This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer
File:                     rT7LxCj-FH6KC7LmRIUA0xEqr2Q.cer (raw, json)
Hash identifier:          9Pjc5KIAcoi0zoIYIHX+hRCt5l2f8f/qdzdaB/oZvrQ=
Subject key identifier:   AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       619D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:43:51 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2405:5340::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24989 (0x619d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:43:51 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=AD3ECBC428FE147E8A0BB2E6448500D3112AAF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:65:ba:4e:9f:78:e1:e6:00:b9:13:9d:fc:
                    6a:61:a0:55:0a:30:5b:1d:4c:70:a6:4b:26:91:1f:
                    2d:e8:db:61:7d:1a:af:38:0e:0a:c4:51:63:c9:3b:
                    41:d5:fe:c6:12:70:68:db:b7:a7:f0:2b:ee:cd:87:
                    3d:fa:52:2f:16:83:82:e6:12:e8:95:7e:0d:be:0b:
                    c3:10:a9:44:d4:fb:a9:d6:06:28:b0:51:11:9d:d4:
                    8e:0b:e9:2d:d1:0c:c0:65:51:e7:72:75:f0:7c:22:
                    c4:7a:0b:39:89:67:b7:00:1e:3b:39:8e:06:bf:92:
                    4b:fb:6c:d5:67:82:16:2b:28:9d:f8:bb:f8:5e:b8:
                    06:74:ba:0d:69:a5:a1:70:d3:96:62:f3:06:75:ee:
                    aa:aa:51:e6:4c:82:c9:49:8f:d4:f0:59:71:c7:ee:
                    b0:54:0d:7d:52:39:4f:1f:bb:7b:ca:c8:9a:05:56:
                    1c:ff:1b:6d:0f:1c:7e:21:d0:90:6d:d4:d0:2b:10:
                    fa:2f:51:58:ec:a9:ac:17:c1:8e:41:37:ae:46:43:
                    86:68:6a:48:9b:1d:c9:99:32:ff:c3:fe:41:76:02:
                    3c:64:b2:9d:53:58:99:a2:b3:7e:75:c3:40:ad:24:
                    5b:bb:61:70:5c:6c:ad:17:f4:e1:f3:ca:a2:23:ec:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:CB:C4:28:FE:14:7E:8A:0B:B2:E6:44:85:00:D3:11:2A:AF:64
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30353/rT7LxCj-FH6KC7LmRIUA0xEqr2Q.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:5340::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:90:3c:e8:9d:47:f7:25:ba:9e:32:33:d2:ac:e4:af:6e:
         94:53:08:90:7b:85:e6:87:fe:24:fd:47:28:15:0a:d1:86:8b:
         6f:27:35:88:9a:00:fb:bd:65:92:18:ac:6d:49:82:3f:0a:bd:
         59:a5:c4:f9:c4:df:8a:c1:23:28:ed:a7:b8:b8:69:4f:fc:f4:
         12:59:6b:17:e9:83:7a:80:2a:35:02:93:8b:a8:1b:8a:a6:06:
         52:90:60:cf:0c:8c:81:57:e8:63:41:78:10:37:9d:ad:e3:f2:
         95:b4:80:3d:11:9c:a6:21:a6:b8:bf:6f:40:0a:33:59:00:7b:
         4a:5e:dd:fe:ac:4b:d1:b2:10:db:55:c5:79:97:b8:cf:83:f0:
         f7:82:8e:0f:b2:c6:2d:59:11:36:3e:53:3b:95:10:84:05:5a:
         c7:64:22:f7:82:4a:7c:f3:f7:1b:5b:c5:d4:4c:59:fa:ae:62:
         63:d4:16:ff:f6:4a:9c:a5:e7:c2:23:4c:b0:f6:65:e9:1a:de:
         78:c1:4c:7b:a5:dc:f4:d2:da:42:84:2c:04:1d:17:1d:ec:b8:
         43:4b:b0:34:93:74:ea:2c:54:9b:64:7a:04:a0:2c:a1:33:5b:
         74:8b:97:9f:0d:ee:88:f0:79:b4:a5:eb:8a:e7:e1:60:00:74:
         35:3a:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----