This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
File:                     mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer (raw, json)
Hash identifier:          beD88gCoNhm3GWx87W/Z6EbLbRxR0FrhAJD515xY1Fg=
Subject key identifier:   98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       611D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:40:18 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 59.191.128.0/18
                          IP: 61.193.128.0/20
                          IP: 122.201.0.0/21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24861 (0x611d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:40:18 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:8e:1c:ab:f9:d5:70:c9:81:0f:59:87:60:
                    eb:15:df:5f:31:57:e3:1d:46:32:28:fd:31:44:fc:
                    bb:c1:20:e4:e8:45:f8:9f:a2:cd:56:c2:82:77:2f:
                    06:49:81:e6:d2:c6:29:f8:27:4d:63:c2:2d:c5:f5:
                    06:10:79:56:e8:fc:17:8d:09:83:80:81:6d:ad:67:
                    6a:3f:7e:64:f1:41:07:6d:94:8a:ab:03:00:86:09:
                    d2:e8:19:be:d9:ef:78:0f:b3:85:ce:31:a1:a6:51:
                    b6:52:c8:7d:02:d1:08:e5:e3:b7:fd:e0:7a:75:0f:
                    27:a5:03:0f:e6:b9:bf:dc:66:c6:e9:1a:f6:91:3b:
                    22:1e:b4:6e:cc:3a:45:4b:65:f0:21:03:c8:48:88:
                    08:fc:81:40:99:79:d7:3f:24:37:7f:d8:12:c4:d7:
                    d5:85:9c:63:42:ba:9a:62:a6:b0:73:b2:38:da:d0:
                    aa:1e:9b:66:ab:1d:8d:50:46:87:a0:e6:8a:de:1e:
                    2a:f8:fe:8f:88:c8:b8:4e:19:f6:50:50:b4:a0:ae:
                    eb:a8:70:36:a7:01:b8:c9:d1:96:23:f4:7c:b6:00:
                    fe:7c:94:63:eb:48:95:66:93:40:c1:0a:f2:9b:87:
                    46:82:3a:f2:be:41:3d:bd:c3:6d:e3:aa:88:11:1c:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.191.128.0/18
                  61.193.128.0/20
                  122.201.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:75:8a:d8:3d:ea:c1:b5:7d:00:2f:cd:96:32:15:41:f5:
         d7:ca:7c:09:29:2b:a0:88:e3:6f:c5:47:e4:30:83:e5:d4:f7:
         8a:c4:ac:4c:78:d7:89:b4:30:b9:43:f9:ad:58:b6:80:91:6b:
         a7:c2:7f:25:f9:d8:fe:2b:65:7f:0a:ce:5f:26:ea:43:c9:2d:
         ab:68:c3:7e:d5:50:ef:19:10:49:d9:a7:34:04:c3:ca:d9:e4:
         0c:0b:cc:6b:5f:a8:e8:ba:fb:4f:8d:99:7a:7a:c8:81:2b:5c:
         20:d4:4b:1e:29:c2:e9:c9:cf:bb:79:4b:f3:39:93:73:3a:c6:
         3a:0c:e9:08:16:fc:69:60:25:7a:62:48:9e:3d:c7:bf:72:42:
         b1:26:38:7b:e8:d5:7a:6e:1e:02:bc:ea:43:22:07:bc:4d:0d:
         b1:fc:fc:3c:63:e0:a6:e8:65:55:be:d5:f5:7f:9f:c4:ec:b6:
         ec:2a:bb:13:2b:09:ab:3d:de:90:d6:3d:f9:1a:bf:5f:50:b9:
         79:29:ff:c6:fd:17:ba:44:eb:fe:64:27:b0:7d:e7:bb:fb:bf:
         ce:39:3c:7c:46:cc:54:46:04:f7:c5:de:a8:93:bb:7d:e2:76:
         a9:1c:66:d1:46:f9:6f:0d:20:5d:12:87:83:21:12:01:de:ca:
         1d:1b:47:4b
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICYR0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDExNTAxNDAxOFoXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoOThEMTI0QkY1NkIzNzhENjNFQzhCRDg1NkYyODNFNTNFOTY1RUNB
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhRjhyr+dVwyYEPWYdg
6xXfXzFX4x1GMij9MUT8u8Eg5OhF+J+izVbCgncvBkmB5tLGKfgnTWPCLcX1BhB5
Vuj8F40Jg4CBba1naj9+ZPFBB22UiqsDAIYJ0ugZvtnveA+zhc4xoaZRtlLIfQLR
COXjt/3genUPJ6UDD+a5v9xmxuka9pE7Ih60bsw6RUtl8CEDyEiICPyBQJl51z8k
N3/YEsTX1YWcY0K6mmKmsHOyONrQqh6bZqsdjVBGh6Dmit4eKvj+j4jIuE4Z9lBQ
tKCu66hwNqcBuMnRliP0fLYA/nyUY+tIlWaTQMEK8puHRoI68r5BPb3DbeOqiBEc
7ycCAwEAAaOCApIwggKOMB0GA1UdDgQWBBSY0SS/VrN41j7IvYVvKD5T6WXsojAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB
7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw
L2FwL0E5MUE3MzgxMDAwMC82MDMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt
cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzYwMy9tTkVrdjFh
emVOWS15TDJGYnlnLVUtbGw3S0kubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGO7+AAwQEPcGAAwQDeskAMA0G
CSqGSIb3DQEBCwUAA4IBAQCcRHWK2D3qwbV9AC/NljIVQfXXynwJKSugiONvxUfk
MIPl1PeKxKxMeNeJtDC5Q/mtWLaAkWunwn8l+dj+K2V/Cs5fJupDyS2raMN+1VDv
GRBJ2ac0BMPK2eQMC8xrX6jouvtPjZl6esiBK1wg1EseKcLpyc+7eUvzOZNzOsY6
DOkIFvxpYCV6YkiePce/ckKxJjh76NV6bh4CvOpDIge8TQ2x/Pw8Y+Cm6GVVvtX1
f5/E7LbsKrsTKwmrPd6Q1j35Gr9fULl5Kf/G/Re6ROv+ZCewfee7+7/OOTx8RsxU
RgT3xd6ok7t94napHGbRRvlvDSBdEoeDIRIB3sodG0dL
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:30 2026 by rpki-client