This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer File: OmLEe2ORFPaCyeWihWvA-cM-xkg.cer (raw, json) Hash identifier: w5Y2q1arr+BrjZqUoVLzMA1977XqaL3GAl4M/fabsCw= Subject key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 13CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:32:22 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 138.252.48.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5068 (0x13cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Dec 15 01:32:22 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:0f:3d:a2:b2:8f:8e:37:aa:e4:c1:5b:9f: 4d:46:5b:31:3f:9b:1e:bc:9d:3a:ef:1a:a2:55:ae: 3b:76:01:fe:ac:bb:76:9d:d4:1f:1e:a9:87:c8:e4: c0:1f:db:b8:3e:de:66:33:80:da:13:cf:76:66:58: 39:54:65:b6:f2:61:9b:3f:4b:95:33:76:c6:a0:af: 41:9a:f9:08:be:5e:13:56:4a:28:64:5d:2f:3f:11: 10:a9:69:55:a3:5c:f5:b0:fb:a7:e9:d6:10:39:58: 2e:0b:8c:f5:3d:d7:4e:3e:4b:49:ce:d7:c5:38:a9: 05:36:6d:fa:22:4f:a3:ff:d3:b4:36:39:24:53:f3: a7:a7:66:2f:85:f0:b2:aa:0c:8d:93:31:c0:3a:ea: 2a:92:4b:e1:0e:76:8b:d2:ed:70:91:f8:e2:fd:bc: 82:21:59:16:55:cb:da:81:db:70:e5:34:85:1e:c0: fc:60:eb:ae:44:a9:ff:d2:83:7d:c6:35:2a:25:30: d2:49:29:d2:07:28:a6:66:36:c6:79:c8:11:97:ef: 00:36:c2:5e:58:c0:11:ad:53:d7:89:a0:26:3b:12: 7b:81:9b:d8:fc:ac:13:35:94:f5:97:ad:e1:29:d8: 1b:5c:9e:6f:e4:c6:05:51:0a:ec:ce:ca:a9:46:f6: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.48.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:57:b7:8e:df:5d:58:56:f2:24:d7:8e:26:93:a3:2a:a3:ff: f9:a2:08:6c:54:f3:d5:bd:1c:ab:88:d9:0e:41:ce:7d:df:c0: 6d:da:a8:3d:0e:59:a6:06:8b:a4:84:32:9a:e5:af:15:d8:28: b9:51:d0:ff:19:30:de:95:e5:ea:0b:2b:15:ca:78:54:76:5d: 8a:fd:92:9b:83:cc:31:ed:59:2c:7f:8b:5c:9a:7b:b8:86:23: 99:1f:d4:18:98:d5:1f:db:64:f1:a9:a4:63:ce:2d:63:fe:9d: da:9e:a7:ec:6f:a1:9e:9c:3d:d7:57:71:7e:9b:57:dd:14:0e: 73:96:6d:6e:62:7f:36:c5:20:52:57:6a:e7:7d:22:8e:ca:87: 89:7f:43:f5:04:19:91:06:11:b7:fc:00:4c:d3:b3:75:0f:2c: 9e:2a:eb:e9:f1:99:e5:51:0e:31:17:a3:8b:0d:c0:ba:3a:6f: c3:94:f7:bc:0c:51:48:68:d4:5d:b4:22:d1:00:1b:53:cb:66: ac:0a:6c:e4:3e:8c:91:77:6d:78:bc:ce:85:3b:b4:da:52:a6: 98:4d:b1:e2:44:f8:6e:86:4a:0f:01:00:62:5d:48:05:a3:bb: 30:ee:af:43:49:59:26:c8:b2:19:e7:9a:7b:5b:8d:b7:8e:a2: 9f:23:83:02 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICE8wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MTIxNTAxMzIyMloXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoM0E2MkM0N0I2MzkxMTRGNjgyQzlFNUEyODU2QkMwRjlDMzNFQzY0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyeDz2iso+ON6rkwVuf TUZbMT+bHrydOu8aolWuO3YB/qy7dp3UHx6ph8jkwB/buD7eZjOA2hPPdmZYOVRl tvJhmz9LlTN2xqCvQZr5CL5eE1ZKKGRdLz8REKlpVaNc9bD7p+nWEDlYLguM9T3X Tj5LSc7XxTipBTZt+iJPo//TtDY5JFPzp6dmL4XwsqoMjZMxwDrqKpJL4Q52i9Lt cJH44v28giFZFlXL2oHbcOU0hR7A/GDrrkSp/9KDfcY1KiUw0kkp0gcopmY2xnnI EZfvADbCXljAEa1T14mgJjsSe4Gb2PysEzWU9Zet4SnYG1yeb+TGBVEK7M7KqUb2 YfsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQ6YsR7Y5EU9oLJ5aKFa8D5wz7GSDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyODIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjgyL09t TEVlMk9SRlBhQ3llV2loV3ZBLWNNLXhrZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/DAwDQYJKoZIhvcN AQELBQADggEBAD1Xt47fXVhW8iTXjiaToyqj//miCGxU89W9HKuI2Q5Bzn3fwG3a qD0OWaYGi6SEMprlrxXYKLlR0P8ZMN6V5eoLKxXKeFR2XYr9kpuDzDHtWSx/i1ya e7iGI5kf1BiY1R/bZPGppGPOLWP+ndqep+xvoZ6cPddXcX6bV90UDnOWbW5ifzbF IFJXaud9Io7Kh4l/Q/UEGZEGEbf8AEzTs3UPLJ4q6+nxmeVRDjEXo4sNwLo6b8OU 97wMUUho1F20ItEAG1PLZqwKbOQ+jJF3bXi8zoU7tNpSpphNseJE+G6GSg8BAGJd SAWjuzDur0NJWSbIshnnmntbjbeOop8jgwI= -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:29 2025 by rpki-client