This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer File: XQVbLarEiHjMmxEnopzxFmaSCiM.cer (raw, json) Hash identifier: BrMRulG8vR/tFXUuJoL0w3IJ8e3LSvUM6gLwb/T8qqM= Subject key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 610B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 Jan 2026 01:39:43 +0000 Certificate not after: Fri 15 Jan 2027 01:30:02 +0000 Subordinate resources: IP: 103.24.168.0/22 IP: 103.235.124.0/22 IP: 124.47.64.0/18 IP: 202.52.16.0/20 IP: 202.91.48.0/20 IP: 202.122.224.0/19 IP: 202.171.112.0/20 IP: 203.76.64.0/19 IP: 203.140.240.0/20 IP: 203.179.0.0/20 IP: 203.191.208.0/20 IP: 211.2.184.0/21 IP: 211.125.96.0/19 IP: 219.100.64.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 19:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24843 (0x610b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jan 15 01:39:43 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:fa:25:d4:c5:79:7d:36:d0:3b:cd:72:47: bc:73:aa:d7:c2:28:8e:bf:86:cc:02:5d:0b:41:33: 1c:2a:b7:c7:77:af:34:5b:28:49:a4:d2:70:e3:7f: bf:f8:25:91:2d:e9:12:dc:fe:bc:3c:15:61:3e:db: b3:3a:f7:d7:c1:12:72:79:c9:bb:e6:4f:c5:36:7f: da:43:54:5e:24:e2:10:9d:14:cb:d8:eb:dc:12:eb: de:6e:5d:a4:4b:1f:a7:bd:57:31:9f:c1:4d:4b:b3: 6a:d0:0a:b6:ce:d8:80:31:51:62:99:b0:23:29:37: cc:50:4b:fe:e6:ba:4b:be:53:44:0e:c6:7c:2f:55: e2:4f:a4:40:ac:84:b1:b2:73:a8:da:7c:e5:04:69: 3c:e4:05:7e:b4:41:e9:8c:37:41:e6:c1:13:41:14: 3a:a0:e0:58:c0:c5:e4:6c:76:aa:ac:9f:81:60:c5: a8:b0:f1:4e:ef:27:b8:c9:0a:26:ee:a5:50:60:71: 99:2c:08:5d:1e:e9:d9:76:be:00:0c:48:68:d8:7d: 6d:6e:86:c7:b3:7b:1f:5c:a3:93:f4:b9:a7:b4:d4: 6d:7b:40:9f:21:11:fe:89:51:97:13:6f:f1:29:ed: 7f:0d:e2:a3:18:e0:33:ec:01:f0:ab:b1:d1:fe:35: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.168.0/22 103.235.124.0/22 124.47.64.0/18 202.52.16.0/20 202.91.48.0/20 202.122.224.0/19 202.171.112.0/20 203.76.64.0/19 203.140.240.0/20 203.179.0.0/20 203.191.208.0/20 211.2.184.0/21 211.125.96.0/19 219.100.64.0/22 Signature Algorithm: sha256WithRSAEncryption 12:99:91:f5:e0:97:35:96:63:23:4b:f5:32:e3:b3:86:69:cc: c2:a8:a9:8d:f0:ca:ab:26:f3:47:ed:bc:04:0c:66:5c:09:73: c4:2d:2d:87:62:4f:c8:7d:b1:3e:3e:25:5f:9f:44:8f:93:09: e8:68:67:0e:72:ba:31:3f:0c:4f:db:63:9f:01:82:18:61:ce: a2:ab:f5:b7:7f:59:2a:72:d2:17:4c:d8:42:02:d3:23:24:10: 8e:9b:77:31:f1:72:8a:7b:71:78:3c:60:23:82:58:19:8b:c3: 5e:14:13:ba:62:cc:d6:84:ca:26:97:22:6a:28:67:c5:01:50: 77:e0:69:50:9e:f5:d9:07:c4:24:3d:3d:a7:99:10:8b:11:70: 9d:b7:be:81:60:2c:b0:20:f9:85:13:05:ef:2d:56:ec:87:1e: 4d:70:ae:74:cb:2c:44:b8:c0:5a:87:42:c1:5e:ab:f4:68:6c: c1:c8:8d:d7:e5:98:48:01:95:0a:e8:0a:c1:f1:67:e0:d0:41: c3:88:1f:1c:94:50:49:fc:06:82:77:e8:21:37:79:fa:31:79: a3:fc:d1:fe:e5:d1:2a:ca:13:d4:c7:d6:56:a6:78:4a:41:4e: f2:14:3d:84:3d:2f:04:0a:66:28:c4:02:ef:55:88:11:59:af: 0d:9c:90:e6 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgICYQswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDExNTAxMzk0M1oXDTI3MDExNTAxMzAwMlowMzEx MC8GA1UEAxMoNUQwNTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEy MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL9+iXUxXl9NtA7zXJH vHOq18Iojr+GzAJdC0EzHCq3x3evNFsoSaTScON/v/glkS3pEtz+vDwVYT7bszr3 18EScnnJu+ZPxTZ/2kNUXiTiEJ0Uy9jr3BLr3m5dpEsfp71XMZ/BTUuzatAKts7Y gDFRYpmwIyk3zFBL/ua6S75TRA7GfC9V4k+kQKyEsbJzqNp85QRpPOQFfrRB6Yw3 QebBE0EUOqDgWMDF5Gx2qqyfgWDFqLDxTu8nuMkKJu6lUGBxmSwIXR7p2Xa+AAxI aNh9bW6Gx7N7H1yjk/S5p7TUbXtAnyER/olRlxNv8Sntfw3ioxjgM+wB8Kux0f41 E9kCAwEAAaOCAtQwggLQMB0GA1UdDgQWBBRdBVstqsSIeMybESeinPEWZpIKIzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8zOTMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM5My9YUVZiTGFy RWlIak1teEVub3B6eEZtYVNDaU0ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCZxioAwQCZ+t8AwQGfC9AAwQE yjQQAwQEylswAwQFynrgAwQEyqtwAwQFy0xAAwQEy4zwAwQEy7MAAwQEy7/QAwQD 0wK4AwQF031gAwQC22RAMA0GCSqGSIb3DQEBCwUAA4IBAQASmZH14Jc1lmMjS/Uy 47OGaczCqKmN8MqrJvNH7bwEDGZcCXPELS2HYk/IfbE+PiVfn0SPkwnoaGcOcrox PwxP22OfAYIYYc6iq/W3f1kqctIXTNhCAtMjJBCOm3cx8XKKe3F4PGAjglgZi8Ne FBO6YszWhMomlyJqKGfFAVB34GlQnvXZB8QkPT2nmRCLEXCdt76BYCywIPmFEwXv LVbshx5NcK50yyxEuMBah0LBXqv0aGzByI3X5ZhIAZUK6ArB8Wfg0EHDiB8clFBJ /AaCd+ghN3n6MXmj/NH+5dEqyhPUx9ZWpnhKQU7yFD2EPS8ECmYoxALvVYgRWa8N nJDm -----END CERTIFICATE-----Generated at Sun Jan 25 23:07:19 2026 by rpki-client