This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
File:                     jQIKiPyg9a27WlmKqBJVNOV1wTw.cer (raw, json)
Hash identifier:          pMcc7jseD6y2GxdgGjgyPfz4vcwwsYOkYKpDKBQQMVA=
Subject key identifier:   8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       61AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:44:22 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2401:b420::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25003 (0x61ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:44:22 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:d8:c9:9c:f8:2f:10:5a:f6:0e:5a:cd:b3:
                    12:bf:38:4d:fd:32:de:78:d2:8e:78:fc:ad:00:b0:
                    3a:02:a3:04:41:5f:d3:0a:ad:2e:e1:37:e6:8a:5e:
                    1d:24:69:3e:9b:9f:26:48:ce:8c:03:dd:08:17:07:
                    8c:cf:e6:4b:62:7d:98:da:2b:82:69:44:41:bf:01:
                    9a:39:bb:a5:cb:af:fe:a9:21:ae:0f:d7:6c:74:7c:
                    fd:21:f4:ca:87:09:62:8c:a4:93:97:74:e6:b3:90:
                    dc:08:67:65:d7:33:49:b5:0e:20:10:06:83:3b:f3:
                    8e:f6:01:e7:04:75:42:e5:3e:b0:f1:b8:57:f1:31:
                    0e:8f:04:92:a3:39:84:e2:07:65:3e:7e:f8:2d:09:
                    3d:37:1d:33:8c:1b:9a:b8:b6:b9:de:0c:c1:34:61:
                    98:b4:ec:83:54:42:78:2e:56:6c:30:c1:48:45:20:
                    84:08:3c:78:29:3b:07:7d:ac:ce:9c:db:e1:dd:8c:
                    55:e4:a2:55:66:6a:3e:7d:8b:cc:a4:c3:cb:8c:e1:
                    fe:ca:8e:5b:c4:cf:8e:42:32:52:76:dc:f1:4a:42:
                    0e:57:27:b0:94:0d:cc:54:77:83:4e:6e:85:e2:81:
                    e2:75:3c:c4:11:46:6b:9d:f5:d4:bb:3e:69:e2:be:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:f0:bd:d8:51:c0:c7:98:be:79:41:3d:f0:a1:26:06:77:
         7f:a6:90:28:f6:7b:83:3a:61:0f:9a:29:a1:2f:c2:ea:b1:c9:
         62:f6:c9:0f:d2:58:2e:c7:99:0b:4c:94:b1:21:f4:0d:b6:ae:
         4f:2e:38:a3:c3:68:b9:be:d3:14:43:c0:3f:a7:e5:cb:44:a9:
         a4:2c:02:24:13:c5:f9:ad:36:9f:de:c3:ab:04:58:fe:2e:fc:
         8f:7c:67:fb:94:72:73:07:07:34:a3:75:af:5f:c0:34:d4:8f:
         23:6d:14:b1:c9:da:92:59:4f:d1:2b:c0:ed:c7:20:f5:0e:b2:
         95:f3:ed:e2:d6:fc:f3:86:8f:b8:7b:43:89:a7:d7:98:8e:2e:
         25:6d:83:71:20:96:6d:91:a2:c9:71:5d:0f:36:ab:c9:70:3c:
         96:c5:62:67:b6:6a:ca:0f:61:be:81:40:b8:d4:be:be:ab:3b:
         72:ea:ae:6b:c1:24:6b:e2:1d:8b:dd:f9:0c:ed:30:76:ba:82:
         f0:f1:84:bf:e8:d7:38:ec:67:08:81:04:5e:4a:75:41:c0:66:
         12:5c:13:72:e9:ed:a3:76:b4:9e:69:29:c9:f2:42:cb:2f:0d:
         24:73:66:16:b4:18:9e:77:07:55:eb:8a:e5:b0:27:08:68:5d:
         52:a1:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----