This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer File: ENGH2x2fTTa03kSL5DdnEpp512Q.cer (raw, json) Hash identifier: MwAY2etZeCAv/Iv3UznarzmOv/AMQOi//BAi5ybGMOI= Subject key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5F03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:38:55 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 103.113.56.0/22 IP: 202.226.0.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24323 (0x5f03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:38:55 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:23:e7:03:9f:6c:49:6e:00:05:77:25:18: 30:d5:90:f4:a4:f2:02:d5:75:c5:a9:12:47:50:ed: 49:78:c1:30:fe:cc:df:f2:90:92:34:a1:98:b0:4e: 97:3d:24:ab:64:de:19:18:19:f5:3e:9b:d7:23:6c: da:cf:cf:c0:d3:16:01:72:eb:9b:2a:af:10:f2:58: 89:69:b9:c9:2f:ef:f2:fa:f7:6d:51:49:d1:52:fc: 55:6d:9d:b2:27:e8:4e:79:9d:7a:20:09:91:7e:2c: 34:d9:98:35:dd:70:19:c9:f0:a0:ee:10:1c:bf:3f: bf:4a:f4:18:30:c1:20:b7:28:90:63:72:78:ba:7a: 86:36:c0:16:98:95:54:87:00:12:1a:63:55:fd:b6: 87:d2:2c:c4:1f:2a:25:11:d1:f0:7c:56:4e:d4:14: c4:7a:82:0f:07:dd:c4:9b:c6:b2:4c:03:91:1c:70: 4b:83:e8:b2:b2:12:c0:d3:44:92:70:ca:53:d6:d7: d1:99:93:33:a9:48:64:82:32:81:c4:b1:17:f2:ea: 48:a5:17:6d:95:69:39:0c:82:4d:21:34:00:54:6a: 44:2f:fb:15:07:92:02:ee:0c:52:85:dd:3c:ea:73: d5:52:5c:7a:d1:3f:a8:2a:85:5b:72:27:bd:93:ae: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.56.0/22 202.226.0.0/22 Signature Algorithm: sha256WithRSAEncryption 96:b4:50:92:59:a4:6c:68:7d:4f:c5:3e:96:0a:8a:2d:53:e0: f4:c4:fa:05:e0:20:d9:ce:28:70:b4:ac:fa:79:99:75:4d:68: 2c:a0:69:13:2a:02:e8:8d:9d:1e:74:6d:34:08:4d:2e:1f:6b: dd:44:48:f1:65:58:a7:8f:10:63:37:65:5b:e4:b8:c6:f2:59: 8c:8c:f9:6d:5e:44:c9:42:7e:da:a3:e2:07:c7:6f:60:03:6d: 7f:11:dc:44:ae:28:00:da:17:6d:fe:53:16:20:d8:f0:0a:7b: ff:2e:7b:ba:a1:ce:8e:0f:a6:db:82:5d:e3:e4:b8:57:11:2c: 8a:6e:d8:52:10:72:cf:bd:46:21:1c:48:ec:56:d9:b8:65:30: 5a:d2:73:50:0d:c9:5f:1e:dd:f2:0c:ef:87:ce:bc:0d:e4:d8: 55:e4:bc:f2:39:71:2a:1d:1c:71:3d:c1:66:76:e0:2c:55:5d: c1:f1:94:92:3f:ca:c9:94:a8:19:e6:88:d8:7e:80:99:fa:b8: d3:7a:76:62:f5:fa:f0:50:b8:24:c6:77:a8:ae:a2:41:07:0d: 65:97:4b:70:c7:b6:a9:43:4b:87:db:f9:06:b5:4e:f6:03:d1: f1:e6:3c:66:87:f8:69:49:0f:42:b9:84:49:15:48:42:38:44: 0b:e8:13:bc -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICXwMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzg1NVoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoMTBEMTg3REIxRDlGNEQzNkI0REU0NDhCRTQzNzY3MTI5QTc5RDc2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRXI+cDn2xJbgAFdyUY MNWQ9KTyAtV1xakSR1DtSXjBMP7M3/KQkjShmLBOlz0kq2TeGRgZ9T6b1yNs2s/P wNMWAXLrmyqvEPJYiWm5yS/v8vr3bVFJ0VL8VW2dsifoTnmdeiAJkX4sNNmYNd1w GcnwoO4QHL8/v0r0GDDBILcokGNyeLp6hjbAFpiVVIcAEhpjVf22h9IsxB8qJRHR 8HxWTtQUxHqCDwfdxJvGskwDkRxwS4PosrISwNNEknDKU9bX0ZmTM6lIZIIygcSx F/LqSKUXbZVpOQyCTSE0AFRqRC/7FQeSAu4MUoXdPOpz1VJcetE/qCqFW3InvZOu WrUCAwEAAaOCApEwggKNMB0GA1UdDgQWBBQQ0YfbHZ9NNrTeRIvkN2cSmnnXZDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwNjQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDY0L0VO R0gyeDJmVFRhMDNrU0w1RGRuRXBwNTEyUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJncTgDBALK4gAwDQYJ KoZIhvcNAQELBQADggEBAJa0UJJZpGxofU/FPpYKii1T4PTE+gXgINnOKHC0rPp5 mXVNaCygaRMqAuiNnR50bTQITS4fa91ESPFlWKePEGM3ZVvkuMbyWYyM+W1eRMlC ftqj4gfHb2ADbX8R3ESuKADaF23+UxYg2PAKe/8ue7qhzo4PptuCXePkuFcRLIpu 2FIQcs+9RiEcSOxW2bhlMFrSc1ANyV8e3fIM74fOvA3k2FXkvPI5cSodHHE9wWZ2 4CxVXcHxlJI/ysmUqBnmiNh+gJn6uNN6dmL1+vBQuCTGd6iuokEHDWWXS3DHtqlD S4fb+Qa1TvYD0fHmPGaH+GlJD0K5hEkVSEI4RAvoE7w= -----END CERTIFICATE-----Generated at Mon Dec 22 11:01:45 2025 by rpki-client