This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
File:                     vbi4EKqFGPGejqHuFTlmJzas8Os.cer (raw, json)
Hash identifier:          MgPeugeIlRbywiiPyXcGrDX1cbxNXntTiAHK1PmmYsg=
Subject key identifier:   BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       6145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:41:24 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 103.170.124.0/23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24901 (0x6145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:41:24 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:b4:fc:cf:df:3e:67:43:85:c6:a2:46:94:
                    71:e6:49:25:e9:23:b7:d5:20:2a:0d:65:c6:b0:3c:
                    bc:df:2f:70:58:cc:ba:1d:15:56:c9:03:de:62:44:
                    8a:8b:88:95:96:89:97:c5:93:cb:c9:a3:ef:ee:b8:
                    f3:46:c9:53:33:c7:59:dd:20:72:89:9b:da:e4:b6:
                    b0:c6:39:09:cd:79:34:08:1e:e4:a9:1e:a0:a5:41:
                    04:a9:20:66:cf:bc:7a:25:dc:d2:a7:d4:e1:fe:4a:
                    b7:e0:73:20:00:2c:2d:f2:4d:35:f5:de:3c:0c:83:
                    80:fc:23:73:54:b5:49:02:72:7c:ae:4c:b4:24:56:
                    8d:04:a7:b0:cf:07:c3:78:21:84:1c:83:b3:33:0e:
                    80:14:16:bc:6c:52:76:64:e9:48:e9:68:f4:d7:04:
                    66:4f:c5:40:45:6a:34:d5:17:29:b9:b8:a2:69:5b:
                    29:9f:f8:c6:58:c2:8a:7a:9f:95:4d:59:c2:76:c9:
                    75:7b:fe:10:0f:90:9f:67:00:2b:61:78:c7:ea:70:
                    05:c1:aa:c8:b6:40:06:fe:98:a0:fb:2b:a3:33:74:
                    90:97:f7:5a:c6:3c:8a:50:10:e9:45:7c:55:0d:1d:
                    95:be:e6:26:c6:09:97:69:c9:08:1c:c5:48:c2:de:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:cd:23:9a:f0:4f:74:5e:a9:c1:18:c2:2d:d8:bc:af:f0:
         fd:c1:3a:ec:33:52:f8:c6:08:72:bd:57:f3:f0:ed:b9:83:fa:
         25:ef:71:cc:7e:e9:a4:95:24:38:e1:ca:c7:4a:7e:f2:14:68:
         a6:0a:c2:33:4f:6d:63:f5:63:a9:12:40:f5:0a:cb:dd:d7:c2:
         58:48:8d:76:ff:6e:d0:f8:fd:af:ad:89:52:bb:5d:29:ca:0c:
         3e:e3:82:81:fd:0d:59:0c:78:ac:7d:68:47:de:cd:31:fc:ba:
         e7:1d:5a:b2:e5:8b:d7:1a:55:35:b0:e1:6b:19:fc:90:10:89:
         9e:57:2a:b5:74:7d:af:04:a1:c8:2a:06:7f:6e:24:91:69:ed:
         f7:9b:53:20:8b:bd:8e:06:0a:49:1f:8e:fa:b4:e1:2d:4b:96:
         ad:e9:53:13:17:2f:0c:f3:ee:aa:40:c7:13:d3:68:af:a5:ca:
         58:d9:2f:e9:73:43:6c:2f:d5:70:c8:d4:f5:42:6d:9a:96:c5:
         e0:b5:29:e3:dd:ba:ad:b1:ba:29:fc:0a:5f:dd:30:9c:67:cb:
         1d:4a:d5:18:55:f9:cd:6a:45:bb:c1:27:8a:b5:45:8f:ce:81:
         43:3e:bc:06:45:9b:1e:db:f2:1b:aa:83:3e:f1:a2:08:5f:e1:
         45:08:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:05 2026 by rpki-client