This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/HlQDhj3LO2EY-mJ1hvtV69HYVfE.cer File: HlQDhj3LO2EY-mJ1hvtV69HYVfE.cer (raw, json) Hash identifier: A2MtERg9kuX8E4+Dl5st1zWOUqrkrMBA73rWn952hms= Subject key identifier: 1E:54:03:86:3D:CB:3B:61:18:FA:62:75:86:FB:55:EB:D1:D8:55:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5E26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/HlQDhj3LO2EY-mJ1hvtV69HYVfE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:32:19 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 103.247.88.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24102 (0x5e26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:32:19 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=1E5403863DCB3B6118FA627586FB55EBD1D855F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:5b:cc:c7:b6:46:b0:39:5a:03:a3:90:57: a2:b3:4f:ba:a2:c7:77:72:5f:9f:6d:85:4b:c4:d6: a9:8d:e9:57:55:95:c5:d9:53:9c:eb:be:ab:b5:8b: 6a:0e:35:d1:bd:ea:b4:37:e4:8a:ce:14:49:8a:a6: 8e:20:88:47:54:1a:ce:45:2f:2d:3c:f6:d8:74:62: b3:36:64:28:1b:27:26:00:60:e7:d6:18:5d:35:65: 17:00:fa:d5:d4:23:18:54:8d:4e:63:09:85:73:30: 01:fb:62:ed:fd:90:08:fa:00:53:a6:56:59:03:0d: a0:ca:88:df:bf:b2:10:29:04:48:74:ca:58:f3:7b: 1d:18:da:26:c6:1c:2f:94:40:81:98:ce:6f:7c:1d: a0:af:be:e3:f3:bc:b5:f7:b5:b6:61:22:4f:96:79: cb:78:c5:f6:85:64:2f:67:05:d4:9d:10:22:9f:0c: 30:b1:db:98:71:4f:6b:b6:77:42:c5:50:b4:f3:aa: 26:cc:b4:36:31:5c:14:59:fb:c5:dc:1b:7a:e1:1e: 1d:8b:dd:d1:23:18:58:da:dc:16:78:4d:65:30:49: fe:e7:8e:15:d7:ea:e9:a1:f5:1b:e7:da:8a:ed:66: f7:a8:52:56:38:5d:51:4d:37:35:f7:ac:25:01:ac: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:03:86:3D:CB:3B:61:18:FA:62:75:86:FB:55:EB:D1:D8:55:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/HlQDhj3LO2EY-mJ1hvtV69HYVfE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.88.0/22 Signature Algorithm: sha256WithRSAEncryption 20:98:52:37:d9:f1:4c:99:81:4d:a6:f7:8a:7c:36:ea:c4:05: 50:81:c2:18:9b:6c:68:03:0b:2a:9b:32:9d:30:cc:00:4e:28: e1:88:a8:95:a5:77:08:e3:91:f8:ab:9f:77:e2:94:77:38:e7: 5d:ef:84:25:46:91:65:17:fe:2b:2f:31:f3:86:f1:5b:e2:52: fd:7c:21:70:84:52:6b:25:7d:17:3d:6c:9f:14:67:8f:49:ae: b5:17:bf:5f:93:e2:43:ae:20:96:15:54:62:b1:f4:1c:9a:51: 5b:f8:92:ab:51:62:5c:93:0e:31:8d:49:01:f9:70:a5:c0:80: 64:d2:20:4e:f5:d6:f0:84:5e:aa:4f:f5:32:3b:6f:d9:2c:c9: b1:dc:4c:5e:8b:cd:d4:87:14:44:69:7c:bb:5c:6e:c9:f3:73: 77:16:a1:8c:70:81:fa:3b:78:e4:26:d0:d9:f3:bd:07:79:9e: 8c:f6:f7:4b:a2:14:8f:b3:13:7e:24:4f:c8:46:a2:43:b7:e7: b4:9d:7c:00:52:bd:63:a3:73:fd:09:ae:5b:18:4b:d2:72:e3: 19:a7:d1:a8:2c:c0:f3:65:13:dc:25:07:11:1c:7b:05:e7:83: 98:05:ca:69:91:a1:df:ab:47:ca:95:c2:6a:7f:d6:79:97:1f: 4a:9c:44:94 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICXiYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzIxOVoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoMUU1NDAzODYzRENCM0I2MTE4RkE2Mjc1ODZGQjU1RUJEMUQ4NTVG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9GW8zHtkawOVoDo5BX orNPuqLHd3Jfn22FS8TWqY3pV1WVxdlTnOu+q7WLag410b3qtDfkis4USYqmjiCI R1QazkUvLTz22HRiszZkKBsnJgBg59YYXTVlFwD61dQjGFSNTmMJhXMwAfti7f2Q CPoAU6ZWWQMNoMqI37+yECkESHTKWPN7HRjaJsYcL5RAgZjOb3wdoK++4/O8tfe1 tmEiT5Z5y3jF9oVkL2cF1J0QIp8MMLHbmHFPa7Z3QsVQtPOqJsy0NjFcFFn7xdwb euEeHYvd0SMYWNrcFnhNZTBJ/ueOFdfq6aH1G+faiu1m96hSVjhdUU03NfesJQGs XuUCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQeVAOGPcs7YRj6YnWG+1Xr0dhV8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81NDEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzU0MS9IbFFEaGoz TE8yRVktbUoxaHZ0VjY5SFlWZkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/dYMA0GCSqGSIb3DQEBCwUA A4IBAQAgmFI32fFMmYFNpveKfDbqxAVQgcIYm2xoAwsqmzKdMMwATijhiKiVpXcI 45H4q5934pR3OOdd74QlRpFlF/4rLzHzhvFb4lL9fCFwhFJrJX0XPWyfFGePSa61 F79fk+JDriCWFVRisfQcmlFb+JKrUWJckw4xjUkB+XClwIBk0iBO9dbwhF6qT/Uy O2/ZLMmx3Exei83UhxREaXy7XG7J83N3FqGMcIH6O3jkJtDZ870HeZ6M9vdLohSP sxN+JE/IRqJDt+e0nXwAUr1jo3P9Ca5bGEvScuMZp9GoLMDzZRPcJQcRHHsF54OY BcppkaHfq0fKlcJqf9Z5lx9KnESU -----END CERTIFICATE-----Generated at Mon Dec 22 11:04:25 2025 by rpki-client