This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer File: 2vjaDOuaSk5mN9YZrk5xLaka9JE.cer (raw, json) Hash identifier: nWiPfgEkiueBqF7Hw1H7eDKzKBr4lPLm6UNWsBJxVV8= Subject key identifier: DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5E07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:31:28 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 2401:d0a0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24071 (0x5e07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:31:28 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:3c:33:f5:cf:23:0c:5b:e8:1e:f1:3e:77: 46:55:0b:26:12:ae:73:f0:1c:bb:23:50:be:14:4f: da:10:70:8f:40:b2:97:8f:5a:f3:79:03:9a:a5:bd: f5:5e:86:95:7b:8f:a9:6e:dd:14:80:be:a7:c1:fd: 73:9a:93:53:9b:61:df:51:16:ff:1e:9d:6e:06:a6: f3:c3:5a:7b:60:ed:8f:89:64:55:c1:c3:88:ca:90: 8e:4f:52:c2:fe:77:f3:66:b7:48:ad:ad:e7:6e:b1: c6:fe:d3:71:8b:56:4c:2c:43:eb:d8:c4:57:d3:0c: 9e:35:68:97:b7:c6:7d:f1:7c:ba:92:ca:b6:47:f9: e1:d8:89:f6:7e:1d:72:7d:04:fe:34:64:e8:23:bd: 9c:5d:26:92:3e:a7:84:34:d7:a0:30:41:b2:0a:8f: 72:79:10:58:e3:3e:49:76:7d:0a:59:8f:79:a5:86: 2f:12:16:f2:38:06:cb:0b:ee:ad:ef:75:66:b5:c8: 64:97:6a:77:e9:25:f2:b6:ff:3b:78:c6:79:ad:76: fb:5c:71:87:db:46:73:bf:5f:4c:98:53:3a:e6:a8: 08:9e:82:a4:ec:6f:f0:2c:da:7b:b7:e3:43:6e:15: da:92:cb:b5:ca:5a:fc:34:73:45:5c:f4:8f:f3:6b: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d0a0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:38:2d:18:4e:79:c7:16:70:98:8c:cd:ff:07:2d:ce:1f:db: 0f:e2:cf:3b:7c:f3:32:3f:00:b3:45:9f:63:f3:60:91:6a:ae: b3:90:a2:c2:0d:39:ab:f5:3a:3c:d9:07:60:79:54:3c:4d:27: 98:6e:26:90:0b:d2:78:df:41:d9:ee:e7:8e:01:4f:91:44:a8: 0d:0a:25:7b:8f:1c:15:6d:a2:fc:88:14:d4:1d:21:cd:f5:ec: 07:06:4f:5c:cb:02:7a:dc:f5:23:71:d6:ff:e2:67:d3:aa:27: f4:40:cc:33:31:c1:d0:a0:48:83:0a:1c:c5:a3:43:fd:8e:2b: 69:33:3f:7a:2b:11:21:28:6a:78:68:ad:97:99:24:c7:cc:40: 94:ba:39:ae:1c:00:56:ac:58:25:45:6f:49:50:b7:68:2b:d5: fd:bc:c9:ea:e1:62:02:ab:31:3a:47:66:47:db:49:49:e2:bc: bd:1e:99:2d:c6:84:67:d6:23:0c:f4:7b:f9:bf:6d:15:cc:c4: 41:3f:3b:85:2b:c1:54:86:1e:86:43:15:44:9c:22:b9:e8:7e: cc:cc:41:fc:19:20:3f:7e:cc:82:a4:9e:32:56:84:36:8f:df: ec:5c:8e:f4:46:10:ed:52:ef:e3:08:1d:11:2f:12:6c:d6:aa: f9:e9:e7:db -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICXgcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzEyOFoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoREFGOERBMENFQjlBNEE0RTY2MzdENjE5QUU0RTcxMkRBOTFBRjQ5 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO4ePDP1zyMMW+ge8T53 RlULJhKuc/AcuyNQvhRP2hBwj0Cyl49a83kDmqW99V6GlXuPqW7dFIC+p8H9c5qT U5th31EW/x6dbgam88Nae2Dtj4lkVcHDiMqQjk9Swv5382a3SK2t526xxv7TcYtW TCxD69jEV9MMnjVol7fGffF8upLKtkf54diJ9n4dcn0E/jRk6CO9nF0mkj6nhDTX oDBBsgqPcnkQWOM+SXZ9ClmPeaWGLxIW8jgGywvure91ZrXIZJdqd+kl8rb/O3jG ea12+1xxh9tGc79fTJhTOuaoCJ6CpOxv8Czae7fjQ24V2pLLtcpa/DRzRVz0j/Nr VXkCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTa+NoM65pKTmY31hmuTnEtqRr0kTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NDMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDQzLzJ2 amFET3VhU2s1bU45WVpyazV4TGFrYTlKRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAdCgMA0GCSqGSIb3 DQEBCwUAA4IBAQA6OC0YTnnHFnCYjM3/By3OH9sP4s87fPMyPwCzRZ9j82CRaq6z kKLCDTmr9To82QdgeVQ8TSeYbiaQC9J430HZ7ueOAU+RRKgNCiV7jxwVbaL8iBTU HSHN9ewHBk9cywJ63PUjcdb/4mfTqif0QMwzMcHQoEiDChzFo0P9jitpMz96KxEh KGp4aK2XmSTHzECUujmuHABWrFglRW9JULdoK9X9vMnq4WICqzE6R2ZH20lJ4ry9 HpktxoRn1iMM9Hv5v20VzMRBPzuFK8FUhh6GQxVEnCK56H7MzEH8GSA/fsyCpJ4y VoQ2j9/sXI70RhDtUu/jCB0RLxJs1qr56efb -----END CERTIFICATE-----Generated at Mon Dec 22 11:04:47 2025 by rpki-client