This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/B4E_ryBxNbibFs2143AeeuYcGGw.cer
File:                     B4E_ryBxNbibFs2143AeeuYcGGw.cer (raw, json)
Hash identifier:          NXtOSexTO8DCJx/aO+wBQuNVpaGfYoPMxA4iE4QBwnA=
Subject key identifier:   07:81:3F:AF:20:71:35:B8:9B:16:CD:B5:E3:70:1E:7A:E6:1C:18:6C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5FBB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/B4E_ryBxNbibFs2143AeeuYcGGw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:44:38 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2406:600::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24507 (0x5fbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:44:38 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=07813FAF207135B89B16CDB5E3701E7AE61C186C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:ee:8f:7b:66:d7:1b:75:fe:a3:b3:25:0d:
                    a1:d6:51:11:3a:e5:54:f5:4e:13:b2:d8:ce:e5:fb:
                    07:1d:ba:0c:e0:31:88:87:99:eb:52:26:49:02:22:
                    70:1c:78:6d:94:19:4f:9b:e0:57:89:11:01:21:4a:
                    35:79:16:48:53:8c:b5:91:e7:9f:9e:b9:5d:c9:05:
                    ff:df:77:17:fb:ac:34:65:31:cc:1c:6b:fc:33:22:
                    7e:1f:bf:04:40:7c:af:76:1d:75:f0:14:10:e6:f4:
                    19:ef:eb:9f:b9:11:36:5f:4f:ab:31:c9:d2:e7:19:
                    99:22:a3:86:80:12:d6:7e:be:98:bb:81:99:40:f5:
                    f0:30:0c:76:ea:9a:df:6d:f6:19:d6:15:f7:ec:f3:
                    47:3f:e0:8b:da:d2:6f:cf:14:04:ea:22:18:99:27:
                    2c:f9:8e:82:f2:b3:4b:01:56:06:41:ba:b8:67:38:
                    d5:6b:aa:fb:39:5a:1c:58:49:9f:76:41:38:63:34:
                    74:92:22:d2:63:a9:99:43:60:0b:f2:99:90:bb:2c:
                    19:dd:23:e9:54:85:e2:e1:b6:1d:68:ef:30:e1:1c:
                    c8:d4:35:b7:07:5e:a9:91:b6:9a:4b:ee:c8:cf:06:
                    79:51:aa:e2:cc:75:a6:95:78:f4:cb:7a:e0:88:93:
                    fc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:81:3F:AF:20:71:35:B8:9B:16:CD:B5:E3:70:1E:7A:E6:1C:18:6C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/B4E_ryBxNbibFs2143AeeuYcGGw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:61:25:53:97:ad:9b:b5:a6:40:e2:dd:d2:f8:ca:df:ad:53:
         a8:6f:5a:db:30:86:30:1c:da:1c:3d:9d:da:e6:99:77:96:7e:
         dd:8d:b8:61:a4:57:c1:8e:7a:5d:e9:e8:90:af:cd:9f:ed:48:
         2a:87:a8:8f:e1:66:e6:ea:c8:cb:6f:30:37:2e:ad:b9:3e:38:
         7b:da:22:b6:ce:3c:d7:9e:3d:4a:78:64:09:5b:0e:fb:13:90:
         bd:14:a8:14:e1:8c:d5:3b:82:63:a9:d3:2c:ee:a3:db:5a:0f:
         2a:17:8f:9d:65:8b:e6:9a:d7:5c:3d:5d:7b:01:eb:91:62:85:
         2f:5c:86:44:5c:9f:a1:22:24:03:65:28:bc:f1:21:b4:cf:3f:
         f3:df:2c:52:e7:f5:87:fe:4d:fe:d7:72:cf:f1:87:6a:40:23:
         ae:c0:55:28:10:9b:e9:53:23:10:a4:3e:c2:2a:26:2e:05:5e:
         d1:82:b6:4e:41:6a:0f:2a:a3:f8:88:b2:14:3d:51:24:0e:c0:
         b7:e5:a8:93:cd:74:39:6c:c4:e3:90:b5:7c:de:f9:48:10:f6:
         89:65:30:aa:30:77:88:53:d4:fc:1c:1b:f1:b1:a5:a2:ae:de:
         1b:39:fd:be:90:b2:12:76:cd:75:26:d8:ba:69:73:10:3c:32:
         9d:45:b0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:20:40 2025 by rpki-client