This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
File:                     cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer (raw, json)
Hash identifier:          lOEK3D8wO+mR5bt7VICD/ByDSD4GGCGzT3uA7vGzou0=
Subject key identifier:   71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       60E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:38:38 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 103.78.118.0/23
                          IP: 202.71.48.0/20
                          IP: 202.90.208.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24807 (0x60e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:38:38 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:9a:61:67:e5:45:8a:b0:14:74:7b:78:c0:
                    c7:d8:82:36:31:08:31:05:1f:9f:09:5d:8d:cb:dd:
                    39:26:a6:0e:27:15:ca:64:6b:c4:25:ac:f9:28:a3:
                    4f:bd:61:13:da:f1:71:0d:fb:b5:e3:70:70:e2:b3:
                    ac:40:fa:12:41:a7:c6:20:4d:60:65:79:8b:41:99:
                    16:43:bc:02:f0:5d:2c:25:7f:6a:18:b5:06:44:00:
                    e0:b9:bb:e3:71:c9:35:14:38:ab:4e:81:7a:3c:43:
                    c7:a2:f7:71:44:c6:36:6c:92:3c:eb:bc:5e:c4:bf:
                    1e:6e:8a:9f:71:8d:cd:2f:6a:34:d2:83:cd:fc:8a:
                    d9:0c:56:35:63:66:0a:01:c3:ed:c4:ba:47:5b:27:
                    95:6b:6e:a4:de:c8:81:2f:7d:9a:21:c9:68:5a:01:
                    2d:c5:48:b5:81:fc:e1:5c:5f:40:2d:a6:d4:91:40:
                    44:fd:de:7a:98:12:e9:78:41:ca:05:e2:29:d5:c9:
                    59:e1:a2:77:8c:4d:72:b3:7f:2b:36:65:9b:2e:b5:
                    77:9f:ee:f8:58:13:b0:25:2d:84:18:19:03:74:8b:
                    d1:bc:18:b2:6e:77:ac:f0:c7:f9:be:01:bc:75:cc:
                    d3:b4:98:57:0d:97:9b:96:19:2a:61:a9:d8:4c:52:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.118.0/23
                  202.71.48.0/20
                  202.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:c3:b7:7c:e9:8a:3b:ff:d4:4f:fd:26:a2:70:0d:da:dd:
         69:0c:88:da:6d:ca:8e:07:c7:28:b7:5e:e8:9f:b0:50:ee:36:
         76:86:a9:76:a3:50:c3:39:db:47:b3:81:bc:74:27:ac:0f:a6:
         a0:56:ef:d0:20:09:af:85:d7:a3:be:29:07:28:57:f8:81:89:
         43:09:ae:19:64:ed:ca:87:73:3a:ba:bc:25:9b:8c:3a:e7:c5:
         7a:1a:86:7f:a4:e4:e1:b1:99:0a:1a:d1:cb:00:2f:51:22:a5:
         e7:de:39:ad:31:e4:39:c9:63:c2:94:9e:21:d4:df:86:93:98:
         c4:24:aa:da:cc:58:fb:a4:54:2d:26:49:40:97:59:0d:95:8d:
         3c:48:46:91:0a:5b:89:e7:93:57:68:68:2a:db:df:cc:60:5d:
         c7:b2:d2:45:72:66:d9:7c:38:2b:34:14:84:1a:d8:18:c5:b9:
         76:b0:e3:cb:15:58:cb:d4:b9:0f:20:b3:9f:86:04:4b:42:bb:
         61:8e:1f:14:dd:a7:ea:c3:a8:f6:23:70:3b:78:1c:7a:26:83:
         9c:18:33:8b:26:c6:10:83:21:2f:7b:ec:d6:2e:ae:df:c5:73:
         be:3c:04:d0:c0:29:89:c2:c5:dd:27:c4:66:98:6e:ca:18:cb:
         f8:88:07:41
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICYOcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDExNTAxMzgzOFoXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoNzEwRjIxRjg0MzZDRDAzNjMxNTY0QzM4RTQ5NDBCRDlGQ0EzRjEx
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMZ0mmFn5UWKsBR0e3jA
x9iCNjEIMQUfnwldjcvdOSamDicVymRrxCWs+SijT71hE9rxcQ37teNwcOKzrED6
EkGnxiBNYGV5i0GZFkO8AvBdLCV/ahi1BkQA4Lm743HJNRQ4q06BejxDx6L3cUTG
NmySPOu8XsS/Hm6Kn3GNzS9qNNKDzfyK2QxWNWNmCgHD7cS6R1snlWtupN7IgS99
miHJaFoBLcVItYH84VxfQC2m1JFARP3eepgS6XhBygXiKdXJWeGid4xNcrN/KzZl
my61d5/u+FgTsCUthBgZA3SL0bwYsm53rPDH+b4BvHXM07SYVw2Xm5YZKmGp2ExS
wQ8CAwEAAaOCApIwggKOMB0GA1UdDgQWBBRxDyH4Q2zQNjFWTDjklAvZ/KPxHDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC84ODAvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg4MC9jUThoLUVO
czBEWXhWa3c0NUpRTDJmeWo4UncubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBZ052AwQEykcwAwQEylrQMA0G
CSqGSIb3DQEBCwUAA4IBAQBnjMO3fOmKO//UT/0monAN2t1pDIjabcqOB8cot17o
n7BQ7jZ2hql2o1DDOdtHs4G8dCesD6agVu/QIAmvhdejvikHKFf4gYlDCa4ZZO3K
h3M6urwlm4w658V6GoZ/pOThsZkKGtHLAC9RIqXn3jmtMeQ5yWPClJ4h1N+Gk5jE
JKrazFj7pFQtJklAl1kNlY08SEaRCluJ55NXaGgq29/MYF3HstJFcmbZfDgrNBSE
GtgYxbl2sOPLFVjL1LkPILOfhgRLQrthjh8U3afqw6j2I3A7eBx6JoOcGDOLJsYQ
gyEve+zWLq7fxXO+PATQwCmJwsXdJ8RmmG7KGMv4iAdB
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:39 2026 by rpki-client