This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
File: Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer (raw, json)
Hash identifier: 4hJOomWvjkYVfJnp3EBZL0DTcUKcNZthSO3wvHdERNk=
Subject key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5F8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Dec 2025 01:43:05 +0000
Certificate not after: Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources: IP: 103.139.238.0/23
IP: 202.208.80.0/21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 05:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24460 (0x5f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 15 01:43:05 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:e4:72:62:b5:36:65:4b:5c:44:1d:8b:2e:
6d:a7:e6:9f:49:4e:ce:24:8a:2c:fb:cc:77:a7:3c:
ca:27:0b:14:88:e3:68:44:74:7a:7a:dd:9a:44:46:
a5:8c:76:ce:bf:74:87:75:68:d9:4b:d0:8c:49:f6:
7c:93:e5:30:8e:52:47:01:76:69:6a:0c:2e:64:88:
c5:d0:5b:69:9c:23:08:e9:02:0f:ae:2d:8c:42:e5:
6e:08:2a:b8:e6:f5:98:d3:95:1e:26:dd:89:a6:bc:
24:ec:9f:21:e4:05:42:eb:db:fa:7f:fb:72:01:d5:
c4:d7:3a:56:9c:ab:a8:30:92:fc:d7:3e:7e:6d:d2:
37:13:20:1f:ce:3e:17:0f:32:55:65:7f:40:fd:29:
99:c5:bc:7d:eb:a7:d0:7d:6a:1e:59:6a:01:b1:5e:
46:0f:af:d4:7b:2f:ea:2b:28:f7:00:86:09:82:bb:
ef:e4:ee:a2:ec:4b:ee:57:b7:70:0b:36:40:4b:f7:
12:34:62:13:95:bd:68:30:13:b2:08:4c:5b:82:d8:
a2:2b:cb:6b:8a:a6:49:4d:7d:1a:65:a3:46:f2:21:
78:8f:0a:fb:15:8b:1c:74:c2:15:9f:e9:ad:02:89:
51:20:99:46:51:01:00:56:3d:32:a8:07:cc:28:0b:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.238.0/23
202.208.80.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:9a:e1:62:5d:7a:50:33:d2:be:71:69:2c:6f:60:9f:82:f7:
19:c3:9f:5c:7c:30:ce:72:6f:b5:67:83:34:7d:66:d6:f8:d8:
1c:35:48:71:2d:da:67:41:7d:64:10:50:89:0d:79:19:79:4e:
5d:7c:e9:cb:7f:ff:61:24:da:09:d4:a6:9a:07:a6:b9:15:0b:
7a:a0:9b:e6:cc:58:0c:3e:14:d8:ce:a6:85:a4:42:b3:9d:51:
c5:75:a4:b7:f3:d5:53:c3:05:77:93:2d:f0:d1:07:22:cd:95:
21:dd:fd:f3:49:02:45:19:4b:a1:6d:cb:d7:0f:1f:15:12:11:
88:de:d7:40:a8:c5:28:30:4e:2b:b7:ea:9b:a9:fb:b6:3b:e6:
8c:17:d7:09:6e:ed:04:29:d5:db:ce:46:e8:d5:d6:f1:9b:50:
16:1b:aa:e8:c1:d0:5e:a3:e7:a4:b2:ae:d2:b7:48:32:7a:f1:
5d:c8:41:c3:7c:0d:9f:fe:cb:7e:03:70:ca:6c:6f:2b:e5:43:
c2:68:f6:0c:cd:98:5a:61:9e:18:bb:b2:12:8f:9d:47:89:4f:
40:6e:02:61:4e:5e:ff:01:39:48:ce:d2:8e:97:bc:9d:02:dc:
51:eb:b7:9e:2c:1a:cc:a8:42:e8:c9:b2:96:11:3d:9c:99:20:
ac:1f:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 08:11:08 2025 by rpki-client