This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer
File:                     I2pldme3hGltAb3rkW-sYftYf2o.cer (raw, json)
Hash identifier:          wzACSsPnDCLLnQ1MfOv6O+npDTxHrE6xOeXl4NFqKag=
Subject key identifier:   23:6A:65:76:67:B7:84:69:6D:01:BD:EB:91:6F:AC:61:FB:58:7F:6A
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5EDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:37:30 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 103.26.26.0/23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24282 (0x5eda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:37:30 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=236A657667B784696D01BDEB916FAC61FB587F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:38:d0:7d:ec:fa:a8:7a:5b:82:15:d0:ec:
                    21:7b:d9:ea:ed:3d:06:45:14:c8:07:fd:41:af:6f:
                    2e:ef:cc:8a:cf:85:31:86:32:8e:26:d5:a4:95:cf:
                    f5:d1:0c:b7:bf:5c:f4:c3:b7:71:e3:73:dc:65:d0:
                    03:0a:d7:48:be:f0:ce:d1:be:57:8e:68:83:6d:49:
                    94:4d:22:0b:f2:76:e1:f8:a9:9d:59:17:83:64:ac:
                    ab:30:1e:a1:fa:e9:0b:c2:26:3c:13:61:ed:cf:7a:
                    af:ec:f5:21:3f:71:26:b8:8a:28:32:85:37:84:74:
                    62:bc:6c:6f:a1:33:74:ee:57:2e:36:16:d6:20:d2:
                    54:b0:76:a8:32:4c:9c:0d:a9:3e:fd:97:61:e7:eb:
                    40:98:04:b6:4e:8f:ff:3a:7c:d1:80:d3:fa:26:0c:
                    59:9b:58:fa:63:85:8f:05:5c:d9:72:1e:a4:e5:a6:
                    6c:48:f6:ba:19:ae:6b:f3:a1:9d:2c:42:f8:4f:b7:
                    e0:f6:ec:da:33:03:88:c4:42:e6:71:a9:0e:9a:72:
                    38:0f:d7:4c:d5:ce:86:09:56:db:84:30:45:db:9b:
                    f8:c8:1f:6c:49:73:00:82:f2:65:39:e1:e1:38:5c:
                    fd:1d:1b:79:6f:f2:bc:66:e1:4d:85:c5:ac:da:4a:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:65:76:67:B7:84:69:6D:01:BD:EB:91:6F:AC:61:FB:58:7F:6A
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:00:1e:d7:17:c7:25:b4:9d:2a:81:26:e9:f7:b0:84:bd:72:
         15:c7:74:5b:f6:d6:8a:37:24:d5:d7:7e:5e:89:c3:ed:39:1c:
         25:af:99:25:3e:7b:97:b2:9a:02:cc:21:5c:02:ce:69:64:41:
         5b:c1:dd:cc:0b:bd:21:01:db:30:ff:fc:c8:6a:3b:8c:b4:cc:
         fe:67:05:18:b7:37:18:87:b8:2a:db:2f:5d:67:7c:45:17:be:
         aa:13:4a:50:73:f6:b6:96:96:a2:6d:78:37:39:23:7a:00:27:
         85:0a:fd:23:67:d8:12:0c:bb:50:a1:86:65:51:0d:a6:d5:31:
         7d:06:28:e9:e7:9a:6c:1e:4f:ce:dc:52:c4:d1:7b:92:2f:d9:
         82:40:ab:1f:9c:e1:06:fc:06:b1:83:b8:e4:d4:79:d4:6b:5f:
         32:65:e9:c8:6c:f6:a5:3f:fc:2d:9b:68:c5:6c:6b:eb:c4:58:
         71:9a:ae:2f:c0:2c:b2:07:47:79:ab:8d:80:51:df:3d:ce:e9:
         f1:5e:ff:9b:d5:51:94:b2:4b:b8:1c:ef:99:53:44:d4:73:ec:
         ab:30:a9:1c:79:56:9f:92:fa:ec:6d:87:ea:2a:f1:bc:12:c0:
         c7:c7:c5:4a:1c:05:81:ab:bf:7b:55:6a:4f:e8:1c:86:f3:3d:
         41:ea:f0:33
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICXtowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzczMFoXDTI2MTIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoMjM2QTY1NzY2N0I3ODQ2OTZEMDFCREVCOTE2RkFDNjFGQjU4N0Y2
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMP8ONB97PqoeluCFdDs
IXvZ6u09BkUUyAf9Qa9vLu/Mis+FMYYyjibVpJXP9dEMt79c9MO3ceNz3GXQAwrX
SL7wztG+V45og21JlE0iC/J24fipnVkXg2SsqzAeofrpC8ImPBNh7c96r+z1IT9x
JriKKDKFN4R0Yrxsb6EzdO5XLjYW1iDSVLB2qDJMnA2pPv2XYefrQJgEtk6P/zp8
0YDT+iYMWZtY+mOFjwVc2XIepOWmbEj2uhmua/OhnSxC+E+34Pbs2jMDiMRC5nGp
DppyOA/XTNXOhglW24QwRdub+MgfbElzAILyZTnh4Thc/R0beW/yvGbhTYXFrNpK
W1ECAwEAAaOCAoswggKHMB0GA1UdDgQWBBQjamV2Z7eEaW0BveuRb6xh+1h/ajAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjAyMzUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjM1L0ky
cGxkbWUzaEdsdEFiM3JrVy1zWWZ0WWYyby5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnGhowDQYJKoZIhvcN
AQELBQADggEBACgAHtcXxyW0nSqBJun3sIS9chXHdFv21oo3JNXXfl6Jw+05HCWv
mSU+e5eymgLMIVwCzmlkQVvB3cwLvSEB2zD//MhqO4y0zP5nBRi3NxiHuCrbL11n
fEUXvqoTSlBz9raWlqJteDc5I3oAJ4UK/SNn2BIMu1ChhmVRDabVMX0GKOnnmmwe
T87cUsTRe5Iv2YJAqx+c4Qb8BrGDuOTUedRrXzJl6chs9qU//C2baMVsa+vEWHGa
ri/ALLIHR3mrjYBR3z3O6fFe/5vVUZSyS7gc75lTRNRz7KswqRx5Vp+S+uxth+oq
8bwSwMfHxUocBYGrv3tVak/oHIbzPUHq8DM=
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:46:56 2025 by rpki-client