This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
File:                     piJKoaybMP-6N30uvrl5ocN-0gI.cer (raw, json)
Hash identifier:          agR9SuUQ+LC23BXxgz5S9TD0v4b+ALe9plUKhKSs9Rs=
Subject key identifier:   A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5FD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:30:28 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2401:55c0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24537 (0x5fd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:30:28 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:78:49:69:c2:91:30:4b:fa:42:5a:11:ab:
                    8e:12:f5:32:49:dc:38:b1:dc:b2:d3:37:17:6d:2b:
                    55:5b:24:ea:8f:c6:2b:d6:ea:85:69:48:98:26:2c:
                    5e:59:89:d7:2c:34:40:19:16:3b:3b:4a:1c:c6:d4:
                    7d:7b:24:eb:55:fc:72:78:e6:4f:b2:07:e9:a5:54:
                    5a:45:3a:b4:1d:04:f4:2a:f5:5f:d4:9f:60:be:19:
                    d3:59:26:be:56:54:a9:14:0d:9c:67:e5:4c:37:d8:
                    5e:f1:dc:83:91:53:12:fb:11:06:7f:17:0d:fc:3d:
                    0f:8b:69:3a:75:94:77:58:85:a4:2c:41:60:92:3c:
                    24:1f:5d:9c:10:6c:e0:42:1a:76:f1:ef:52:7f:ed:
                    48:0e:03:2f:4c:bc:d2:84:36:3a:58:4b:a0:84:52:
                    bc:43:ab:34:16:4b:b6:a4:96:81:15:a7:2f:67:e9:
                    c5:0b:7a:c7:fd:0a:c9:94:78:76:56:99:2a:2b:73:
                    c9:fa:0a:a2:d5:5e:58:5c:89:93:50:25:d1:78:c8:
                    7e:92:fc:fa:63:47:c6:88:ec:a8:2c:58:e2:9f:25:
                    9a:43:84:3e:26:79:ea:1c:8f:2e:39:95:dd:ba:82:
                    47:4a:c2:bd:32:41:8d:e2:92:5d:42:5f:bf:a1:95:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:45:52:4c:62:9d:86:cc:c1:c8:27:96:ae:f1:75:91:90:7b:
         b4:00:eb:3d:ec:c1:8e:41:af:ed:8d:44:bf:22:7a:4c:88:66:
         9a:e6:80:9e:98:ce:5d:58:69:ae:09:6d:7a:51:58:2a:60:c4:
         0d:04:49:d8:18:af:15:e9:75:45:50:6b:c7:12:bc:09:bb:8c:
         1c:3a:99:e1:ce:3e:b8:be:a0:5d:d5:73:8c:73:25:2e:b5:81:
         ea:e5:02:5c:06:eb:53:fc:d7:b8:c4:8f:7e:25:ce:86:18:68:
         38:08:46:98:c7:9f:be:f7:dd:ec:38:b5:45:aa:7f:b5:11:48:
         eb:2b:c9:83:9f:25:9f:46:75:97:cc:e1:fd:24:3f:dd:b6:99:
         3e:74:4b:f8:ae:8d:f3:1a:9b:bd:8b:03:a4:29:b9:64:c2:a1:
         6e:57:11:4f:10:e2:79:c1:06:46:9d:31:87:5b:ad:6f:57:f6:
         3b:2f:b9:74:81:3b:ab:11:1e:dc:ce:f0:7d:df:b1:42:2f:c3:
         fd:6c:d8:6a:99:9e:f2:57:91:41:27:62:86:c4:5f:43:f1:0b:
         24:3c:73:47:1f:d1:fc:d6:60:71:fa:ff:18:0e:27:f4:0f:2d:
         01:c6:fe:3a:0a:e3:0c:28:7f:79:72:fd:ce:b9:f4:2b:fc:f7:
         6c:a2:24:ed
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICX9kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDExNTAxMzAyOFoXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoQTYyMjRBQTFBQzlCMzBGRkJBMzc3RDJFQkVCOTc5QTFDMzdFRDIw
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOFceElpwpEwS/pCWhGr
jhL1MkncOLHcstM3F20rVVsk6o/GK9bqhWlImCYsXlmJ1yw0QBkWOztKHMbUfXsk
61X8cnjmT7IH6aVUWkU6tB0E9Cr1X9SfYL4Z01kmvlZUqRQNnGflTDfYXvHcg5FT
EvsRBn8XDfw9D4tpOnWUd1iFpCxBYJI8JB9dnBBs4EIadvHvUn/tSA4DL0y80oQ2
OlhLoIRSvEOrNBZLtqSWgRWnL2fpxQt6x/0KyZR4dlaZKitzyfoKotVeWFyJk1Al
0XjIfpL8+mNHxojsqCxY4p8lmkOEPiZ56hyPLjmV3bqCR0rCvTJBjeKSXUJfv6GV
N5kCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSmIkqhrJsw/7o3fS6+uXmhw37SAjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAzMDAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzAwL3Bp
SktvYXliTVAtNk4zMHV2cmw1b2NOLTBnSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAVXAMA0GCSqGSIb3
DQEBCwUAA4IBAQACRVJMYp2GzMHIJ5au8XWRkHu0AOs97MGOQa/tjUS/InpMiGaa
5oCemM5dWGmuCW16UVgqYMQNBEnYGK8V6XVFUGvHErwJu4wcOpnhzj64vqBd1XOM
cyUutYHq5QJcButT/Ne4xI9+Jc6GGGg4CEaYx5++993sOLVFqn+1EUjrK8mDnyWf
RnWXzOH9JD/dtpk+dEv4ro3zGpu9iwOkKblkwqFuVxFPEOJ5wQZGnTGHW61vV/Y7
L7l0gTurER7czvB937FCL8P9bNhqmZ7yV5FBJ2KGxF9D8QskPHNHH9H81mBx+v8Y
Dif0Dy0Bxv46CuMMKH95cv3OufQr/PdsoiTt
-----END CERTIFICATE-----