This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.cer
File:                     GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.cer (raw, json)
Hash identifier:          R9os5Bm13wSBnECsFuXUob75ad+ehrm09MeWnXUQ3gA=
Subject key identifier:   1A:67:F2:8C:96:07:72:C6:98:44:A6:73:BC:3D:C9:BF:C0:F5:16:9E
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       13DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:34:30 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 147.92.128.0/17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5082 (0x13da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Dec 15 01:34:30 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=1A67F28C960772C69844A673BC3DC9BFC0F5169E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:ae:cf:21:19:ed:71:80:54:37:f3:18:d9:
                    07:42:f9:43:f5:e2:4e:5a:7c:98:43:80:40:98:a6:
                    03:e5:c9:80:91:39:b4:de:53:82:34:d8:c1:04:c5:
                    e7:4f:af:ff:54:56:07:fa:e0:ee:19:74:63:e1:b2:
                    4e:b8:4a:26:dc:f2:f6:ce:d9:73:70:03:2e:83:c2:
                    58:0a:4a:93:45:89:41:d1:f5:ec:17:ea:73:51:d3:
                    eb:cb:ae:ab:df:23:03:76:97:de:ce:35:e4:64:a6:
                    7a:90:09:ef:84:33:04:34:61:6e:22:56:e0:d5:9a:
                    d7:1e:f9:5a:30:8d:e3:a6:26:89:bc:c4:c5:62:f4:
                    f7:72:ee:65:70:78:26:9c:c6:9e:10:03:b3:21:a6:
                    59:2e:63:9c:93:f2:ac:4c:b7:51:32:2e:06:e9:26:
                    3a:cf:36:f3:d6:ba:eb:d2:29:c7:1f:73:82:b7:39:
                    94:08:50:3c:3d:49:80:6a:83:ab:d7:6c:20:07:34:
                    63:00:15:fb:6d:a4:0e:f8:6c:96:64:80:0b:db:f2:
                    48:bb:d0:a6:73:ba:de:78:0f:cb:e2:e7:0f:a6:2e:
                    ab:0e:80:d6:7d:d1:93:34:7d:4b:61:6d:c8:0e:5b:
                    7e:cd:67:4b:24:cc:e2:dd:34:8b:7b:c5:3f:97:2c:
                    fb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:67:F2:8C:96:07:72:C6:98:44:A6:73:BC:3D:C9:BF:C0:F5:16:9E
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:92:ca:77:e0:6c:29:56:c6:a6:7a:aa:eb:44:a1:f9:87:
         76:64:bc:fd:29:9d:5b:c1:88:5c:f0:ac:9e:5f:ed:21:3c:c1:
         2c:46:53:bf:39:c9:4b:8f:1f:c0:c3:01:61:16:fb:a0:e7:6d:
         bf:80:84:42:27:ce:07:79:cb:c8:b2:55:ae:c7:ed:cd:1e:dd:
         e5:59:7f:e0:6d:10:87:cc:95:bb:0f:26:d5:f9:32:73:ff:c3:
         a9:dc:88:5f:b3:5b:e7:53:a1:fc:38:75:c2:df:7a:3b:58:6c:
         5b:e7:b2:4b:90:d9:16:a5:7c:b1:3a:79:3c:27:99:d8:1b:c2:
         18:5f:b7:80:72:8d:96:48:a5:12:ec:98:f6:6c:17:69:cd:0c:
         f7:2b:87:e8:f0:b7:cd:14:0c:fe:da:f6:ee:01:e6:d3:54:1f:
         34:cd:a1:9b:f1:34:66:42:a4:1a:c2:40:09:0d:8b:ea:85:57:
         cc:c6:87:fa:76:47:37:0f:88:e4:5d:29:ae:dc:a0:1c:d1:a4:
         60:6d:35:55:de:d4:b3:9e:ca:81:42:45:b1:ff:68:d4:c5:62:
         97:19:d8:c2:27:69:e2:00:f6:83:f8:34:ea:a6:b8:e8:aa:01:
         29:d6:e9:89:18:2e:6c:98:56:66:1f:e2:62:55:65:a5:07:cb:
         3b:45:a6:31
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICE9owDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG
MTE0OEU2NTM0REYyMB4XDTI1MTIxNTAxMzQzMFoXDTI2MTIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoMUE2N0YyOEM5NjA3NzJDNjk4NDRBNjczQkMzREM5QkZDMEY1MTY5
RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKqOrs8hGe1xgFQ38xjZ
B0L5Q/XiTlp8mEOAQJimA+XJgJE5tN5TgjTYwQTF50+v/1RWB/rg7hl0Y+GyTrhK
Jtzy9s7Zc3ADLoPCWApKk0WJQdH17Bfqc1HT68uuq98jA3aX3s415GSmepAJ74Qz
BDRhbiJW4NWa1x75WjCN46YmibzExWL093LuZXB4JpzGnhADsyGmWS5jnJPyrEy3
UTIuBukmOs8289a669Ipxx9zgrc5lAhQPD1JgGqDq9dsIAc0YwAV+22kDvhslmSA
C9vySLvQpnO63ngPy+LnD6Yuqw6A1n3RkzR9S2FtyA5bfs1nSyTM4t00i3vFP5cs
+28CAwEAAaOCAoswggKHMB0GA1UdDgQWBBQaZ/KMlgdyxphEpnO8Pcm/wPUWnjAf
BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC
OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD
ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAxMTYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTE2L0dt
ZnlqSllIY3NhWVJLWnp2RDNKdjhEMUZwNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeTXIAwDQYJKoZIhvcN
AQELBQADggEBAChOksp34GwpVsameqrrRKH5h3ZkvP0pnVvBiFzwrJ5f7SE8wSxG
U785yUuPH8DDAWEW+6Dnbb+AhEInzgd5y8iyVa7H7c0e3eVZf+BtEIfMlbsPJtX5
MnP/w6nciF+zW+dTofw4dcLfejtYbFvnskuQ2RalfLE6eTwnmdgbwhhft4ByjZZI
pRLsmPZsF2nNDPcrh+jwt80UDP7a9u4B5tNUHzTNoZvxNGZCpBrCQAkNi+qFV8zG
h/p2RzcPiORdKa7coBzRpGBtNVXe1LOeyoFCRbH/aNTFYpcZ2MInaeIA9oP4NOqm
uOiqASnW6YkYLmyYVmYf4mJVZaUHyztFpjE=
-----END CERTIFICATE-----