This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
File: l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer (raw, json)
Hash identifier: 3rHhxO50G24q1CYBsV/o5myCebUR66668tTWGm82zfI=
Subject key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5D0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Nov 2025 01:39:28 +0000
Certificate not after: Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources: IP: 2001:2f0::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23822 (0x5d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:39:28 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:2c:56:40:ef:1b:56:45:1a:b9:05:ca:99:
ac:68:6e:70:37:ff:db:c6:95:0b:aa:72:46:b8:ef:
b3:5f:d5:ba:0e:6b:ba:d6:8b:d7:82:24:9c:34:ac:
57:98:3a:5a:e6:a8:0d:65:2f:75:36:34:b5:5a:c5:
f2:f1:12:6c:9e:ea:ac:2f:16:02:5f:e7:06:ba:10:
f5:3f:dd:97:57:fd:7a:64:12:99:a7:1f:08:91:f5:
7f:a9:f6:56:19:d5:a0:e7:04:8f:6f:6c:88:e6:a2:
50:c6:27:2e:e6:c1:00:87:5d:f0:13:39:b8:bb:51:
c7:b9:39:19:d5:9f:d2:73:a3:15:55:d7:ac:b0:0e:
87:b6:25:17:1e:62:a7:c4:64:ec:a6:87:64:9b:2e:
f2:65:44:6b:a1:67:4a:85:fd:44:8c:23:d8:20:58:
11:f0:18:5a:0c:d1:9a:76:28:26:9b:2d:1d:ed:48:
1b:5c:94:01:ce:bd:3b:79:aa:08:2e:75:aa:7a:02:
ed:b3:94:dc:5c:67:f3:58:64:b0:cd:6b:80:ab:d2:
34:32:12:c3:08:7d:0f:40:be:a1:22:01:92:89:24:
58:f6:b6:c0:8d:b3:fe:38:fc:0a:0b:b5:41:b8:00:
7f:2a:2c:4f:9a:00:99:58:49:80:08:21:22:3f:79:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2f0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:54:7d:10:64:54:2d:b8:6e:23:86:b1:4e:a2:5a:3b:3c:5f:
76:50:6f:31:89:b1:94:fd:f1:cb:a2:b4:aa:5b:74:d6:ad:a4:
30:5f:25:23:90:38:e7:c1:db:7a:a5:cc:ea:fc:84:5f:ce:40:
87:11:67:f7:45:ea:6c:95:1d:cf:e4:94:04:95:5a:9d:c9:f8:
d3:78:58:d1:aa:eb:22:64:c5:e4:ca:83:4c:df:ac:cc:7a:98:
9d:66:66:f6:a3:b9:3a:87:34:e5:1b:5a:c4:41:68:e2:21:0b:
73:a6:2c:05:22:a2:e6:6c:b8:38:9d:0e:0b:bc:36:27:57:f8:
d3:a9:ee:50:da:99:11:d5:46:4d:cc:43:55:88:82:d6:52:a4:
65:82:ab:40:e0:aa:83:d9:a8:e2:36:cb:74:09:19:07:7f:49:
d3:3f:84:b4:a6:ea:84:c4:37:77:7f:d4:db:2c:f3:97:e2:3c:
be:be:dc:ff:fe:7d:20:ce:9b:7d:fc:e1:f2:e3:cc:cc:82:89:
dd:73:ca:6d:9c:84:47:71:bd:ba:91:11:4f:5d:e4:1a:eb:6d:
ac:c3:73:84:7e:08:18:17:3e:6c:4f:ca:1f:5f:d0:2f:7b:36:
8e:36:23:a8:68:fa:ee:7f:d3:6e:89:6d:c1:d1:ec:16:b8:e7:
07:ba:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:56:50 2025 by rpki-client