This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer
File:                     XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer (raw, json)
Hash identifier:          clsB+/oGnEcbgtEDAzyf4EAV100Nd8jkm+mOEBT3XCA=
Subject key identifier:   5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       60C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:37:31 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2400:fba0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24775 (0x60c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:37:31 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:64:99:f7:51:d3:ad:ff:29:eb:20:14:96:
                    45:e9:49:e1:9e:c1:d5:ab:af:b2:0c:e1:ea:0b:81:
                    d1:b3:bf:c5:dd:ed:b6:59:04:9a:86:f9:79:29:57:
                    9a:49:75:b6:3f:83:46:5a:e2:a1:a5:9e:5a:b8:03:
                    d1:9d:93:74:df:b6:fa:fd:2e:d5:11:ed:1a:e4:66:
                    d7:a9:d2:50:82:3f:f7:49:02:f5:d7:a6:f1:10:e5:
                    c1:20:ba:48:82:ea:0f:f3:f4:8f:89:ee:03:a6:d4:
                    77:aa:83:2c:76:b1:d3:21:41:6e:4f:ce:f7:a2:dd:
                    75:53:cb:51:51:9a:4e:f7:5a:08:ab:22:2b:81:41:
                    f8:fb:7e:3d:06:a7:c3:32:81:6b:5b:02:1d:19:7b:
                    c6:94:89:e6:a1:07:95:d7:4a:b1:36:27:9d:10:90:
                    b9:7b:ec:70:37:e1:64:c4:84:41:f9:18:4a:5b:07:
                    b8:cf:d4:b8:46:89:2e:22:17:3a:db:e7:85:66:53:
                    6f:9b:da:3c:60:3e:1d:7f:c8:61:1a:a1:0d:74:0a:
                    ed:75:82:54:d1:f9:14:60:71:17:65:44:d3:b5:9b:
                    c1:ef:fd:b4:a9:38:8a:ca:ff:73:5b:b1:7b:98:c2:
                    dd:68:26:27:36:d5:59:0f:5a:1d:ed:99:84:48:fb:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:fba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:18:89:d3:63:c1:b8:ad:2a:4d:7d:7c:94:92:07:e0:66:ab:
         eb:e6:e1:9e:79:cd:de:34:6e:f6:7c:9b:9a:d4:ad:62:c0:88:
         e7:87:85:79:a5:04:9c:f3:58:f4:24:d6:5a:f7:56:ab:5d:ce:
         ee:1d:09:40:5f:c0:d9:38:4f:59:7f:95:8e:4c:9b:e0:57:8d:
         20:8e:a3:e0:96:ff:c4:f8:33:7d:d7:a7:55:ec:52:b2:dc:41:
         d9:e9:54:10:52:38:e5:bd:c0:fb:fa:d9:87:35:34:a0:e8:1a:
         86:ad:4b:51:10:ee:c4:c9:10:98:a0:bf:8a:4e:0c:96:e2:9c:
         45:c7:7a:6c:66:70:96:7e:83:5b:57:a9:19:a0:e5:46:92:d3:
         f4:f8:f6:1a:cc:24:a6:ca:02:9e:d6:87:2c:9d:de:25:b7:8d:
         b5:69:32:95:26:c8:0c:fd:2c:85:12:6d:f5:ab:df:32:ff:67:
         cf:f3:26:24:54:e5:32:ad:05:dc:e0:d7:48:55:af:18:80:db:
         0d:f0:76:68:79:73:e7:9e:8c:14:0c:eb:96:40:43:98:1e:5e:
         25:83:94:7f:88:80:22:0c:69:da:fb:98:a2:85:24:ce:ab:1f:
         59:b2:37:2c:54:66:92:19:84:0a:74:8c:84:8a:59:d3:1b:72:
         e9:e0:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----