This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
File:                     4oKHAq-VJLLD1X4biwxkliVmlJw.cer (raw, json)
Hash identifier:          QEZS/HeLJj7PmuMUU63fHLZ8fqgxKnVAhiVSGKQbTTU=
Subject key identifier:   E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5E73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:34:36 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2407:58c0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24179 (0x5e73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:34:36 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:f9:3f:55:c9:c1:51:e3:78:cc:6b:2a:f6:
                    53:0a:24:1c:59:3f:17:10:18:32:ea:2b:24:8a:fd:
                    6b:ae:2c:ce:fb:8d:dc:74:1c:4d:6c:e3:39:72:0c:
                    ed:09:04:37:88:5c:92:0c:94:8e:73:aa:0f:2f:2d:
                    3a:3a:1f:eb:62:32:99:f4:a8:85:ca:bf:6a:80:01:
                    04:2c:80:1c:76:e6:71:7a:2f:4f:0b:17:4a:7c:fa:
                    04:f2:9a:9f:74:c1:63:15:4c:51:9c:25:13:cd:9c:
                    b4:8a:27:cf:4f:24:6d:18:cc:d3:1a:20:2e:92:43:
                    3f:f9:4a:3f:e7:d2:a9:75:14:9c:d2:d0:62:8f:23:
                    4e:ee:5d:df:29:d6:f8:18:b1:99:55:3f:f4:20:e2:
                    17:28:63:03:b2:d0:02:8f:b8:cb:18:0b:69:50:16:
                    3c:17:44:45:3b:c5:d8:80:c3:8c:ae:8e:cb:c5:86:
                    3f:94:59:5a:8b:cf:b9:bc:69:8b:23:77:39:98:72:
                    90:fd:28:de:be:cb:b8:68:5e:bd:54:7b:8d:69:98:
                    77:eb:14:6d:ca:86:40:97:bc:4e:3d:6f:bb:e8:1f:
                    0c:ca:45:30:88:5c:c3:d0:ee:f9:c7:f6:7d:c2:10:
                    d2:90:14:97:ff:00:fa:af:bb:dd:62:fc:a7:41:a5:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:82:c9:8d:33:af:9a:f6:01:df:90:bb:30:55:38:f3:5d:64:
         c0:0c:86:a0:81:ab:f1:4e:e7:ae:b5:17:96:dd:5b:0b:74:0f:
         99:ff:65:ed:db:b2:27:23:3a:21:cf:b6:a6:42:32:a6:80:3c:
         bb:ec:e4:8a:08:5c:ac:96:b5:9c:60:d7:ec:76:70:6d:bf:cf:
         c6:3d:83:1a:61:45:c2:70:dc:c6:76:72:af:2d:a2:59:17:61:
         fc:0c:41:28:f9:ed:3e:45:d5:98:2b:36:8b:93:4e:85:df:7e:
         cc:4f:bf:cd:0e:29:84:40:fd:50:69:20:10:22:dd:01:03:4d:
         3c:65:4a:b9:ea:e4:fd:60:ac:b3:7b:39:4b:2b:fa:37:cd:31:
         7b:c1:cb:5d:fd:29:d7:83:ae:51:c5:81:b2:ca:97:bb:79:8c:
         df:bc:56:e8:83:5b:3e:6f:27:92:bd:9b:cf:91:3c:97:57:34:
         bd:c7:e6:65:48:03:13:0b:ab:f4:84:8b:04:91:bf:f0:90:6d:
         32:d1:dd:7d:c7:3b:2d:6e:af:11:a2:7c:db:0b:87:19:82:34:
         b1:0e:fa:7b:b1:c4:87:84:5a:a9:85:1d:cc:f9:5f:b0:de:a1:
         02:0d:85:9b:81:f1:58:9c:a4:64:8f:f8:8a:ec:8d:94:5d:07:
         3b:66:4e:08
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICXnMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzQzNloXDTI2MTIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoRTI4Mjg3MDJBRjk1MjRCMkMzRDU3RTFCOEIwQzY0OTYyNTY2OTQ5
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALR2+T9VycFR43jMayr2
UwokHFk/FxAYMuorJIr9a64szvuN3HQcTWzjOXIM7QkEN4hckgyUjnOqDy8tOjof
62IymfSohcq/aoABBCyAHHbmcXovTwsXSnz6BPKan3TBYxVMUZwlE82ctIonz08k
bRjM0xogLpJDP/lKP+fSqXUUnNLQYo8jTu5d3ynW+BixmVU/9CDiFyhjA7LQAo+4
yxgLaVAWPBdERTvF2IDDjK6Oy8WGP5RZWovPubxpiyN3OZhykP0o3r7LuGhevVR7
jWmYd+sUbcqGQJe8Tj1vu+gfDMpFMIhcw9Du+cf2fcIQ0pAUl/8A+q+73WL8p0Gl
hNcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTigocCr5UkssPVfhuLDGSWJWaUnDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAzNzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzc2LzRv
S0hBcS1WSkxMRDFYNGJpd3hrbGlWbWxKdy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB1jAMA0GCSqGSIb3
DQEBCwUAA4IBAQBBgsmNM6+a9gHfkLswVTjzXWTADIaggavxTueutReW3VsLdA+Z
/2Xt27InIzohz7amQjKmgDy77OSKCFyslrWcYNfsdnBtv8/GPYMaYUXCcNzGdnKv
LaJZF2H8DEEo+e0+RdWYKzaLk06F337MT7/NDimEQP1QaSAQIt0BA008ZUq56uT9
YKyzezlLK/o3zTF7wctd/SnXg65RxYGyype7eYzfvFbog1s+byeSvZvPkTyXVzS9
x+ZlSAMTC6v0hIsEkb/wkG0y0d19xzstbq8RonzbC4cZgjSxDvp7scSHhFqphR3M
+V+w3qECDYWbgfFYnKRkj/iK7I2UXQc7Zk4I
-----END CERTIFICATE-----