This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
File:                     oa5xzag3zu9pzhFNcByGUKCo-qk.cer (raw, json)
Hash identifier:          fQVondJnTWOxWRxJqiufVfbLCCpBIqD2z7HeU94wkzA=
Subject key identifier:   A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02747C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
caRepository:             rsync://akane.maru.co.jp/repo/1073c6/14/
Notify URL:               https://akane.maru.co.jp/oshirase.xml
Certificate not before:   Tue 11 Nov 2025 12:01:50 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 7719
                          AS: 9663
                          IP: 2001:df5:f4c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 08:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160892 (0x2747c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 11 12:01:50 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A91B82CE0000, serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:10:7b:4b:95:9a:71:45:6d:30:5d:90:55:
                    60:8f:54:5d:16:7d:cb:89:99:d8:c4:02:a6:62:59:
                    b2:72:27:6a:d3:fc:6f:91:a3:e2:b6:ba:29:12:22:
                    16:b5:85:db:94:1f:f4:f6:07:5d:96:7b:d8:22:f6:
                    24:ed:90:f4:6a:37:b0:d7:5f:f7:18:c9:ce:d9:2f:
                    86:d3:72:26:77:f3:04:eb:72:c7:8f:7f:d4:49:c8:
                    83:eb:49:eb:38:85:6e:0e:f6:cf:16:05:33:99:9b:
                    fa:23:da:51:e5:44:0a:b3:bf:84:9a:f2:22:0d:ad:
                    74:a5:8d:4a:47:c7:f4:54:5b:46:04:52:31:69:e2:
                    76:65:ca:e1:b8:71:9d:de:8f:17:96:37:0c:14:34:
                    08:4d:c9:f9:a3:5c:33:9c:db:c5:0a:ab:b9:83:32:
                    0f:0a:c5:f6:ce:6b:e4:db:81:4e:ed:da:75:6d:9d:
                    5e:21:de:30:43:4d:27:2c:db:09:eb:c3:f5:3c:fc:
                    e7:fa:af:f9:69:53:25:7b:b4:ee:50:0b:cf:6d:d0:
                    2b:de:ba:42:d6:ec:65:99:d1:b1:7f:26:b2:2b:c0:
                    a6:c1:bf:29:c9:7d:6a:b6:e7:56:ae:26:b4:83:48:
                    13:d6:9d:14:0a:e0:62:57:93:19:44:da:21:92:a2:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://akane.maru.co.jp/repo/1073c6/14/
                RPKI Manifest - URI:rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
                RPKI Notify - URI:https://akane.maru.co.jp/oshirase.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719
                  9663

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:2a:9c:c3:45:11:ab:f6:b9:73:15:70:33:b0:0e:d0:b6:e0:
         22:49:d0:37:c6:0a:a8:59:11:c7:ff:f5:e2:38:8f:01:48:06:
         7e:a4:79:cd:64:50:0c:72:c0:13:3e:e0:88:0b:93:1c:63:3d:
         03:2d:86:25:c6:40:46:20:c9:d9:04:34:6b:1e:6d:3e:0c:14:
         68:e5:1a:a3:3e:40:19:91:33:35:2a:b7:5a:e9:2b:d2:da:58:
         3f:6b:26:6e:78:08:14:3c:96:89:d8:67:0e:f5:d6:45:98:38:
         74:90:41:30:f5:e5:0c:3f:23:5b:90:ef:63:e6:04:c7:59:48:
         fb:f4:e8:61:4f:8a:9b:b2:d7:d9:8c:1e:86:d1:4e:a5:57:eb:
         a5:59:43:34:d8:46:fe:41:49:e4:27:73:1c:c6:da:1f:84:b6:
         cd:09:7b:04:8a:8c:64:74:49:40:c5:95:19:9d:e8:db:fe:75:
         73:03:18:6d:64:46:2e:48:a7:e6:89:c3:6b:9d:6d:7d:d9:15:
         d6:5e:50:41:3a:66:f5:35:8f:e3:11:70:9c:3c:23:01:fa:0e:
         15:f3:c1:0a:13:d6:23:7c:03:0a:d6:2c:e7:08:74:08:07:43:
         2a:31:82:26:c4:46:61:6b:a6:19:48:4a:3c:6a:69:13:61:07:
         e5:23:0f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:59 2025 by rpki-client