This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer
File:                     iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer (raw, json)
Hash identifier:          0RzU3p7404oMkYPw9zZuD4s73mtvuuX7mkn+Ttndyrc=
Subject key identifier:   88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       6009
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:32:07 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2401:5300::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24585 (0x6009)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:32:07 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=88AC5827EA5086C58535538005B12A51FCD1F0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:2d:f8:2c:41:44:8b:d5:26:b1:03:a5:ed:
                    7e:f2:d7:1d:50:56:c5:f9:4d:3a:14:32:42:2a:bf:
                    87:e8:af:33:ef:71:cb:a6:c6:33:77:aa:a5:46:b6:
                    ee:8f:3e:02:45:1c:d7:cb:37:c9:51:42:6f:b1:6a:
                    27:01:b5:28:b8:25:76:6b:1b:08:ee:49:af:b6:9d:
                    88:e0:7e:b1:d7:cb:7e:cc:d2:60:08:8c:4d:7a:fd:
                    ef:24:4d:de:ae:58:71:19:96:b3:37:5b:d7:bb:45:
                    1f:4d:12:4c:cd:0b:a0:b8:c1:34:06:05:6f:1c:78:
                    2f:18:61:6f:60:63:5f:12:fb:9b:b4:24:18:a3:1e:
                    6f:da:5d:26:bd:95:70:ef:dc:9d:40:f5:6d:b9:b2:
                    b8:19:23:2b:0f:2a:c3:9e:03:28:57:c6:d0:9e:57:
                    46:4a:8e:ea:7a:3a:41:de:52:4c:f0:7b:16:ff:ac:
                    f4:3f:f8:c4:82:ca:fe:94:dc:80:ab:c5:27:33:3a:
                    04:a9:ec:a5:c0:eb:89:f0:ff:2d:8a:39:b3:7f:5c:
                    60:49:aa:5f:2a:84:ee:46:e2:ad:e3:b6:03:43:ff:
                    39:99:09:48:1b:c1:ad:93:24:0f:52:7d:5a:23:2a:
                    36:f5:a2:d6:48:ff:b5:f9:cf:32:7e:0b:2c:f8:bc:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:ee:01:a7:59:da:b3:d1:40:d4:05:b3:16:e0:c9:76:df:
         11:59:92:ff:1f:b2:06:e6:29:14:b5:d8:d5:9a:ee:7f:c9:c0:
         a8:0e:9a:87:48:aa:89:8c:7d:65:ac:b8:c5:10:09:4c:b8:44:
         27:42:56:bd:01:c0:de:a3:50:b8:ed:59:22:be:7c:c3:68:9f:
         2b:4c:65:d9:17:1b:e5:3f:b0:a6:67:a6:53:c9:ff:84:30:f7:
         0f:40:c8:4d:00:dc:da:d0:e7:d5:f5:b0:1b:b1:fe:0b:8a:89:
         fc:ec:13:88:d1:a1:82:33:ef:ed:f8:2b:fb:af:d1:37:a1:51:
         ab:e4:d0:15:2e:8b:43:a6:48:7c:c3:f1:a1:4d:c3:b6:bc:a7:
         ae:51:50:64:48:04:47:fc:d7:3b:f6:ab:4c:c6:69:91:6d:43:
         32:de:69:7a:6a:f6:db:24:58:90:91:a8:38:f9:ef:ce:e4:4d:
         6a:7b:ec:15:96:c4:07:27:90:9b:76:cd:97:13:bd:89:97:c5:
         bd:f0:6e:b0:30:b0:7a:46:7c:1f:fc:c0:fd:83:f5:6f:54:07:
         90:8e:26:54:6c:5e:1e:5e:a1:d0:04:ca:1b:40:71:f8:47:8b:
         83:02:06:88:b2:41:db:e4:9f:9d:70:cc:58:d0:f4:37:f4:40:
         26:c9:45:1f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICYAkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDExNTAxMzIwN1oXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoODhBQzU4MjdFQTUwODZDNTg1MzU1MzgwMDVCMTJBNTFGQ0QxRjBG
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALWLLfgsQUSL1SaxA6Xt
fvLXHVBWxflNOhQyQiq/h+ivM+9xy6bGM3eqpUa27o8+AkUc18s3yVFCb7FqJwG1
KLgldmsbCO5Jr7adiOB+sdfLfszSYAiMTXr97yRN3q5YcRmWszdb17tFH00STM0L
oLjBNAYFbxx4Lxhhb2BjXxL7m7QkGKMeb9pdJr2VcO/cnUD1bbmyuBkjKw8qw54D
KFfG0J5XRkqO6no6Qd5STPB7Fv+s9D/4xILK/pTcgKvFJzM6BKnspcDrifD/LYo5
s39cYEmqXyqE7kbireO2A0P/OZkJSBvBrZMkD1J9WiMqNvWi1kj/tfnPMn4LLPi8
lMUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSIrFgn6lCGxYU1U4AFsSpR/NHw8DAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAxOTQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTk0L2lL
eFlKLXBRaHNXRk5WT0FCYkVxVWZ6UjhQQS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAVMAMA0GCSqGSIb3
DQEBCwUAA4IBAQBtl+4Bp1nas9FA1AWzFuDJdt8RWZL/H7IG5ikUtdjVmu5/ycCo
DpqHSKqJjH1lrLjFEAlMuEQnQla9AcDeo1C47VkivnzDaJ8rTGXZFxvlP7CmZ6ZT
yf+EMPcPQMhNANza0OfV9bAbsf4Lion87BOI0aGCM+/t+Cv7r9E3oVGr5NAVLotD
pkh8w/GhTcO2vKeuUVBkSARH/Nc79qtMxmmRbUMy3ml6avbbJFiQkag4+e/O5E1q
e+wVlsQHJ5Cbds2XE72Jl8W98G6wMLB6Rnwf/MD9g/VvVAeQjiZUbF4eXqHQBMob
QHH4R4uDAgaIskHb5J+dcMxY0PQ39EAmyUUf
-----END CERTIFICATE-----