This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
File:                     1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer (raw, json)
Hash identifier:          WFB5vRvaNX1UqsuA25uYET41wlvJ0rglIUaS9Z3G4g8=
Subject key identifier:   D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       13FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:39:49 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 157.70.224.0/20
                          IP: 157.120.64.0 -- 157.120.111.255
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 10:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5118 (0x13fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Dec 15 01:39:49 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:92:16:0e:15:2d:7d:d7:e2:e8:5a:e4:a5:
                    05:c3:5a:1d:04:72:af:cb:5e:d5:d9:71:96:75:ea:
                    f3:1e:9d:d7:33:1c:87:bf:01:cb:d6:5d:70:8a:16:
                    3b:80:55:39:6f:fa:a2:6a:0d:fa:73:08:db:00:b8:
                    91:dd:24:5d:75:0c:11:ea:d0:50:aa:7e:74:73:d0:
                    ff:48:9c:69:1e:85:cf:9c:a5:bd:8e:97:22:56:b7:
                    bb:85:2e:29:67:10:cb:4c:35:4c:29:77:f6:54:f9:
                    08:f0:cc:c6:0f:67:02:9c:39:d6:a1:d7:6b:54:2a:
                    34:4e:a7:62:de:7b:06:92:8b:3b:37:45:d0:32:80:
                    74:b7:e2:e0:89:00:34:81:4a:34:90:f5:75:4e:cf:
                    ce:f7:cc:44:d6:d7:d2:d2:17:26:6a:18:0d:d8:60:
                    2e:2a:6f:f1:fb:65:06:54:b5:8d:f1:58:5f:c0:a3:
                    d5:d3:d4:5f:9f:8f:56:5e:4f:23:be:5c:1e:58:d9:
                    c3:fa:9e:21:79:e8:86:64:39:2f:54:25:d5:f6:ef:
                    1d:58:1b:38:49:98:fe:41:5b:93:9e:83:e7:a4:95:
                    12:fd:25:ff:b6:07:6d:9d:2c:88:12:97:48:28:23:
                    c7:29:59:e1:97:b2:c9:d7:b4:81:3e:7d:84:2c:9d:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.224.0/20
                  157.120.64.0-157.120.111.255

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:24:e9:98:d0:2f:73:b8:8c:a4:07:8d:ba:f1:28:75:72:
         2b:63:66:65:f3:93:5a:91:7f:a8:2e:f6:2d:da:98:19:f2:9e:
         3c:38:9c:17:42:8d:63:8a:f6:21:f6:a0:e6:a5:af:ff:01:c0:
         c1:0b:5c:a5:f6:e4:c6:13:74:16:c3:b4:5c:1a:82:4a:62:5e:
         e7:1d:f7:0b:41:d6:f8:41:22:fe:bc:77:25:56:68:67:6a:9f:
         94:94:58:a9:52:16:54:90:1c:e9:2a:7d:5f:07:31:8f:ed:54:
         87:14:b1:21:78:70:cf:5e:38:13:f7:91:60:f7:31:af:de:7d:
         f3:d8:48:84:97:2a:d1:d7:65:db:93:89:84:a3:8f:5e:a2:8c:
         49:50:1c:0d:6b:6e:89:54:48:ec:3d:c4:ff:13:fb:c0:c5:f8:
         45:d9:88:22:63:8f:89:da:ef:64:b3:4c:04:59:3b:ad:ea:c1:
         b8:09:0b:bc:63:4e:f9:c6:7b:74:44:06:fb:37:b0:c8:3c:e3:
         04:45:49:f9:0d:8e:69:77:ef:8c:99:94:6d:b2:20:a8:55:ec:
         88:9c:44:95:83:ff:50:7e:5c:5a:55:a9:17:93:c4:4a:75:44:
         cc:c7:fc:f9:fa:bf:bd:50:64:a1:d5:3e:e6:74:26:8c:6c:8a:
         d1:57:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:40:33 2026 by rpki-client