This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer
File:                     V028Ks3NaYbcc3-y1cgQOUxMB00.cer (raw, json)
Hash identifier:          ys1Hq7i/xUUKtL0W9cabbC+OXTED16AsWOlWaloY8MI=
Subject key identifier:   57:4D:BC:2A:CD:CD:69:86:DC:73:7F:B2:D5:C8:10:39:4C:4C:07:4D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5EFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:38:28 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2407:61c0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24315 (0x5efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:38:28 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=574DBC2ACDCD6986DC737FB2D5C810394C4C074D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:06:3b:48:79:c9:8c:7c:11:65:56:e0:e5:
                    52:52:8f:09:fa:26:3a:8c:ae:1b:30:31:8f:6a:0b:
                    6f:ba:85:45:fa:1f:a3:45:6c:c6:c9:3d:0e:7a:ef:
                    e3:fb:6c:2a:eb:8c:e8:7b:31:71:d6:d9:d1:64:26:
                    a3:26:c4:8a:e3:b5:cc:12:5e:3b:08:e8:3c:10:ec:
                    c7:16:08:12:e6:fe:f2:9c:28:e9:99:ba:55:8e:78:
                    c6:11:57:a0:b7:42:a3:e4:fb:84:b4:08:da:16:fb:
                    33:5b:72:5d:a9:39:a8:6b:02:a2:98:c2:fb:59:ff:
                    bf:7a:cc:a4:9c:fd:bc:ec:3e:6e:73:cd:8d:70:de:
                    72:27:e4:4c:17:eb:76:fb:02:f9:97:0d:f3:7c:27:
                    0b:79:7d:cd:7c:fa:62:83:1c:d8:12:e4:8d:f8:95:
                    da:8d:e7:af:48:b2:dd:fa:9c:22:8a:8d:3d:22:f9:
                    1e:8a:e3:23:9a:39:b7:84:b9:05:a8:6b:fc:a1:0e:
                    d0:cc:28:24:63:f7:34:4a:03:48:6e:d2:a7:bf:2d:
                    7a:6a:85:5d:4c:9a:0e:63:11:cf:a8:42:51:17:ed:
                    d6:9b:43:02:03:94:ae:d5:14:e6:a6:73:72:a2:72:
                    d8:74:ed:29:87:4b:03:fd:a1:54:85:4a:53:ea:8d:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4D:BC:2A:CD:CD:69:86:DC:73:7F:B2:D5:C8:10:39:4C:4C:07:4D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:61c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:48:f8:81:08:36:56:89:6c:3b:9f:d6:0b:24:07:e6:9a:9a:
         66:c3:01:46:87:53:77:e7:aa:d8:21:c2:71:58:73:fa:7c:1c:
         a8:e1:f7:e2:e5:b8:f4:2f:9f:0b:95:b5:c4:d2:b9:be:40:97:
         a2:b2:aa:c2:2d:1f:40:7c:21:5e:c3:8d:3a:fb:4d:9e:22:59:
         bf:7e:ab:03:8e:9c:bb:e6:75:21:ad:75:ad:d0:67:87:4b:99:
         e8:ae:ae:23:c5:1f:ef:fc:6c:ea:9b:64:59:10:a5:9c:fe:39:
         82:4a:5a:27:4c:4f:39:8f:cd:e4:4c:d3:74:38:dd:85:79:53:
         3a:e3:1e:da:0b:88:51:a9:d9:6d:12:1b:83:88:16:a5:ff:a3:
         49:c9:1d:3b:40:2a:fc:41:35:a4:16:12:af:97:04:3a:3c:0f:
         51:3b:bf:ed:a0:f5:a8:9a:c5:30:27:f8:80:0c:a3:ef:ae:ea:
         5f:b8:dc:e3:2e:b7:db:c7:cc:86:ec:e4:c4:49:c8:6a:29:29:
         74:2d:77:5c:04:d6:02:6a:b2:0f:5e:41:d6:de:0a:b1:a5:fc:
         56:8b:bc:08:1a:4f:ae:d2:7a:5d:40:f5:91:af:67:8e:91:a6:
         85:ed:4e:cc:13:4e:5f:a8:fc:f8:fd:2b:96:33:b8:2d:ef:0a:
         fc:36:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----