This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
File:                     nbu4hcPSk50dl7JOrYvQZxca0rI.cer (raw, json)
Hash identifier:          wp7d+bY5VgY942IB+LPb0cPyagmNmfI+EXbiwj61JIk=
Subject key identifier:   9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5FFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:31:28 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 118.238.128.0/18
                          IP: 125.63.32.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24571 (0x5ffb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:31:28 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:11:e2:c7:4c:cf:6e:28:34:48:03:71:f2:
                    ce:cc:2e:d2:93:cf:d1:e8:c2:66:cd:5c:af:bb:e0:
                    55:da:4a:63:b0:c6:28:72:83:3c:71:c6:cc:f2:e1:
                    12:f1:93:85:19:f2:ab:89:ed:90:9a:4d:24:bc:80:
                    40:83:39:af:4a:be:bc:23:2a:a5:43:7a:ab:3f:4f:
                    86:55:83:ff:61:ab:4c:e7:c0:a8:68:b7:73:e3:b5:
                    e9:0d:0a:22:1e:33:a2:68:75:80:c6:88:fb:67:4e:
                    47:d5:12:34:6b:e9:01:b8:aa:bd:6f:e1:81:e7:de:
                    19:66:32:ef:9b:d1:c7:fb:db:3c:79:00:eb:31:a0:
                    22:dd:47:af:2c:8c:65:7a:51:1b:dc:7d:5e:5f:19:
                    6f:13:94:52:83:cc:f6:bd:05:39:1d:29:37:bc:de:
                    29:ea:43:7d:fd:b8:69:8a:6f:66:d7:9e:d3:ce:97:
                    4e:64:84:3d:2f:b5:c8:34:07:4f:7a:9b:c6:b9:10:
                    41:d8:6f:4c:ef:59:7b:ff:99:2f:d0:86:d7:e1:f6:
                    61:9c:7e:9e:7d:1a:90:bc:6c:cf:8c:11:b7:53:e0:
                    a3:a0:e6:fa:db:49:5a:56:42:dc:a3:b5:90:04:a1:
                    2f:a8:26:c3:b5:12:93:27:19:76:b3:57:72:6f:10:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.238.128.0/18
                  125.63.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:48:f7:5a:6e:a0:2a:63:9f:41:58:fc:40:aa:dd:7c:c2:d5:
         e1:b8:a4:66:4c:02:74:39:ae:5d:aa:54:8e:1d:97:1a:01:54:
         90:ba:ab:57:6a:56:6f:bb:5e:7b:d7:ec:42:ab:54:1b:81:45:
         28:b8:82:bd:25:f3:e4:05:7d:26:ab:94:1e:ce:6b:e2:12:c2:
         0e:c3:9e:7e:79:8b:fc:7a:08:55:eb:d2:45:53:a2:40:4c:da:
         77:b5:1b:49:d1:3b:ca:de:34:25:af:6e:09:e9:27:32:fb:ad:
         b4:88:a9:27:3f:ab:9f:4f:f5:9f:01:57:57:60:a2:21:43:28:
         cf:23:f7:8f:ee:36:b1:80:ba:ad:50:c6:e9:c5:e5:e4:f5:e0:
         9e:c7:36:d3:af:fc:c9:d1:80:31:16:c0:b8:34:b5:da:82:32:
         45:d7:13:1e:8a:a2:0a:60:ee:6a:e7:d3:6b:fa:f7:53:9d:15:
         25:aa:00:f3:93:51:51:71:49:b0:3a:e3:11:ca:62:18:f8:a9:
         18:b5:31:99:c5:e4:b0:52:48:18:17:48:53:e5:01:d0:93:2f:
         05:83:ea:a9:2c:45:17:8c:6e:1a:01:70:e0:f6:dd:17:9f:60:
         6b:94:80:d3:d5:44:a0:a9:ff:62:8a:83:9c:70:b0:01:2d:50:
         5e:2d:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:17 2026 by rpki-client