This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/V4D5BWc46zQtpQxZ1ErpA4w2zwY.cer
File:                     V4D5BWc46zQtpQxZ1ErpA4w2zwY.cer (raw, json)
Hash identifier:          8x5HRpl45YLjp/hVjM9DQvxXlKMOahFWnkfJJ0v7r3s=
Subject key identifier:   57:80:F9:05:67:38:EB:34:2D:A5:0C:59:D4:4A:E9:03:8C:36:CF:06
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5DCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4314/V4D5BWc46zQtpQxZ1ErpA4w2zwY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4314/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 01 Dec 2025 09:01:52 +0000
Certificate not after:    Tue 01 Dec 2026 08:55:05 +0000
Subordinate resources:    IP: 202.11.252.0/24
                          IP: 202.244.224.0/21
                          IP: 202.251.248.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24013 (0x5dcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec  1 09:01:52 2025 GMT
            Not After : Dec  1 08:55:05 2026 GMT
        Subject: CN=5780F9056738EB342DA50C59D44AE9038C36CF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:02:a0:f6:7c:d3:4b:d1:ab:fe:20:ba:96:
                    63:d7:65:d5:bb:dd:16:69:71:8d:44:37:6e:62:ba:
                    45:21:c8:3f:e6:65:39:e2:d9:47:a5:d2:51:50:2a:
                    60:d7:b3:30:98:5b:9e:d9:3e:92:c3:4e:8a:b9:32:
                    a7:65:6c:55:a6:8e:40:59:52:8b:92:58:85:5a:71:
                    a0:96:9c:5f:29:27:e7:72:b3:9b:54:67:a8:80:36:
                    72:3a:ae:35:eb:df:4a:8d:0e:32:6d:97:b9:40:c0:
                    8b:34:d9:18:82:f6:d5:00:41:6e:59:61:51:77:d7:
                    a2:a3:bc:69:3e:53:3c:ff:90:f9:08:a0:fd:72:99:
                    4a:9e:fb:ed:6a:43:96:33:34:7e:28:c7:7b:f3:66:
                    6b:9f:41:bc:5a:4e:58:4b:ed:fb:53:d7:10:28:3b:
                    8e:42:ce:80:ba:26:ea:af:60:e0:b2:22:d3:cf:30:
                    e1:8d:0e:93:cd:4c:c1:d5:be:31:0b:ef:2d:ed:6d:
                    a7:85:a6:5c:f8:7c:06:19:32:17:60:a0:2b:76:e5:
                    d9:42:fc:c0:b1:89:8a:bd:a2:89:27:f8:4d:82:af:
                    bf:ae:49:2e:c8:9f:5a:f3:ac:06:ea:72:da:45:9a:
                    6f:73:76:48:41:48:f8:9c:e7:d5:0a:c8:89:0d:9b:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:80:F9:05:67:38:EB:34:2D:A5:0C:59:D4:4A:E9:03:8C:36:CF:06
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4314/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4314/V4D5BWc46zQtpQxZ1ErpA4w2zwY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.11.252.0/24
                  202.244.224.0/21
                  202.251.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:0e:dc:65:c3:b0:83:28:b7:72:fc:72:5f:ab:80:65:e2:93:
         03:a6:ad:06:9f:89:25:31:70:bc:74:5e:15:ac:30:f8:60:c1:
         ce:9f:0e:4b:07:a9:5c:c2:8f:d7:10:fd:b0:ff:a6:80:4c:53:
         5e:bd:7a:ad:f0:0c:76:b1:c5:e5:3e:1a:c2:ae:c9:a9:73:78:
         a5:82:ba:b6:cf:cb:c8:d6:e2:12:78:5f:6f:f0:e5:fa:08:dd:
         92:6b:f5:ea:14:2e:dc:f5:2c:73:4a:57:c5:6c:8f:6d:57:0e:
         e5:fb:1e:1a:ae:15:ef:dd:13:9d:63:98:13:e1:72:fe:23:68:
         7b:05:0c:0a:5b:aa:7f:3e:3d:e4:1e:09:0f:40:9a:4a:15:e9:
         06:e0:a0:3b:97:d5:bc:f0:27:f6:2a:07:76:b2:9d:d1:20:47:
         a3:f7:3d:4c:9d:38:b0:50:73:ae:1c:dc:48:7d:0d:9e:81:e3:
         8f:b4:e5:06:bb:b9:ed:65:d4:9b:15:e6:d8:2f:ac:f9:5c:bc:
         64:e7:da:34:e2:0c:8f:06:fc:ac:19:f5:b8:4d:31:ba:24:eb:
         c9:f1:9d:41:0c:bf:3d:62:5b:38:38:5d:e5:1c:fc:2b:78:bc:
         b6:73:fb:b4:c8:0b:6d:f4:5e:2e:a3:26:19:98:e3:3e:fd:15:
         e9:2c:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:08:41 2025 by rpki-client