This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
File:                     xwTJoNEV0mBiqRaordaY8hjgCoc.cer (raw, json)
Hash identifier:          giR66RcXObb+eCTUA48slltCDbQYpLYkGD1CWwLohCA=
Subject key identifier:   C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       61B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:44:43 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 2001:2f8::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 15:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25014 (0x61b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Jan 15 01:44:43 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=C704C9A0D115D26062A916A8ADD698F218E00A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:f8:99:f9:0d:c1:40:bc:a1:94:df:39:f7:
                    bf:43:f1:91:72:b1:f4:e0:80:58:46:36:3b:71:c4:
                    ea:87:62:b6:06:b7:71:bd:fe:4e:e2:bd:d7:41:f8:
                    ad:6b:be:96:1b:93:4e:3e:e4:83:5f:06:40:84:82:
                    60:df:47:ce:01:f4:0c:10:7a:b9:16:bf:65:0d:da:
                    44:e5:9b:3f:25:10:5d:32:5e:78:79:16:38:73:b5:
                    43:9a:e3:3a:bb:d1:e6:40:4d:bd:a8:aa:c1:f4:30:
                    f3:5b:b1:c2:05:d2:10:20:c2:cc:05:8a:70:27:d2:
                    67:58:54:cb:67:0d:5a:d9:97:7e:c2:7e:91:14:91:
                    06:a4:f0:77:73:0c:92:0c:6a:b6:19:dd:45:f7:2f:
                    ae:25:ee:05:62:83:e5:54:09:57:34:6b:d6:bb:cc:
                    08:c7:8e:82:13:fa:fc:31:0c:0b:00:42:8a:c8:1d:
                    89:1b:85:c3:e3:cd:c8:ad:03:cd:79:8f:70:07:41:
                    e5:70:96:94:3a:57:28:fa:d6:dc:5b:ab:50:30:ed:
                    a0:79:9f:3f:5f:00:8e:76:32:81:53:8e:0c:3f:d4:
                    50:f2:b5:42:9e:92:92:e7:1e:5a:22:06:51:6f:0c:
                    dd:a3:ec:4e:1e:1d:0c:4c:d9:a3:27:c9:f0:37:19:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:70:54:d1:5a:1b:dc:02:48:1b:de:ac:fa:ed:06:47:27:1d:
         1f:3d:d2:c3:36:26:d5:12:36:47:d3:34:ea:94:86:fb:15:13:
         87:a8:3b:41:65:fb:27:91:7a:47:7d:7c:c3:54:e6:60:0a:5b:
         69:d1:11:db:5c:20:58:16:88:71:27:9e:6f:db:89:86:cd:76:
         0a:c3:4d:8e:e7:ad:81:73:ca:61:3f:f4:df:40:a5:81:74:08:
         c5:57:14:d1:86:57:81:a9:d8:97:8a:fc:8a:6c:0c:fd:16:b0:
         90:a4:3e:36:59:9a:bb:05:67:2d:d6:29:a3:70:05:88:d6:57:
         94:81:7c:e9:08:ed:50:32:93:fb:11:6f:b2:b4:52:00:73:de:
         79:b3:7e:d3:cc:c8:6f:b7:9e:1e:8a:b9:dd:41:6c:7b:c9:51:
         b0:fb:12:af:ad:49:b3:e4:71:7a:21:af:ca:cf:9a:12:dc:8b:
         10:b0:fb:ef:01:27:e2:1b:67:48:97:3a:c1:6e:d0:a6:03:16:
         7a:0a:fd:bd:78:c0:0c:39:2c:74:16:c1:6f:e6:92:28:15:dd:
         82:d7:dd:96:f8:48:c3:a3:6c:60:ed:24:40:26:3d:4d:86:5c:
         e3:ed:ea:bf:ca:46:5c:03:4a:11:65:7d:9c:6c:3a:9f:a4:cc:
         78:06:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:30 2026 by rpki-client