This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer
File:                     cbl08P003cNUr5YaeOhOUR01GmM.cer (raw, json)
Hash identifier:          z6ASbmVzWqzEn0JJBnBlUOmRpWQcyY56vvcvNIfPCFU=
Subject key identifier:   71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer:       /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial:       0293
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:35:59 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 85.131.192.0/18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
        Validity
            Not Before: Jan 15 01:35:59 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=71B974F0FD34DDC354AF961A78E84E511D351A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:68:69:3e:17:91:99:b7:89:37:72:cf:a7:
                    60:97:49:d4:fb:6a:00:22:ba:04:ef:57:dc:c7:85:
                    93:6e:f2:6c:65:8d:3f:6b:c3:b2:18:ba:d9:8f:1c:
                    d2:c1:3a:d5:a1:ad:96:8e:2e:24:86:79:0e:b1:de:
                    f5:93:57:ff:f1:f3:6c:c1:63:38:0f:62:b1:80:40:
                    be:f0:f8:59:0b:3f:30:f6:69:2c:6a:d0:1b:0d:42:
                    b3:89:8c:4e:b1:ab:ed:85:af:bd:d4:91:18:fb:44:
                    56:8f:12:dd:da:2d:c8:1b:ae:f2:91:98:e5:cc:31:
                    c7:66:7b:30:80:d5:99:65:57:0b:ef:fe:ba:3e:db:
                    38:9a:eb:22:57:ce:87:9d:47:60:4d:a7:dc:76:57:
                    de:cf:ff:36:09:ff:f8:df:af:31:a0:37:dc:95:7a:
                    74:4f:1f:72:1e:fd:68:f7:78:4f:c8:d1:5d:4d:5b:
                    59:4b:b2:5b:e7:42:44:f4:9b:15:b8:7b:bd:b2:2c:
                    cc:b2:f4:ed:c1:93:40:b4:03:69:3a:71:36:84:d9:
                    ed:30:3c:e8:6e:be:ea:f3:1e:67:c0:74:f4:ef:82:
                    fb:d8:d0:4c:48:ff:59:80:36:8e:a5:58:ae:fa:78:
                    08:1e:8a:79:87:08:26:e1:4c:4a:ec:fc:91:50:56:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63
            X509v3 Authority Key Identifier:
                keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.131.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:40:01:56:c2:2b:22:c2:f1:78:12:7c:30:9d:e4:1c:0c:
         f3:fe:4f:1d:1e:bb:13:ff:96:4d:7b:eb:f8:ba:e0:88:0e:23:
         9b:65:8f:94:5f:b3:0c:ad:24:b8:29:9a:31:0d:f3:35:04:48:
         16:02:4a:9f:66:53:fd:31:3d:39:db:8e:33:73:41:93:3d:0b:
         d1:89:e3:7a:f9:c8:21:bb:72:3d:6d:9a:de:98:aa:dc:cc:ec:
         0e:a2:59:e8:ef:92:89:9d:93:80:2d:d3:c7:56:3e:1b:fc:f5:
         4b:b5:f5:21:45:09:d9:e0:89:22:0a:b9:bf:a5:03:2f:20:1f:
         61:50:1a:76:fb:c8:42:04:ce:e9:e0:f6:71:6c:68:c8:44:7f:
         d1:db:e3:12:f3:9f:53:e4:9a:d3:63:e9:75:ad:69:dc:87:c3:
         8c:0d:4e:71:ba:99:d3:01:94:6a:37:bd:8b:9f:0b:23:7d:2a:
         b7:75:83:59:1b:57:d1:cc:28:e6:26:51:28:51:4b:ee:c9:a7:
         e0:5f:b3:0b:e4:88:50:95:a2:3d:65:da:63:7e:19:e2:2d:77:
         10:8e:15:e7:ad:08:80:2d:2b:d4:23:0f:b8:1f:f7:4f:0f:b3:
         ab:17:66:bd:e4:d6:ba:55:8a:78:5a:5a:ef:7e:11:8e:f5:71:
         97:10:ff:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICApMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB
OTc0MEJBNDcxRjlFMB4XDTI2MDExNTAxMzU1OVoXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoNzFCOTc0RjBGRDM0RERDMzU0QUY5NjFBNzhFODRFNTExRDM1MUE2
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOyaGk+F5GZt4k3cs+n
YJdJ1PtqACK6BO9X3MeFk27ybGWNP2vDshi62Y8c0sE61aGtlo4uJIZ5DrHe9ZNX
//HzbMFjOA9isYBAvvD4WQs/MPZpLGrQGw1Cs4mMTrGr7YWvvdSRGPtEVo8S3dot
yBuu8pGY5cwxx2Z7MIDVmWVXC+/+uj7bOJrrIlfOh51HYE2n3HZX3s//Ngn/+N+v
MaA33JV6dE8fch79aPd4T8jRXU1bWUuyW+dCRPSbFbh7vbIszLL07cGTQLQDaTpx
NoTZ7TA86G6+6vMeZ8B09O+C+9jQTEj/WYA2jqVYrvp4CB6KeYcIJuFMSuz8kVBW
H/8CAwEAAaOCAoYwggKCMB0GA1UdDgQWBBRxuXTw/TTdw1Svlhp46E5RHTUaYzAf
BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG
cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG
MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC85OTAvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzk5MC9jYmwwOFAw
MDNjTlVyNVlhZU9oT1VSMDFHbU0ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGVYPAMA0GCSqGSIb3DQEBCwUA
A4IBAQBqW0ABVsIrIsLxeBJ8MJ3kHAzz/k8dHrsT/5ZNe+v4uuCIDiObZY+UX7MM
rSS4KZoxDfM1BEgWAkqfZlP9MT05244zc0GTPQvRieN6+cghu3I9bZremKrczOwO
olno75KJnZOALdPHVj4b/PVLtfUhRQnZ4IkiCrm/pQMvIB9hUBp2+8hCBM7p4PZx
bGjIRH/R2+MS859T5JrTY+l1rWnch8OMDU5xupnTAZRqN72LnwsjfSq3dYNZG1fR
zCjmJlEoUUvuyafgX7ML5IhQlaI9ZdpjfhniLXcQjhXnrQiALSvUIw+4H/dPD7Or
F2a95Na6VYp4WlrvfhGO9XGXEP/B
-----END CERTIFICATE-----