This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer
File:                     Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer (raw, json)
Hash identifier:          uDJVXZCKONzQz7lr9K9ktxM2EqSk0I23vfRlaWajanQ=
Subject key identifier:   51:EE:6A:CD:5E:71:2F:D9:B0:35:FB:A2:BD:BA:52:0E:9F:CA:4E:C1
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5FFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:31:26 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2400:f460::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24570 (0x5ffa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:31:26 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=51EE6ACD5E712FD9B035FBA2BDBA520E9FCA4EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:fa:9b:02:f8:c3:fb:68:05:16:aa:e7:4c:
                    00:e2:5e:62:be:0e:d9:0d:58:3f:4e:00:7f:59:5b:
                    8f:27:17:ed:cf:4e:8e:e4:5a:05:4d:b8:d7:c8:a4:
                    cd:b7:9b:74:c5:cb:33:39:29:41:67:1a:3e:35:d5:
                    1a:44:19:be:72:11:78:38:5a:aa:fc:a5:0a:7e:3a:
                    b1:c3:d2:01:1d:e1:2d:50:e0:e9:54:40:47:88:44:
                    6b:2e:36:58:87:47:c6:eb:8c:8a:dd:71:87:2b:d0:
                    f1:49:01:8a:a0:34:b5:42:c5:bf:cb:12:78:18:96:
                    3f:4b:c0:51:88:cc:1f:e2:f2:14:41:05:0a:ff:3b:
                    b5:3f:4b:55:05:3d:0d:3f:bc:eb:bd:49:ee:2e:93:
                    bd:31:19:be:b3:9b:99:0a:a5:16:8c:25:63:5a:2e:
                    03:cf:b8:c0:8b:82:ee:da:75:a6:d7:ff:12:bd:b5:
                    66:2b:a5:de:fc:8c:10:7d:bc:66:de:d9:f8:f1:94:
                    88:84:07:87:28:e8:91:86:b8:8f:0a:b6:ed:e0:36:
                    c5:f9:e2:f2:ae:1b:cc:fc:1c:73:ab:96:34:66:38:
                    03:1e:d8:6c:ef:a5:25:d7:bb:aa:71:fc:55:1c:f7:
                    18:b8:c9:c9:90:c6:f3:a3:23:eb:ae:16:d3:fa:89:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:6A:CD:5E:71:2F:D9:B0:35:FB:A2:BD:BA:52:0E:9F:CA:4E:C1
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f460::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:d2:3e:68:7b:68:6f:8b:d1:1a:9e:2b:80:b8:e0:c4:55:
         42:2b:78:33:2f:a0:b1:42:98:8c:04:17:11:40:be:31:f0:99:
         c8:71:f1:2c:68:57:e9:ca:d6:a5:ca:85:d3:3b:44:b9:b7:68:
         41:7f:92:69:64:bb:c3:d6:c0:4b:a0:4f:4f:38:eb:65:f9:60:
         db:85:67:1c:27:cb:ed:45:61:23:f1:4f:aa:4f:e9:4e:d1:e3:
         a7:40:d6:a3:e0:d5:53:96:1f:a9:69:82:3d:aa:4d:69:66:e6:
         57:fb:1e:a2:22:7c:88:4c:aa:a4:6f:8b:34:25:93:d7:b4:b3:
         2e:66:9c:1f:e8:00:39:61:44:e5:1e:69:b5:c2:87:12:f8:89:
         9a:83:23:1f:1e:b5:cb:75:d5:a5:e0:f6:dc:8c:05:91:aa:30:
         c0:95:2c:f5:86:c7:96:4c:ea:1f:e0:b8:73:6c:ef:d5:e6:a7:
         78:46:05:64:13:a5:92:8b:66:07:3c:ca:fe:8b:aa:4b:28:2f:
         e2:1c:9f:a4:e3:6c:1f:08:7e:3e:a4:c4:31:6e:59:b4:04:d5:
         3a:1c:59:94:88:cc:69:27:2f:e0:00:c2:41:67:7b:98:71:77:
         76:26:a6:6f:3b:e0:3d:d5:dc:0b:bf:96:0a:b3:9e:e9:f6:70:
         42:7f:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:06 2026 by rpki-client