfRC Ef5YllQo1qbBSSsoBY3/R9hA2rKELV4Cu0CrijXBMoYhwpQRU3WNnt/qaquAPE+i OeElcxudIFqCvx4N7Qx6iMSw/L0fgEqg5C+i/mCE8rmUuI7luXAM7H5BZC/oapPs rjc/WBleSKS1lZuo6TKRcOdgYTLH0m5iYBFeVG09zlt98dEFYeKAjePrXcSydujn /SDgFfpsna4GPzKD/MDOJDLhjp+X16nutYPWrVsa6zDsBxKfgewW+8ygXWfOzJqa UkECAwEAAaOCBAEwggP9MB0GA1UdDgQWBBQpg8/V+Mr6AGjS66Je0PcBJEsS+TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH7BggrBgEFBQcBCwSB7jCB 6zBABggrBgEFBQcwBYY0cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC82LzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLXJl cG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC82L0tZUFAxZmpLLWdC bzB1dWlYdEQzQVNSTEV2ay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwggGc BggrBgEFBQcBBwEB/wSCAYswggGHMIIBgwQCAAEwggF7AwQCG3B8AwQGMe9AMAsD AwE6igMEBjqKgAMEBT3TYAMEB2WAgDAMAwQAZwI5AwQCZwI4AwQHccWAAwQEdHbA MAsDAwB2lwMEBnaXgAMEBncKwAMDAHlmAwQDecjIMAsDAwB8KQMEBnwpgAMEBnyT QAMDAH0eAwMAhW4DAwCFiQMDAIWOAwMAhZ8DAwCF2gMDAIXsMAsDBAOF7ggDAwCF 7gMDAJYfAwMAozEDAwCjgwMDAKOMAwMAo9oDBAPKEGgDAwDKIAMEAcowbAMEBMqN wAMDAMrWAwMAyt0DBAbK4IADAwDK6AMEB8rugAMEAMr1hQMEA8r3iAMEBcr3oAME AMr9cwMDAMu0AwMA0oADAwDSggMEBtKFwAMDANKKAwQF0o6AAwMB0pQDBAXSrQAD BAXTDiADBAXaKqADBAXa5GADBAXbaQADBAfbbwADAwDbdwMEBdt5oAMEB9t+gAMD ANxkMAsDAwLcnAMEBdycgAMEBdzQwAMEBtzSgDANBgkqhkiG9w0BAQsFAAOCAQEA a7QanYKLPa+7EnN2ZtZbBPQMsYXe2tPNtuxwoeInGAEA75Z5FtR+R6J1lLaFuygV 5k16/uj/KgA5SMurEv16YoUsapIKfJlu6ZmcltokUX5vtICkYnS+SpJlJv2+15mE xHpeFDFaVTeSZ2KeWa+uhuMbjammE6SyKqv8F+HqzPcfZ1pmDepjxoi4H2Mn8RPF 5OP0ZqXI/6EtM7p1BZeZERQybdxBDsviwpiCYxh+ETOjyYxuaJpgx/KrncjKZlSE d4TUEXnCBq2XJQ+DhghGnqDESaNaoVZBesTB/zflNLO4j87rFDusaMmpQFaleemL w3c1unwGFaxayDLs9fVaug== -----END CERTIFICATE-----Generated at Sun Jan 25 06:03:04 2026 by rpki-client