This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer
File:                     e5r2GKThvUClCRs5VuFc2ir2ydI.cer (raw, json)
Hash identifier:          tgWD7/CrQsefEM2EBWLPfciENx2rXtUqoggVs2d+ly4=
Subject key identifier:   7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       6196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:43:38 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2402:3160::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24982 (0x6196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:43:38 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=7B9AF618A4E1BD40A5091B3956E15CDA2AF6C9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:c2:a6:d0:77:09:ec:da:7f:2d:a2:02:0a:
                    31:57:cd:e7:a1:f7:38:5a:e6:f9:0e:2f:6b:a2:d2:
                    17:71:fe:77:a4:03:81:3e:9f:1a:c8:07:ea:36:e3:
                    db:3e:90:dc:22:94:da:fc:a5:76:85:b2:57:ee:1b:
                    1c:16:37:63:23:cb:e2:ca:df:9d:41:88:2a:d2:db:
                    de:25:4b:3d:7a:3d:02:66:0d:ef:ea:41:c3:38:ae:
                    17:03:c5:7a:15:c2:2f:36:2c:6a:c6:26:98:23:3e:
                    09:75:df:bb:5d:92:7c:ec:97:3b:73:24:dd:f8:43:
                    1c:96:f4:4e:ea:84:cc:3e:43:32:1b:15:c5:ef:04:
                    eb:81:a9:c0:13:72:7c:6f:34:a2:15:c4:4a:6d:1a:
                    1f:70:ba:10:89:31:c6:21:10:74:68:32:57:79:7b:
                    d4:83:02:03:68:9e:0b:50:4e:3a:bd:1b:90:64:67:
                    51:27:89:1c:03:7b:11:8f:ad:fb:6c:33:f7:de:d2:
                    17:ac:5f:27:63:95:7d:a5:1b:71:df:b8:ed:c1:d1:
                    e6:5e:37:d6:3a:49:a2:b8:cc:a8:59:c4:50:e4:5b:
                    e6:c2:a8:1d:d3:12:c4:79:99:ab:0e:76:8f:49:74:
                    de:5e:2c:8b:52:96:65:3d:4c:d0:5e:e8:17:c7:54:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3160::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:df:14:eb:80:a1:08:12:f4:69:7a:37:ba:63:39:20:95:6a:
         d3:d2:5a:18:c1:25:11:5e:38:d7:84:35:72:a1:b9:3d:ff:f5:
         be:7c:6c:23:ac:7d:6c:36:66:23:f8:2b:36:19:1c:fc:44:35:
         54:bc:d8:ba:ab:b1:99:44:af:11:9f:97:af:35:7f:e2:28:ec:
         48:c5:a4:c5:bd:ca:0a:0e:27:86:c6:ea:b1:a9:05:78:40:30:
         17:e6:f1:25:f6:35:d2:2f:5f:a1:04:ca:d1:0a:4f:89:d5:6e:
         b3:f7:1d:7f:e5:7f:26:b1:26:be:c8:2f:95:38:eb:bc:9b:fe:
         58:ac:22:3c:97:73:7c:4b:f8:78:b8:92:da:35:4e:f8:dc:8d:
         1a:ee:00:58:20:68:01:8a:ef:43:5e:00:f8:f7:ff:1a:44:14:
         fc:9c:6e:4d:8a:f1:be:5f:47:9f:86:99:5f:bc:2d:88:ef:7e:
         c6:69:c0:7b:83:a7:d6:f4:0e:33:bb:38:14:3c:41:d8:4b:d5:
         75:08:50:e8:94:85:af:00:44:39:7c:34:55:89:0d:c8:de:a8:
         a7:fd:a6:48:27:42:13:33:87:d7:5c:7d:44:60:a6:3b:50:e7:
         6c:6b:97:4e:1f:18:7c:e6:f7:98:ab:fc:cf:30:d6:73:9d:ca:
         0a:38:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:16:36 2026 by rpki-client