This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer File: rUdB8DSfvBWnCOKKLOMHkGysXeA.cer (raw, json) Hash identifier: mnczaYRkL2jTOsA3VHz9kaXt3hJBVStKaazIVN1GxEQ= Subject key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:40:27 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 14.1.8.0/21 IP: 61.114.96.0/20 IP: 61.206.208.0/20 IP: 103.29.48.0/22 IP: 111.91.240.0/20 IP: 114.134.96.0/20 IP: 114.134.128.0/19 IP: 126.52.0.0/20 IP: 180.214.224.0/21 IP: 202.169.64.0/19 IP: 202.228.240.0/20 IP: 203.129.96.0/20 IP: 203.170.32.0/20 IP: 203.215.56.0/22 IP: 203.217.156.0/22 IP: 218.216.0.0/20 IP: 219.100.0.0/22 IP: 219.109.64.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23850 (0x5d2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:40:27 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:44:ad:f7:17:ef:12:d4:3b:31:67:5b:20: 9e:f8:fd:16:a0:f7:8d:f9:d0:07:f1:87:7b:a3:3c: 62:e3:35:4f:20:38:a0:dd:0a:71:e8:d2:2a:02:48: 32:27:29:d2:2e:81:4c:a8:a5:d3:55:1d:a4:85:d6: 63:49:49:98:48:fc:33:2d:a8:18:e1:c3:03:48:af: 6f:43:6d:23:28:b9:d7:60:ad:e6:d4:58:4c:18:76: 91:5a:3f:f9:c2:11:ef:90:68:02:49:d8:2c:85:af: 8f:49:03:0f:4e:d2:d9:34:a1:38:85:f7:98:57:98: 51:a2:91:c3:68:4d:ca:06:b8:d1:f6:e3:95:fe:7d: e5:0b:e3:04:16:ed:25:bf:7e:e2:66:9f:b5:ca:2d: 93:6f:d9:c1:b2:5e:d0:fd:f2:40:af:86:a8:fe:67: 5b:b7:68:85:2b:87:e9:05:f6:5d:7e:a5:95:7f:cf: b8:16:ce:7c:ee:26:a7:b1:de:cb:16:56:ac:2c:3c: 44:66:96:74:47:4e:bc:eb:88:04:6c:49:c0:ee:25: 79:d2:08:9e:91:9d:fe:f8:2d:4b:c6:ae:92:91:3c: 94:0e:ed:2f:b3:3f:3b:cc:5b:c1:93:4d:18:ab:40: 27:a4:4e:c0:72:1d:d6:fd:ab:4a:e2:4f:77:43:fc: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.1.8.0/21 61.114.96.0/20 61.206.208.0/20 103.29.48.0/22 111.91.240.0/20 114.134.96.0/20 114.134.128.0/19 126.52.0.0/20 180.214.224.0/21 202.169.64.0/19 202.228.240.0/20 203.129.96.0/20 203.170.32.0/20 203.215.56.0/22 203.217.156.0/22 218.216.0.0/20 219.100.0.0/22 219.109.64.0/20 Signature Algorithm: sha256WithRSAEncryption 69:bf:aa:1e:63:87:8b:77:88:d1:b2:d0:d7:b5:fc:23:31:d8: 4e:87:4f:11:60:71:0d:44:64:5b:1a:6b:47:29:e2:21:26:88: 84:57:3f:43:97:0e:42:ba:e8:93:91:e9:de:d8:87:c8:ab:1c: 74:c9:3f:b8:9b:7f:0b:db:71:92:b1:27:ad:90:52:a4:e1:12: 46:05:83:ce:01:75:0a:c6:a4:b7:72:fe:5d:c1:13:2e:59:d3: 45:bb:ec:2d:ee:73:28:f8:88:6c:05:c7:10:f5:d3:4f:d2:c8: 13:1e:ff:6e:6b:e5:ef:7f:58:2f:33:62:ed:f1:4c:ed:42:dd: 85:c4:51:cd:50:b8:05:29:b4:ef:52:ec:c6:89:97:d8:23:85: 31:64:c7:40:f3:78:5a:f9:de:8f:54:a6:8f:41:45:3e:ef:84: 28:0a:99:18:7e:02:f0:2e:de:2c:d7:5d:a6:49:ab:b4:23:a0: 2e:c3:ed:43:98:2e:e0:9b:c0:ea:0f:d5:60:0e:72:bb:9e:a5: 82:91:8d:be:b7:b0:f5:4e:59:80:3c:ca:dc:6a:d9:ea:c6:36: 11:78:01:f2:0b:c2:04:48:0c:13:aa:ed:78:33:15:bc:60:d8: 4f:d3:7f:53:c5:94:9b:c1:e5:6d:d0:93:d4:44:cc:4c:af:77: 08:13:55:a7 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgICXSowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxNDAyN1oXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoQUQ0NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURF MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANM2RK33F+8S1DsxZ1sg nvj9FqD3jfnQB/GHe6M8YuM1TyA4oN0KcejSKgJIMicp0i6BTKil01UdpIXWY0lJ mEj8My2oGOHDA0ivb0NtIyi512Ct5tRYTBh2kVo/+cIR75BoAknYLIWvj0kDD07S 2TShOIX3mFeYUaKRw2hNyga40fbjlf595QvjBBbtJb9+4maftcotk2/ZwbJe0P3y QK+GqP5nW7dohSuH6QX2XX6llX/PuBbOfO4mp7HeyxZWrCw8RGaWdEdOvOuIBGxJ wO4ledIInpGd/vgtS8aukpE8lA7tL7M/O8xbwZNNGKtAJ6ROwHId1v2rSuJPd0P8 6acCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBStR0HwNJ+8FacI4oos4weQbKxd4DAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC80NTQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzQ1NC9yVWRCOERT ZnZCV25DT0tLTE9NSGtHeXNYZUEubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAw4BCAMEBD1yYAMEBD3O0AME AmcdMAMEBG9b8AMEBHKGYAMEBXKGgAMEBH40AAMEA7TW4AMEBcqpQAMEBMrk8AME BMuBYAMEBMuqIAMEAsvXOAMEAsvZnAMEBNrYAAMEAttkAAMEBNttQDANBgkqhkiG 9w0BAQsFAAOCAQEAab+qHmOHi3eI0bLQ17X8IzHYTodPEWBxDURkWxprRyniISaI hFc/Q5cOQrrok5Hp3tiHyKscdMk/uJt/C9txkrEnrZBSpOESRgWDzgF1Csakt3L+ XcETLlnTRbvsLe5zKPiIbAXHEPXTT9LIEx7/bmvl739YLzNi7fFM7ULdhcRRzVC4 BSm071LsxomX2COFMWTHQPN4Wvnej1Smj0FFPu+EKAqZGH4C8C7eLNddpkmrtCOg LsPtQ5gu4JvA6g/VYA5yu56lgpGNvrew9U5ZgDzK3GrZ6sY2EXgB8gvCBEgME6rt eDMVvGDYT9N/U8WUm8HlbdCT1ETMTK93CBNVpw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:01:55 2025 by rpki-client