This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/PbsW67aNlauUvG44o6PxmiX25sA.cer
File:                     PbsW67aNlauUvG44o6PxmiX25sA.cer (raw, json)
Hash identifier:          OZiII3WB+QEzTqvoRqSiZTtGJdjxS6at7Pu/J/ll0hY=
Subject key identifier:   3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       13CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:32:12 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 160.17.0.0/16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 10:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5066 (0x13ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Dec 15 01:32:12 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3DBB16EBB68D95AB94BC6E38A3A3F19A25F6E6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:0e:26:ad:78:54:47:02:86:fd:68:d9:22:
                    84:0b:f8:40:ab:c9:c5:5c:f8:f7:c4:b2:37:3a:a9:
                    7d:5f:81:ce:90:b6:e1:6a:7b:b1:4a:1e:d8:29:ae:
                    cc:c1:c2:ce:55:79:7e:cf:da:ad:3c:6a:48:ac:da:
                    8b:f9:3a:e1:a2:97:e5:94:35:68:cc:a9:ca:51:cc:
                    5c:23:44:68:02:3a:df:07:57:98:c2:24:23:59:9b:
                    1b:75:a9:12:6d:c0:23:22:e6:3d:a8:7b:b4:00:fe:
                    7a:df:c2:b4:43:dd:aa:41:8f:2a:88:eb:5d:42:58:
                    5c:cd:20:83:d3:c7:c6:f3:46:6d:fe:d3:4d:aa:8e:
                    4e:bd:8d:75:9d:9a:ab:e6:5f:f7:6c:97:fc:9a:4c:
                    e0:5f:00:af:8d:e9:3a:59:ce:fb:4b:d4:ca:ae:23:
                    96:38:82:bd:5e:06:f6:65:7f:b4:49:5f:46:21:ba:
                    51:40:80:19:4a:62:2e:92:fc:e2:90:8f:1f:f5:f5:
                    a3:b6:35:10:44:df:87:69:ce:3c:9c:1e:2b:1f:68:
                    24:65:84:e1:dc:10:62:68:9a:d3:8c:48:25:27:7b:
                    68:99:a7:0e:ac:ba:2c:11:85:e7:47:14:2d:fb:09:
                    ad:82:1b:7b:e5:c7:d3:d2:dc:d9:ba:f4:ab:20:07:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:16:EB:B6:8D:95:AB:94:BC:6E:38:A3:A3:F1:9A:25:F6:E6:C0
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/PbsW67aNlauUvG44o6PxmiX25sA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:8c:0b:85:c3:d4:f8:8e:d6:76:9a:9f:97:b4:6b:35:35:4d:
         26:20:33:1a:28:99:3e:13:00:04:03:9b:e7:a0:9b:11:32:72:
         31:76:18:7c:8b:d8:b7:7b:2a:d9:13:f9:83:a3:af:6d:c8:38:
         f5:09:42:03:02:f7:f9:b5:7c:ce:b3:bd:2b:f5:98:aa:ef:ee:
         6a:a4:5a:d9:5a:4c:25:6a:38:fb:9f:b6:5f:9b:3f:13:5c:13:
         18:39:21:6c:07:fe:10:1f:be:77:db:0a:06:02:1e:3b:07:40:
         df:34:98:f9:b3:4f:9f:1c:49:47:ab:02:bc:bf:7b:d2:67:79:
         f9:a3:e0:c5:80:1c:40:23:89:93:fd:01:3a:d4:09:b3:79:14:
         83:c5:16:66:4e:5f:da:5e:c2:da:d8:df:b4:62:02:f4:9f:1c:
         fe:d1:22:5d:0c:42:7c:48:a3:09:85:ee:ec:48:f5:0b:07:8a:
         9f:68:90:c9:c3:2a:b7:9a:cf:25:7f:40:a2:e6:7c:a8:55:31:
         dc:1f:f1:ee:b2:bc:fc:34:6e:2e:5a:1b:04:5a:3b:93:cb:85:
         ec:57:8c:e0:d5:1b:60:c0:51:db:aa:94:43:ca:f3:5c:a3:06:
         15:34:54:25:59:e3:ad:97:dc:5d:9c:8d:7f:39:08:79:5b:e9:
         36:05:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:41:02 2026 by rpki-client