This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
File: xwTJoNEV0mBiqRaordaY8hjgCoc.cer (raw, json)
Hash identifier: giR66RcXObb+eCTUA48slltCDbQYpLYkGD1CWwLohCA=
Subject key identifier: C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 61B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Jan 2026 01:44:43 +0000
Certificate not after: Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources: IP: 2001:2f8::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 15:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25014 (0x61b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Jan 15 01:44:43 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=C704C9A0D115D26062A916A8ADD698F218E00A87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:f8:99:f9:0d:c1:40:bc:a1:94:df:39:f7:
bf:43:f1:91:72:b1:f4:e0:80:58:46:36:3b:71:c4:
ea:87:62:b6:06:b7:71:bd:fe:4e:e2:bd:d7:41:f8:
ad:6b:be:96:1b:93:4e:3e:e4:83:5f:06:40:84:82:
60:df:47:ce:01:f4:0c:10:7a:b9:16:bf:65:0d:da:
44:e5:9b:3f:25:10:5d:32:5e:78:79:16:38:73:b5:
43:9a:e3:3a:bb:d1:e6:40:4d:bd:a8:aa:c1:f4:30:
f3:5b:b1:c2:05:d2:10:20:c2:cc:05:8a:70:27:d2:
67:58:54:cb:67:0d:5a:d9:97:7e:c2:7e:91:14:91:
06:a4:f0:77:73:0c:92:0c:6a:b6:19:dd:45:f7:2f:
ae:25:ee:05:62:83:e5:54:09:57:34:6b:d6:bb:cc:
08:c7:8e:82:13:fa:fc:31:0c:0b:00:42:8a:c8:1d:
89:1b:85:c3:e3:cd:c8:ad:03:cd:79:8f:70:07:41:
e5:70:96:94:3a:57:28:fa:d6:dc:5b:ab:50:30:ed:
a0:79:9f:3f:5f:00:8e:76:32:81:53:8e:0c:3f:d4:
50:f2:b5:42:9e:92:92:e7:1e:5a:22:06:51:6f:0c:
dd:a3:ec:4e:1e:1d:0c:4c:d9:a3:27:c9:f0:37:19:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2f8::/32
Signature Algorithm: sha256WithRSAEncryption
82:70:54:d1:5a:1b:dc:02:48:1b:de:ac:fa:ed:06:47:27:1d:
1f:3d:d2:c3:36:26:d5:12:36:47:d3:34:ea:94:86:fb:15:13:
87:a8:3b:41:65:fb:27:91:7a:47:7d:7c:c3:54:e6:60:0a:5b:
69:d1:11:db:5c:20:58:16:88:71:27:9e:6f:db:89:86:cd:76:
0a:c3:4d:8e:e7:ad:81:73:ca:61:3f:f4:df:40:a5:81:74:08:
c5:57:14:d1:86:57:81:a9:d8:97:8a:fc:8a:6c:0c:fd:16:b0:
90:a4:3e:36:59:9a:bb:05:67:2d:d6:29:a3:70:05:88:d6:57:
94:81:7c:e9:08:ed:50:32:93:fb:11:6f:b2:b4:52:00:73:de:
79:b3:7e:d3:cc:c8:6f:b7:9e:1e:8a:b9:dd:41:6c:7b:c9:51:
b0:fb:12:af:ad:49:b3:e4:71:7a:21:af:ca:cf:9a:12:dc:8b:
10:b0:fb:ef:01:27:e2:1b:67:48:97:3a:c1:6e:d0:a6:03:16:
7a:0a:fd:bd:78:c0:0c:39:2c:74:16:c1:6f:e6:92:28:15:dd:
82:d7:dd:96:f8:48:c3:a3:6c:60:ed:24:40:26:3d:4d:86:5c:
e3:ed:ea:bf:ca:46:5c:03:4a:11:65:7d:9c:6c:3a:9f:a4:cc:
78:06:e9:3c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICYbYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI2MDExNTAxNDQ0M1oXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoQzcwNEM5QTBEMTE1RDI2MDYyQTkxNkE4QURENjk4RjIxOEUwMEE4
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTN+Jn5DcFAvKGU3zn3
v0PxkXKx9OCAWEY2O3HE6oditga3cb3+TuK910H4rWu+lhuTTj7kg18GQISCYN9H
zgH0DBB6uRa/ZQ3aROWbPyUQXTJeeHkWOHO1Q5rjOrvR5kBNvaiqwfQw81uxwgXS
ECDCzAWKcCfSZ1hUy2cNWtmXfsJ+kRSRBqTwd3MMkgxqthndRfcvriXuBWKD5VQJ
VzRr1rvMCMeOghP6/DEMCwBCisgdiRuFw+PNyK0DzXmPcAdB5XCWlDpXKPrW3Fur
UDDtoHmfP18AjnYygVOODD/UUPK1Qp6SkuceWiIGUW8M3aPsTh4dDEzZoyfJ8DcZ
WkECAwEAAaOCAowwggKIMB0GA1UdDgQWBBTHBMmg0RXSYGKpFqit1pjyGOAKhzAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAwMjQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDI0L3h3
VEpvTkVWMG1CaXFSYW9yZGFZOGhqZ0NvYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQL4MA0GCSqGSIb3
DQEBCwUAA4IBAQCCcFTRWhvcAkgb3qz67QZHJx0fPdLDNibVEjZH0zTqlIb7FROH
qDtBZfsnkXpHfXzDVOZgCltp0RHbXCBYFohxJ55v24mGzXYKw02O562Bc8phP/Tf
QKWBdAjFVxTRhleBqdiXivyKbAz9FrCQpD42WZq7BWct1imjcAWI1leUgXzpCO1Q
MpP7EW+ytFIAc955s37TzMhvt54eirndQWx7yVGw+xKvrUmz5HF6Ia/Kz5oS3IsQ
sPvvASfiG2dIlzrBbtCmAxZ6Cv29eMAMOSx0FsFv5pIoFd2C192W+EjDo2xg7SRA
Jj1Nhlzj7eq/ykZcA0oRZX2cbDqfpMx4Buk8
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:30 2026 by rpki-client