This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
File:                     -u9X_xRNJQlORg4P04yAN5M07W0.cer (raw, json)
Hash identifier:          aDiMrBvY09aUy6E3lyyS01W3ibt5TRXKWiR3Bj3ptPY=
Subject key identifier:   FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5ED1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:37:14 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 61.245.112.0/21
                          IP: 103.198.212.0/22
                          IP: 182.50.164.0/22
                          IP: 202.88.192.0/21
                          IP: 202.127.80.0/20
                          IP: 219.100.184.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24273 (0x5ed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:37:14 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:e8:fa:53:fe:c6:63:ff:c6:1e:a5:a7:3c:
                    5b:bd:dc:77:ee:10:75:e4:a9:1a:35:2b:83:5a:b7:
                    2a:60:39:d3:07:ed:e8:56:e9:b2:34:51:53:da:5a:
                    54:39:2a:05:0d:8d:05:9d:14:4b:d6:0a:51:d1:43:
                    78:4e:c2:bd:8b:13:c9:f7:17:9d:ec:79:18:73:14:
                    16:38:a0:c7:86:5f:99:16:85:56:93:4c:55:6b:67:
                    5e:cb:77:85:44:95:ca:1b:5d:51:43:ff:e7:3a:e6:
                    ab:0f:95:09:cc:bb:73:e7:e2:c8:a2:69:75:2e:5b:
                    68:60:77:e9:f8:5b:7a:f7:08:50:c1:b1:d6:46:b3:
                    e3:b6:db:93:5a:0a:99:2a:a7:9f:fd:eb:ee:b5:57:
                    ec:12:db:74:2f:3e:79:d8:73:30:46:b5:48:1a:23:
                    c5:34:ed:76:39:00:c9:25:10:fe:3c:17:a9:03:ce:
                    1f:48:f8:fa:6e:56:9a:07:45:8a:fe:44:9b:8f:28:
                    77:a7:ca:60:d1:09:81:85:3f:e0:bd:0a:4e:cf:36:
                    0f:b7:4d:6a:6f:d4:9e:ed:26:6d:60:93:c7:98:04:
                    84:4f:08:70:dd:a5:23:2d:80:67:26:e7:d8:b1:d4:
                    23:02:35:36:67:aa:33:5c:13:57:8b:59:02:ac:e8:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.112.0/21
                  103.198.212.0/22
                  182.50.164.0/22
                  202.88.192.0/21
                  202.127.80.0/20
                  219.100.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:72:32:dc:ed:8a:51:97:ea:18:7b:18:ed:24:c7:d0:94:01:
         f2:8c:a1:88:e9:0e:e3:97:2e:54:a7:80:33:75:2e:6e:75:86:
         6b:e9:5a:bc:db:35:8f:15:a1:e6:ff:c5:cd:d9:16:6f:2b:e0:
         69:c0:5d:66:ae:2e:8a:b0:ed:34:27:95:a6:9a:cc:c9:3d:cf:
         b0:a8:da:77:45:69:66:ef:70:db:12:88:49:a8:23:d8:ce:a6:
         7b:fd:3c:05:cd:6c:ba:88:8a:af:68:cc:d8:b4:6e:1d:f9:76:
         ae:2e:7e:00:bf:b4:7c:e2:06:57:72:e7:a8:bb:a5:36:2b:4d:
         35:82:28:3d:17:e9:74:ef:c1:9f:cd:2f:f1:f5:eb:3d:64:48:
         1f:09:39:99:38:57:1f:09:73:0e:79:d0:1a:6f:c9:95:de:9f:
         e8:72:7e:d8:82:d2:7d:aa:18:fc:8b:e7:42:20:26:d0:44:38:
         7d:d8:80:b6:d4:61:bd:12:1a:22:d0:90:5c:e5:c9:16:80:b4:
         ae:f5:02:50:e0:e5:dd:c4:60:eb:82:34:2b:98:bb:c9:6f:38:
         69:8f:08:89:fd:ae:45:3c:a8:b0:37:e7:90:82:56:a1:e4:58:
         df:0a:dd:ed:30:7c:b0:cd:8c:e5:f2:47:44:e7:51:5a:a8:73:
         3e:27:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:41:02 2025 by rpki-client