This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer
File:                     cbl08P003cNUr5YaeOhOUR01GmM.cer (raw, json)
Hash identifier:          t8sS0T0R0YXMWfVn0RT6ULYj1kiGNS97/KxnhrK/LXo=
Subject key identifier:   71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer:       /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:41:28 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 85.131.192.0/18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
        Validity
            Not Before: Nov 15 01:41:28 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=71B974F0FD34DDC354AF961A78E84E511D351A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:68:69:3e:17:91:99:b7:89:37:72:cf:a7:
                    60:97:49:d4:fb:6a:00:22:ba:04:ef:57:dc:c7:85:
                    93:6e:f2:6c:65:8d:3f:6b:c3:b2:18:ba:d9:8f:1c:
                    d2:c1:3a:d5:a1:ad:96:8e:2e:24:86:79:0e:b1:de:
                    f5:93:57:ff:f1:f3:6c:c1:63:38:0f:62:b1:80:40:
                    be:f0:f8:59:0b:3f:30:f6:69:2c:6a:d0:1b:0d:42:
                    b3:89:8c:4e:b1:ab:ed:85:af:bd:d4:91:18:fb:44:
                    56:8f:12:dd:da:2d:c8:1b:ae:f2:91:98:e5:cc:31:
                    c7:66:7b:30:80:d5:99:65:57:0b:ef:fe:ba:3e:db:
                    38:9a:eb:22:57:ce:87:9d:47:60:4d:a7:dc:76:57:
                    de:cf:ff:36:09:ff:f8:df:af:31:a0:37:dc:95:7a:
                    74:4f:1f:72:1e:fd:68:f7:78:4f:c8:d1:5d:4d:5b:
                    59:4b:b2:5b:e7:42:44:f4:9b:15:b8:7b:bd:b2:2c:
                    cc:b2:f4:ed:c1:93:40:b4:03:69:3a:71:36:84:d9:
                    ed:30:3c:e8:6e:be:ea:f3:1e:67:c0:74:f4:ef:82:
                    fb:d8:d0:4c:48:ff:59:80:36:8e:a5:58:ae:fa:78:
                    08:1e:8a:79:87:08:26:e1:4c:4a:ec:fc:91:50:56:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63
            X509v3 Authority Key Identifier:
                keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.131.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:8d:e3:48:a1:8b:a1:9f:77:c8:f0:25:0c:0b:60:6b:66:4d:
         d0:04:71:60:a1:59:3c:fb:a1:11:96:c5:22:ed:cd:79:89:8f:
         aa:25:96:8c:f0:78:41:c1:74:dc:f9:1a:a5:9b:21:0b:82:30:
         7b:53:e1:3c:45:34:66:e6:5d:f5:06:3f:d0:67:09:c2:36:ca:
         12:d8:c5:20:91:6b:66:33:d3:6f:fc:37:7a:ef:43:e6:2d:a1:
         8b:67:27:7f:0b:1f:c7:64:38:cd:86:ce:d5:59:ff:2d:fc:c2:
         15:06:76:a2:be:71:5d:24:aa:19:fb:dc:fb:0d:99:52:12:63:
         13:43:02:23:65:e6:1c:7f:da:a1:bd:5e:6b:dd:40:80:f0:66:
         79:18:76:7e:68:d3:c7:4b:90:1e:15:14:6e:58:3b:b2:65:2d:
         6e:6e:67:94:83:90:8b:80:bc:9f:3e:48:3b:50:4c:c8:28:ff:
         e4:e4:f5:85:1e:d8:0d:6b:38:59:bc:ba:11:67:f4:18:cb:38:
         7c:b4:9f:3c:c5:e6:ec:7f:86:ca:d0:c2:ad:64:7c:29:d2:fe:
         c5:5d:9d:55:26:f4:4a:69:84:b0:e9:b0:6d:0c:14:71:d4:b3:
         46:a0:90:52:2f:44:9b:c6:1d:eb:9f:b7:f0:02:27:6b:de:2d:
         c6:3b:97:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB
OTc0MEJBNDcxRjlFMB4XDTI1MTExNTAxNDEyOFoXDTI2MTExNTAxMzAwMlowMzEx
MC8GA1UEAxMoNzFCOTc0RjBGRDM0RERDMzU0QUY5NjFBNzhFODRFNTExRDM1MUE2
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOyaGk+F5GZt4k3cs+n
YJdJ1PtqACK6BO9X3MeFk27ybGWNP2vDshi62Y8c0sE61aGtlo4uJIZ5DrHe9ZNX
//HzbMFjOA9isYBAvvD4WQs/MPZpLGrQGw1Cs4mMTrGr7YWvvdSRGPtEVo8S3dot
yBuu8pGY5cwxx2Z7MIDVmWVXC+/+uj7bOJrrIlfOh51HYE2n3HZX3s//Ngn/+N+v
MaA33JV6dE8fch79aPd4T8jRXU1bWUuyW+dCRPSbFbh7vbIszLL07cGTQLQDaTpx
NoTZ7TA86G6+6vMeZ8B09O+C+9jQTEj/WYA2jqVYrvp4CB6KeYcIJuFMSuz8kVBW
H/8CAwEAAaOCAoYwggKCMB0GA1UdDgQWBBRxuXTw/TTdw1Svlhp46E5RHTUaYzAf
BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG
cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG
MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC85OTAvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzk5MC9jYmwwOFAw
MDNjTlVyNVlhZU9oT1VSMDFHbU0ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGVYPAMA0GCSqGSIb3DQEBCwUA
A4IBAQA/jeNIoYuhn3fI8CUMC2BrZk3QBHFgoVk8+6ERlsUi7c15iY+qJZaM8HhB
wXTc+RqlmyELgjB7U+E8RTRm5l31Bj/QZwnCNsoS2MUgkWtmM9Nv/Dd670PmLaGL
Zyd/Cx/HZDjNhs7VWf8t/MIVBnaivnFdJKoZ+9z7DZlSEmMTQwIjZeYcf9qhvV5r
3UCA8GZ5GHZ+aNPHS5AeFRRuWDuyZS1ubmeUg5CLgLyfPkg7UEzIKP/k5PWFHtgN
azhZvLoRZ/QYyzh8tJ88xebsf4bK0MKtZHwp0v7FXZ1VJvRKaYSw6bBtDBRx1LNG
oJBSL0Sbxh3rn7fwAidr3i3GO5d9
-----END CERTIFICATE-----