This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
File: FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer (raw, json)
Hash identifier: reHjdZQAYT8g/HNb+cUJlCsqCGSlUdPtdlUvnV4MZyc=
Subject key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5E56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Dec 2025 01:33:46 +0000
Certificate not after: Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources: IP: 103.18.60.0/22
IP: 202.223.32.0/22
IP: 203.81.112.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 06:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24150 (0x5e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 15 01:33:46 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:41:da:65:8c:db:3b:bd:d7:f4:28:08:0d:
cf:9e:86:9b:84:3b:f2:fd:70:ec:a7:33:e2:bb:f4:
d7:1c:bc:61:7f:4c:0f:b4:5d:02:ab:b4:3b:9b:90:
f3:11:77:29:f2:88:fe:e3:27:7f:c8:1a:f6:6c:29:
d3:44:54:f8:77:57:6f:a0:1c:ab:48:03:08:9e:fe:
b3:3d:46:ff:1a:83:07:2f:fb:5c:dc:57:a1:9c:e1:
e1:76:fc:b1:ed:4e:c7:23:13:91:8c:f9:e6:39:83:
e8:ec:fc:48:b9:8d:ac:cf:4b:eb:1b:14:62:2f:55:
3a:27:31:21:90:ed:2a:4f:23:d2:1a:86:38:37:07:
02:fc:8d:72:c8:12:50:d5:46:ae:60:a9:50:2e:5b:
cb:f0:95:4e:9d:9f:1e:1b:84:14:75:74:74:4e:4e:
54:18:55:a6:57:db:8c:6d:5d:70:69:2c:58:ef:98:
a6:74:3d:76:85:f4:b6:28:3d:24:0f:a0:fc:e4:9e:
4c:a7:68:cf:96:8d:2e:12:e7:d0:e2:e7:72:84:62:
31:6e:b4:c4:8c:dc:4d:98:81:d8:cb:c1:a9:bd:00:
d6:79:f1:21:19:c6:d6:d8:ea:d0:99:69:dc:e3:e5:
0e:c9:e6:1a:6c:3c:2b:f2:52:11:8e:0c:9e:c9:9e:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.60.0/22
202.223.32.0/22
203.81.112.0/20
Signature Algorithm: sha256WithRSAEncryption
66:b4:5e:0f:4f:35:44:86:f1:89:1f:03:18:5b:ca:b4:c5:c3:
79:1e:86:ce:f2:ec:6e:c5:f1:a8:95:60:38:7d:79:67:66:a1:
59:95:89:f6:bf:7a:80:56:26:4a:63:d8:1b:7a:6b:01:c0:a6:
2d:7e:7c:7e:5c:de:c8:90:2a:fb:39:67:fd:74:8e:45:54:c9:
ae:e9:3e:e1:1a:ab:39:97:f0:c3:ce:f3:cc:9d:6a:f5:fc:94:
b3:64:f7:57:a3:ac:e3:a9:f8:2c:a3:fb:7f:95:d0:2f:77:7b:
ef:92:3f:72:2c:cd:8f:c3:aa:af:8a:5f:66:68:ce:ac:92:1a:
cd:0d:fa:99:65:e8:90:e0:8c:4d:0e:0c:96:a6:42:48:26:7f:
43:f5:cb:94:c1:5c:7d:bc:aa:33:34:0f:84:22:c4:a9:50:7c:
4b:40:dd:f4:79:97:35:14:5c:e6:43:49:dc:cf:94:f2:ae:d3:
22:e5:ea:eb:66:5d:c7:da:8d:6e:c3:db:6d:66:a3:21:e5:88:
c5:a2:4a:f7:95:4b:fa:70:1d:c2:36:78:44:45:14:89:06:ef:
96:79:bc:02:c1:9b:92:43:9e:05:20:47:68:4c:22:92:39:1b:
ff:7b:19:ed:70:50:30:0c:af:55:8d:72:85:6a:56:cd:51:9e:
bb:8b:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:47:11 2025 by rpki-client