This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer File: Zd5S5kvkPjKKpp86stNH-IM-xjc.cer (raw, json) Hash identifier: d6a7bjpw2o8/im6SV6zC1gn65Y0bMeOmBdz7K5QCpt4= Subject key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5F6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:42:12 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 27.122.64.0 -- 27.122.111.255 IP: 116.89.192.0/19 IP: 117.18.88.0/21 IP: 119.148.192.0/18 IP: 119.224.160.0/19 IP: 123.255.128.0/18 IP: 124.108.192.0/18 IP: 180.188.208.0/20 IP: 180.189.128.0/21 IP: 183.181.192.0/18 IP: 202.165.112.0/21 IP: 202.222.112.0/20 IP: 202.224.64.0/19 IP: 203.148.96.0/19 IP: 210.141.32.0/19 IP: 210.199.96.0/19 IP: 210.237.0.0/19 IP: 218.216.144.0/20 IP: 218.223.96.0/19 IP: 219.121.192.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24427 (0x5f6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:42:12 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:42:98:15:a8:33:49:5c:4a:28:a2:0d:3a: a8:77:04:52:22:06:c2:80:84:00:18:d5:15:af:f0: e0:97:bc:79:cc:54:f0:3d:32:f2:f4:01:05:98:c9: 35:f8:59:3c:e6:97:b2:66:d5:2d:00:3f:eb:71:a1: 82:c9:5d:a7:97:20:2a:20:3e:bc:5e:9e:fc:ff:26: c1:fc:bf:42:ba:71:4f:a8:27:fc:3b:f5:06:4e:77: 04:2e:1f:89:12:5a:08:b7:26:ca:8d:20:26:bd:78: d9:a3:d7:f8:f9:7a:13:e4:5f:9f:6e:5e:79:4b:74: 35:5f:68:22:f8:71:75:08:22:d3:f0:a8:cc:92:73: 96:6d:73:f4:ab:d8:a6:5d:97:06:40:36:74:11:3a: fd:e3:da:ba:fc:03:88:6c:af:fd:b2:45:a6:37:d1: cd:cb:a3:8e:cc:16:f8:6a:32:f6:5b:05:62:a0:ed: 8c:b0:71:19:c5:2f:46:cd:c0:52:64:06:fb:5f:ed: 2c:ed:9e:17:ad:6c:b6:d6:c5:9a:65:4c:df:0b:11: 79:b1:7d:d3:c2:25:39:5e:5b:80:e7:0e:5d:e1:f2: ca:28:1b:1d:3e:d0:af:a7:e6:3d:4b:1a:6b:51:31: c3:5f:f5:8d:c7:e8:16:60:b8:9c:d2:f4:f4:a5:ee: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.122.64.0-27.122.111.255 116.89.192.0/19 117.18.88.0/21 119.148.192.0/18 119.224.160.0/19 123.255.128.0/18 124.108.192.0/18 180.188.208.0/20 180.189.128.0/21 183.181.192.0/18 202.165.112.0/21 202.222.112.0/20 202.224.64.0/19 203.148.96.0/19 210.141.32.0/19 210.199.96.0/19 210.237.0.0/19 218.216.144.0/20 218.223.96.0/19 219.121.192.0/20 Signature Algorithm: sha256WithRSAEncryption 38:30:c0:1f:ee:26:f6:16:10:3e:87:8e:a5:d1:1d:ed:ab:05: e5:29:84:0e:96:9d:42:d6:77:0b:f6:12:f9:90:f3:7e:5b:d4: ed:22:11:ad:fc:5d:bd:f0:06:13:36:64:d3:79:17:c4:be:e0: df:a8:09:51:04:ba:6e:e2:0a:7f:5b:b5:ed:b5:aa:fa:a4:bf: 99:2a:7a:ae:58:c1:bf:bc:79:cd:ac:25:e0:1b:ce:15:7f:89: 86:33:25:c0:77:a3:b1:42:9d:64:8d:fc:6b:60:59:d9:b0:aa: 27:2a:99:19:60:3a:b3:f8:87:c8:44:a0:e5:21:75:31:7f:ed: 63:9a:dc:85:ce:16:a9:d4:01:ba:13:3c:63:55:34:58:da:7f: fd:6b:31:08:d9:3e:12:0f:81:52:1d:63:f8:b5:3f:79:27:d6: b5:fe:9d:99:80:2f:bc:1b:05:a4:0f:ea:83:9d:a3:12:ef:a5: 4b:33:88:e0:ca:82:f3:da:92:70:b6:74:58:65:a7:e2:66:18: 26:b5:5a:a3:c1:be:a8:2b:cf:1c:69:fa:a4:92:df:09:e6:d1: a5:e4:df:ec:76:1b:cb:7b:53:91:f3:23:6c:de:88:07:3d:c3: 07:94:56:8c:de:ce:5d:91:cf:4c:36:e8:d5:ce:33:08:c3:81: b4:8d:96:45 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgICX2swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxNDIxMloXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoNjVERTUyRTY0QkU0M0UzMjhBQTY5RjNBQjJEMzQ3Rjg4MzNFQzYz NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKelQpgVqDNJXEooog06 qHcEUiIGwoCEABjVFa/w4Je8ecxU8D0y8vQBBZjJNfhZPOaXsmbVLQA/63Ghgsld p5cgKiA+vF6e/P8mwfy/QrpxT6gn/Dv1Bk53BC4fiRJaCLcmyo0gJr142aPX+Pl6 E+Rfn25eeUt0NV9oIvhxdQgi0/CozJJzlm1z9KvYpl2XBkA2dBE6/ePauvwDiGyv /bJFpjfRzcujjswW+Goy9lsFYqDtjLBxGcUvRs3AUmQG+1/tLO2eF61sttbFmmVM 3wsRebF908IlOV5bgOcOXeHyyigbHT7Qr6fmPUsaa1Exw1/1jcfoFmC4nNL09KXu IakCAwEAAaOCAwMwggL/MB0GA1UdDgQWBBRl3lLmS+Q+Moqmnzqy00f4gz7GNzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC82OC8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNjgvWmQ1UzVrdmtQ aktLcHA4NnN0TkgtSU0teGpjLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDCB nQYIKwYBBQUHAQcBAf8EgY0wgYowgYcEAgABMIGAMAwDBAYbekADBAQbemADBAV0 WcADBAN1ElgDBAZ3lMADBAV34KADBAZ7/4ADBAZ8bMADBAS0vNADBAO0vYADBAa3 tcADBAPKpXADBATK3nADBAXK4EADBAXLlGADBAXSjSADBAXSx2ADBAXS7QADBATa 2JADBAXa32ADBATbecAwDQYJKoZIhvcNAQELBQADggEBADgwwB/uJvYWED6HjqXR He2rBeUphA6WnULWdwv2EvmQ835b1O0iEa38Xb3wBhM2ZNN5F8S+4N+oCVEEum7i Cn9bte21qvqkv5kqeq5Ywb+8ec2sJeAbzhV/iYYzJcB3o7FCnWSN/GtgWdmwqicq mRlgOrP4h8hEoOUhdTF/7WOa3IXOFqnUAboTPGNVNFjaf/1rMQjZPhIPgVIdY/i1 P3kn1rX+nZmAL7wbBaQP6oOdoxLvpUsziODKgvPaknC2dFhlp+JmGCa1WqPBvqgr zxxp+qSS3wnm0aXk3+x2G8t7U5HzI2zeiAc9wweUVozezl2Rz0w26NXOMwjDgbSN lkU= -----END CERTIFICATE-----Generated at Sun Dec 21 23:19:12 2025 by rpki-client