This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
File:                     Mttw_7inIon1ZFB2hkRljFSqZOk.cer (raw, json)
Hash identifier:          Pdfj7AylVT1uX+BNDozlJV7FI1U4KuBjjn94mtLjqmk=
Subject key identifier:   32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       603E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:33:39 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 42.83.0.0/18
                          IP: 103.205.48.0/22
                          IP: 153.124.224.0/21
                          IP: 182.23.216.0/21
                          IP: 203.211.32.0 -- 203.211.55.255
                          IP: 219.100.88.0/22
                          IP: 219.103.0.0/19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24638 (0x603e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:33:39 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=32DB70FFB8A72289F56450768644658C54AA64E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:82:60:d0:74:15:7f:bc:46:73:6d:b5:8a:
                    3d:b8:14:91:9c:47:1d:b2:2f:4f:50:4b:7a:90:e8:
                    4f:1d:f7:80:cd:e3:89:d6:53:38:46:96:ee:81:ac:
                    f6:45:32:01:00:73:61:23:a9:b9:d5:e9:35:53:dd:
                    b1:46:ca:47:62:b8:b7:a4:93:09:3c:e8:0b:75:c5:
                    ce:89:2e:1f:bf:42:3d:9c:c9:c7:dd:3b:03:38:9b:
                    df:27:4c:ff:c0:b0:b8:7e:fb:ab:f0:fc:4f:d5:df:
                    61:1c:6d:a9:28:88:b1:61:15:ae:92:f6:16:dd:6e:
                    51:9a:f7:c4:4a:b0:99:79:af:89:3c:83:19:82:b3:
                    d3:5a:2b:1f:3b:19:d5:d1:c6:fe:68:0b:f8:cc:6a:
                    46:55:e1:9e:36:05:28:e3:26:d5:16:ee:c7:e3:45:
                    cb:c5:3c:ec:18:33:51:54:64:f1:bf:2f:54:84:ec:
                    5f:55:e9:59:24:4e:ab:a1:e0:b5:69:b0:f3:30:c3:
                    c2:e4:be:98:b2:46:bd:47:2d:f2:31:2a:dc:fe:1c:
                    a3:58:30:35:cb:fa:f4:4d:a5:8a:37:19:b2:40:16:
                    c8:20:1a:c6:b3:c0:1c:e9:db:68:77:ce:ef:97:a7:
                    4b:44:5b:a2:3f:e8:89:fb:85:c7:f8:ff:d9:71:4e:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.83.0.0/18
                  103.205.48.0/22
                  153.124.224.0/21
                  182.23.216.0/21
                  203.211.32.0-203.211.55.255
                  219.100.88.0/22
                  219.103.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:d4:f3:9e:c8:60:72:ea:fe:3c:ba:64:95:e5:77:1b:3e:
         30:54:ec:b6:56:55:b3:a1:a6:3d:1c:ae:c0:a6:8f:47:58:b5:
         c7:2d:af:6b:6c:7c:19:b6:2f:c8:37:a7:2e:e2:36:05:12:46:
         3d:55:fe:6c:93:af:2f:bc:fc:cb:d5:09:c5:fc:c0:48:d6:a7:
         81:b5:2e:7a:b1:da:fa:14:7a:52:f8:af:d8:e8:74:2f:a3:9c:
         8c:77:86:6c:9a:2a:73:1b:54:4c:e9:f2:cb:ff:5d:76:4a:f7:
         2f:85:1b:5b:7c:5b:0b:c3:35:24:2a:e2:59:47:0b:33:56:11:
         9d:78:e5:16:20:62:42:81:d4:a7:ba:bf:c0:59:10:49:f7:77:
         bc:16:df:5f:44:08:dd:85:a6:48:db:e3:41:ea:58:07:12:68:
         17:65:fb:bb:93:02:dc:fc:26:33:4c:55:e3:8e:e9:73:48:39:
         2d:a3:a1:fb:93:a6:f4:2e:51:ea:63:cc:cc:6c:a5:12:be:d1:
         08:56:7c:c6:e5:86:0a:28:98:f3:a9:0c:be:6d:37:78:2e:fd:
         89:e8:2a:4f:fe:7d:dc:f5:8e:bc:29:f4:3f:6a:0b:f8:79:cb:
         4f:01:e4:86:28:d2:08:ea:61:90:bf:76:e6:c6:dd:a2:51:b1:
         ba:28:f9:6e
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgICYD4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDExNTAxMzMzOVoXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoMzJEQjcwRkZCOEE3MjI4OUY1NjQ1MDc2ODY0NDY1OEM1NEFBNjRF
OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANOcgmDQdBV/vEZzbbWK
PbgUkZxHHbIvT1BLepDoTx33gM3jidZTOEaW7oGs9kUyAQBzYSOpudXpNVPdsUbK
R2K4t6STCTzoC3XFzokuH79CPZzJx907Azib3ydM/8CwuH77q/D8T9XfYRxtqSiI
sWEVrpL2Ft1uUZr3xEqwmXmviTyDGYKz01orHzsZ1dHG/mgL+MxqRlXhnjYFKOMm
1Rbux+NFy8U87BgzUVRk8b8vVITsX1XpWSROq6HgtWmw8zDDwuS+mLJGvUct8jEq
3P4co1gwNcv69E2lijcZskAWyCAaxrPAHOnbaHfO75enS0Rboj/oifuFx/j/2XFO
g68CAwEAAaOCArIwggKuMB0GA1UdDgQWBBQy23D/uKciifVkUHaGRGWMVKpk6TAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC82OTYvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzY5Ni9NdHR3Xzdp
bklvbjFaRkIyaGtSbGpGU3FaT2subWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQGKlMAAwQCZ80wAwQDmXzgAwQD
thfYMAwDBAXL0yADBAPL0zADBALbZFgDBAXbZwAwDQYJKoZIhvcNAQELBQADggEB
AEoB1POeyGBy6v48umSV5XcbPjBU7LZWVbOhpj0crsCmj0dYtcctr2tsfBm2L8g3
py7iNgUSRj1V/myTry+8/MvVCcX8wEjWp4G1Lnqx2voUelL4r9jodC+jnIx3hmya
KnMbVEzp8sv/XXZK9y+FG1t8WwvDNSQq4llHCzNWEZ145RYgYkKB1Ke6v8BZEEn3
d7wW319ECN2Fpkjb40HqWAcSaBdl+7uTAtz8JjNMVeOO6XNIOS2jofuTpvQuUepj
zMxspRK+0QhWfMblhgoomPOpDL5tN3gu/YnoKk/+fdz1jrwp9D9qC/h5y08B5IYo
0gjqYZC/dubG3aJRsboo+W4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:01 2026 by rpki-client