This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
File:                     ZwGLTf5UvWROAAZBojS0cdsguJI.cer (raw, json)
Hash identifier:          O1LV9fiSkWeOF3g14gv56NJO8T6K7pVa/s33RKH7NLE=
Subject key identifier:   67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       60DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:38:14 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 113.192.20.0/23
                          IP: 210.173.160.0/19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24795 (0x60db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:38:14 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:2c:11:a3:b0:72:af:e7:62:3b:ed:d8:48:
                    27:c7:3d:2f:44:e0:e2:38:5e:68:27:46:c9:e7:69:
                    7b:38:fe:0b:95:5a:a2:78:87:ea:cb:7f:bf:57:90:
                    8d:25:04:30:2a:10:e2:79:87:25:01:cb:a2:bd:b1:
                    70:f2:85:6f:e1:f6:99:bb:c5:d3:2d:b2:2f:db:6d:
                    75:e7:12:7c:b6:55:e2:db:40:ae:ec:78:76:e3:9a:
                    3b:5a:9a:ca:b5:b0:1d:31:fc:24:3f:17:da:6f:39:
                    32:5e:e1:51:b1:81:8e:c4:f1:34:2a:d6:74:5c:ef:
                    ed:58:32:5b:ae:ad:5c:95:dd:8a:ac:b7:a7:5b:5a:
                    a4:f8:41:79:90:a7:e4:f8:50:38:19:94:c7:35:70:
                    b7:18:0e:f8:22:50:9c:79:53:83:da:6b:8d:da:7a:
                    f9:47:cd:75:c8:d2:3e:22:f3:7e:25:91:7b:71:fc:
                    5d:e8:54:3e:5b:06:cb:c8:1e:07:b1:c4:61:c6:58:
                    49:04:32:06:fc:7f:51:15:57:60:e9:03:b9:de:ac:
                    cb:53:5a:fd:5f:95:d7:3a:e0:ec:f0:d8:30:22:e2:
                    3e:e9:db:a1:11:c2:8c:2d:81:6a:1b:c5:7e:3a:60:
                    43:67:a5:c0:a7:e9:67:c9:fe:ed:59:b1:78:ea:a1:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.20.0/23
                  210.173.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:a8:ac:bd:7c:38:48:00:3a:67:ad:e7:84:a6:e9:87:fa:
         c8:82:cb:45:b3:0f:25:51:73:5d:65:a2:f5:d4:f1:0a:c8:a7:
         9c:be:0f:25:aa:2d:87:c3:11:44:47:b9:05:7c:89:30:b1:15:
         54:40:21:57:1d:c5:0c:4e:7e:7f:ea:6d:b4:6b:9b:08:56:75:
         e1:33:c7:1e:b6:2a:52:f2:be:b3:9b:1b:5b:e3:37:9b:60:d1:
         b7:31:a2:8c:c3:52:92:80:f5:69:7d:2c:49:34:ec:fa:e6:b6:
         74:1b:1c:19:08:1f:aa:6c:f8:aa:65:12:c0:77:4a:f9:14:74:
         3f:2c:86:b5:01:f5:b3:c9:13:14:6b:9a:99:8e:f8:e6:1c:23:
         02:25:e4:31:e2:7b:0b:d2:8b:a6:a6:29:f5:e6:95:0b:90:c9:
         d2:73:8a:82:07:a3:9a:78:52:e3:8d:ef:e0:8d:e5:fc:b3:eb:
         d6:56:c2:fb:91:3e:39:ea:9f:20:86:0e:3e:eb:0e:0e:fe:96:
         f3:3a:eb:9e:a2:b9:86:86:8b:da:58:cd:36:18:a7:f5:f0:24:
         12:5e:b4:54:cb:23:bc:ee:ec:8b:75:a6:15:38:09:20:79:0b:
         5d:9d:63:96:b8:b5:a1:e5:cb:bb:c8:b0:53:2b:22:ce:b6:78:
         35:cd:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:25:56 2026 by rpki-client