This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer File: cfdvoHc19oWZH8iCyIXiHvuxYbw.cer (raw, json) Hash identifier: qGEcAJpKrubthRW+HHVTkpOaYjahLZ1d+icvJ+u3xEc= Subject key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5D3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:40:58 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 61.195.32.0/21 IP: 61.245.104.0/22 IP: 61.245.110.0/23 IP: 61.245.124.0/22 IP: 101.203.48.0 -- 101.203.83.255 IP: 101.203.86.0 -- 101.203.127.255 IP: 103.203.156.0/22 IP: 126.52.16.0/20 IP: 126.52.96.0 -- 126.52.255.255 IP: 126.209.192.0/18 IP: 211.14.208.0/20 IP: 218.33.128.0/17 IP: 218.231.64.0 -- 218.231.159.255 IP: 218.231.212.0/22 IP: 218.231.244.0/23 IP: 218.231.248.0/22 IP: 220.38.0.0/16 IP: 220.42.0.0/15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23870 (0x5d3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:40:58 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=71F76FA07735F685991FC882C885E21EFBB161BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:a1:0d:60:46:fa:d4:b1:35:82:aa:90:92: 92:86:3a:1c:10:ca:37:f3:4d:a2:dc:58:a5:72:a5: 16:20:89:8a:15:8c:aa:72:48:b2:df:35:1e:08:73: ff:af:30:08:2e:75:27:ad:2e:a1:3b:51:9f:9a:c6: 30:6f:3f:c3:d8:53:5e:7c:ce:20:26:94:c5:30:13: 91:b4:44:ce:68:a8:dd:2e:a4:3f:0b:76:45:7c:0e: 46:98:ca:0e:2c:7a:05:17:e5:a4:c3:d9:ee:a4:fb: 33:ba:5d:85:06:a6:54:36:94:d5:60:e9:f6:4d:93: 3b:0d:b2:a1:c7:23:16:50:d3:83:9f:70:ae:c6:5c: 38:aa:2c:c5:96:71:4d:2c:3a:05:31:6f:93:a8:45: 70:f0:76:14:a5:7a:7f:84:92:18:4e:27:a3:7a:19: 60:79:31:28:90:30:ef:d5:7e:60:2c:d6:8e:84:52: b7:94:c9:a1:af:33:e3:c0:3b:ff:ee:c4:8d:65:d9: 13:7a:c6:2c:27:02:57:54:2b:7c:64:a1:cd:db:3c: 45:ad:c6:db:7a:95:b5:82:8c:c5:41:9d:52:03:f5: 54:9d:fa:e3:56:4e:fd:89:4e:ab:fb:c8:6b:8b:c3: 9c:52:32:d2:64:e8:2b:63:74:29:52:c1:57:d6:96: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.32.0/21 61.245.104.0/22 61.245.110.0/23 61.245.124.0/22 101.203.48.0-101.203.83.255 101.203.86.0-101.203.127.255 103.203.156.0/22 126.52.16.0/20 126.52.96.0-126.52.255.255 126.209.192.0/18 211.14.208.0/20 218.33.128.0/17 218.231.64.0-218.231.159.255 218.231.212.0/22 218.231.244.0/23 218.231.248.0/22 220.38.0.0/16 220.42.0.0/15 Signature Algorithm: sha256WithRSAEncryption 18:bc:a8:a8:ea:da:19:7e:f8:e6:a0:70:ce:4a:2e:d9:c2:15: 01:7d:a0:91:a0:4c:f2:08:c7:c3:3b:b9:7d:c2:ff:0a:48:b2: 91:bb:c5:eb:4c:cd:79:ed:f0:80:56:ed:58:fb:97:8e:ea:85: 8b:dc:58:1d:44:af:e0:88:6a:5a:5d:b7:95:fa:c1:04:04:ff: d2:3d:6e:95:1c:46:20:a8:7e:72:0a:28:5a:dc:38:90:6d:0f: c9:8b:1c:e6:c9:aa:d6:0e:f9:5c:8d:6d:0b:4c:c5:1e:35:4d: 7e:9d:50:83:76:85:74:be:13:a2:a9:9d:4c:d6:57:e0:58:34: 11:ca:5d:00:cf:2b:fc:24:fa:24:98:e5:71:68:f5:f2:38:6e: 55:fd:8d:ec:b6:e4:ad:23:cb:ab:be:91:bf:12:5f:2e:b1:19: be:00:d8:f7:65:48:25:f8:f8:bb:7a:45:ce:db:1a:28:ed:8b: 8e:6d:7e:1c:86:61:d6:55:24:76:73:2d:36:c0:de:50:88:c5: 7d:06:24:bc:11:ad:aa:55:1d:f1:4d:e7:19:70:45:87:58:9f: b0:9a:75:92:4f:db:fe:bc:3a:17:fb:8a:c9:ba:b1:7b:95:e5: 0f:c6:42:a5:25:69:e3:6a:2e:3c:64:78:91:88:35:42:36:3f: 2a:6a:07:6c -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICXT4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxNDA1OFoXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoNzFGNzZGQTA3NzM1RjY4NTk5MUZDODgyQzg4NUUyMUVGQkIxNjFC QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM4ooQ1gRvrUsTWCqpCS koY6HBDKN/NNotxYpXKlFiCJihWMqnJIst81Hghz/68wCC51J60uoTtRn5rGMG8/ w9hTXnzOICaUxTATkbREzmio3S6kPwt2RXwORpjKDix6BRflpMPZ7qT7M7pdhQam VDaU1WDp9k2TOw2yoccjFlDTg59wrsZcOKosxZZxTSw6BTFvk6hFcPB2FKV6f4SS GE4no3oZYHkxKJAw79V+YCzWjoRSt5TJoa8z48A7/+7EjWXZE3rGLCcCV1QrfGSh zds8Ra3G23qVtYKMxUGdUgP1VJ3641ZO/YlOq/vIa4vDnFIy0mToK2N0KVLBV9aW YZ8CAwEAAaOCAw4wggMKMB0GA1UdDgQWBBRx92+gdzX2hZkfyILIheIe+7FhvDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81OTcvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzU5Ny9jZmR2b0hj MTlvV1pIOGlDeUlYaUh2dXhZYncubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MIGmBggrBgEFBQcBBwEB/wSBljCBkzCBkAQCAAEwgYkDBAM9wyADBAI99WgDBAE9 9W4DBAI99XwwDAMEBGXLMAMEAmXLUDAMAwQBZctWAwQHZcsAAwQCZ8ucAwQEfjQQ MAsDBAV+NGADAwB+NAMEBn7RwAMEBNMO0AMEB9ohgDAMAwQG2udAAwQF2ueAAwQC 2ufUAwQB2uf0AwQC2uf4AwMA3CYDAwHcKjANBgkqhkiG9w0BAQsFAAOCAQEAGLyo qOraGX745qBwzkou2cIVAX2gkaBM8gjHwzu5fcL/CkiykbvF60zNee3wgFbtWPuX juqFi9xYHUSv4IhqWl23lfrBBAT/0j1ulRxGIKh+cgooWtw4kG0PyYsc5smq1g75 XI1tC0zFHjVNfp1Qg3aFdL4ToqmdTNZX4Fg0EcpdAM8r/CT6JJjlcWj18jhuVf2N 7LbkrSPLq76RvxJfLrEZvgDY92VIJfj4u3pFztsaKO2Ljm1+HIZh1lUkdnMtNsDe UIjFfQYkvBGtqlUd8U3nGXBFh1ifsJp1kk/b/rw6F/uKybqxe5XlD8ZCpSVp42ou PGR4kYg1QjY/KmoHbA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:54 2025 by rpki-client