This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
File:                     xQNPu84HmaDyhoO9O6M5qb1kW9w.cer (raw, json)
Hash identifier:          LQuNCErdlfucULaZGqGoQwxhNW4Yk860Fzt3tY9hhn4=
Subject key identifier:   C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5EE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:37:44 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 61.114.64.0/20
                          IP: 61.195.128.0/20
                          IP: 120.50.224.0/19
                          IP: 120.72.0.0/20
                          IP: 202.180.192.0/20
                          IP: 218.231.224.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24290 (0x5ee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:37:44 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:d9:c2:0c:56:a0:b8:7c:49:2d:29:27:ce:
                    cf:dc:28:80:46:e6:7a:61:2b:0b:fb:c1:b6:4c:a3:
                    07:1e:2e:70:71:36:b4:82:64:09:b6:4a:13:46:1e:
                    26:47:49:c7:fd:d4:93:5d:6b:58:3e:64:24:a9:b6:
                    fa:fd:04:f9:85:a2:8a:73:ea:ad:d0:f1:82:28:09:
                    55:fe:5e:22:f9:c8:7a:24:7d:b7:ef:77:54:07:d6:
                    5e:1b:01:cc:04:bb:30:67:d1:c1:e3:b9:21:60:37:
                    d7:79:20:8d:55:37:a3:a8:62:88:22:32:53:4d:88:
                    bd:24:76:e1:9c:5d:f3:8e:45:c2:44:9a:9f:ac:a2:
                    4a:6a:ee:aa:06:71:63:50:b4:ad:74:48:fc:ac:2a:
                    36:74:46:2b:e2:ae:5b:53:63:96:59:7b:37:1c:c4:
                    ca:3f:59:f2:4e:17:e6:1b:7f:f4:fe:4f:1c:93:f0:
                    9b:df:60:7b:0c:d2:76:ad:7d:27:1c:6a:50:36:49:
                    22:84:f2:ab:86:c7:5a:33:15:c7:af:c3:e4:e3:f7:
                    d9:70:53:b8:26:75:1a:4b:93:56:ec:21:65:9a:e4:
                    79:34:b0:51:65:bd:7d:bc:18:69:6a:1a:5f:f4:4f:
                    6b:cc:7c:2a:7b:16:91:cb:d1:17:c4:d5:5d:6e:bf:
                    ae:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.64.0/20
                  61.195.128.0/20
                  120.50.224.0/19
                  120.72.0.0/20
                  202.180.192.0/20
                  218.231.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:5e:02:9e:96:59:06:64:41:86:bd:82:0f:78:73:86:06:e8:
         36:23:6c:a6:2e:07:37:1e:7c:b9:c0:76:ad:0f:27:96:8f:0c:
         0b:59:94:ac:89:89:37:19:83:0d:91:3b:c5:b9:a3:d5:73:cf:
         4b:13:b9:dd:4a:4e:c6:e1:a2:f4:a6:cf:87:4e:39:d4:26:27:
         aa:3a:81:fd:e1:8f:b6:7b:96:0e:8e:47:92:40:6c:29:0b:7e:
         c8:ea:7d:9f:4e:39:b8:c8:43:ee:df:6b:8f:2b:65:20:b4:93:
         8e:83:59:8f:c1:19:7c:d9:25:02:1d:ea:38:b9:42:de:aa:11:
         67:6a:61:0c:df:e0:a6:92:d0:fb:e7:80:64:d7:80:c3:98:ef:
         8a:87:12:b0:cd:59:a1:d3:e7:a2:8d:48:d9:44:2d:18:da:b4:
         c6:6b:d5:c6:69:10:9e:78:64:94:62:88:04:4d:45:b7:46:dd:
         75:90:8f:8c:2b:0e:22:32:c3:31:0c:7f:94:2e:9c:13:38:a8:
         20:3f:6f:e6:34:95:e8:13:c6:ef:47:5d:39:a9:5f:d0:30:31:
         96:ac:32:c2:4b:aa:fd:0b:19:cb:85:be:91:f3:38:32:2b:34:
         8e:99:00:11:22:3f:00:bc:c9:91:05:df:3e:1c:1f:d2:1c:cb:
         3d:1a:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:15:46 2025 by rpki-client