This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer
File:                     RJV2NHCVBo-WRmvzqO-pg-MncRY.cer (raw, json)
Hash identifier:          SO4xC6+NPrRbS0dsuqF8kUHHiHtw+R0goUzLBwbSDJ4=
Subject key identifier:   44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5F58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:41:40 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2401:3600::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 13:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24408 (0x5f58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:41:40 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=449576347095068F96466BF3A8EFA983E3277116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:f6:dc:1f:9a:81:39:15:71:51:97:12:fa:
                    4d:ee:63:25:5f:ce:12:78:97:2a:bd:ca:90:7b:0e:
                    ae:59:ee:77:31:a3:24:cf:86:51:3c:65:ce:d6:f8:
                    50:bd:95:b5:e0:e9:cb:3f:c3:32:c5:6e:ad:1a:18:
                    e7:fa:77:5f:c1:05:99:c6:63:91:62:b4:af:9d:5b:
                    70:41:78:9a:29:3c:fd:60:56:be:fa:2c:c5:d2:53:
                    26:9a:0b:48:ed:3f:7b:b0:46:13:6c:c3:d4:29:ad:
                    05:c1:d6:55:e7:17:43:ba:3b:50:26:c9:8c:c2:54:
                    a8:b8:a6:e6:ff:a4:99:de:27:2d:95:d6:1f:91:b5:
                    c8:06:f1:8a:f7:e7:b2:30:36:17:3d:76:da:50:84:
                    bc:45:3f:bb:ab:f1:57:ad:8e:12:df:9a:1f:7e:de:
                    40:77:40:16:d2:2c:82:d3:6f:ea:38:91:5e:95:42:
                    70:6c:15:ed:6a:af:ae:6f:46:df:76:8c:62:12:63:
                    bb:ab:e7:01:0a:5a:6b:2c:7c:4b:15:1e:85:ce:99:
                    62:ff:0d:dc:72:32:21:de:89:8a:0d:e4:4e:cb:1b:
                    d1:c2:16:f8:01:08:b6:8e:13:45:ff:52:ab:9d:b7:
                    52:cd:88:8c:82:06:38:fd:93:8b:88:71:42:9e:44:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3600::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:17:41:22:4c:39:bd:bd:39:49:5a:c4:ea:cd:27:f2:e6:
         07:d6:e1:58:76:4b:1b:c2:f6:2a:62:60:88:7a:a5:3b:b4:32:
         85:d8:8c:23:1f:e0:0f:7e:55:21:b8:33:77:cf:c2:d3:4c:71:
         4e:02:3a:aa:c8:73:4e:04:47:71:70:34:3d:c8:f5:db:a3:4a:
         04:c4:e3:e8:e0:39:c6:c0:d4:93:41:18:6f:a2:72:fa:48:b2:
         11:5f:71:a7:46:ed:58:27:32:be:7f:1d:74:01:12:b4:6b:93:
         43:4d:03:9b:f4:82:c4:f7:33:b2:da:34:ab:30:fe:a6:35:67:
         7d:7d:df:63:c2:05:6b:75:09:13:92:4d:c5:8f:1d:5a:25:b7:
         09:d4:97:64:ef:f5:b2:76:a1:a8:1f:fd:01:f9:7c:9a:80:b6:
         e9:e1:d0:e2:68:26:cb:66:17:39:59:52:10:94:73:04:32:a0:
         7c:5b:f9:7a:60:bc:22:f5:20:52:cf:7f:9a:aa:56:fa:8b:46:
         69:47:6e:42:5d:0e:47:5c:02:5f:63:38:a6:44:4f:10:41:41:
         45:14:c4:02:c0:14:3a:7a:ab:38:3a:72:9e:bb:46:a4:71:b3:
         1d:21:c4:d6:37:54:70:df:3c:5e:60:a8:23:75:22:d2:dc:bf:
         17:b4:41:e2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICX1gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxNDE0MFoXDTI2MTIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoNDQ5NTc2MzQ3MDk1MDY4Rjk2NDY2QkYzQThFRkE5ODNFMzI3NzEx
NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrS9twfmoE5FXFRlxL6
Te5jJV/OEniXKr3KkHsOrlnudzGjJM+GUTxlztb4UL2VteDpyz/DMsVurRoY5/p3
X8EFmcZjkWK0r51bcEF4mik8/WBWvvosxdJTJpoLSO0/e7BGE2zD1CmtBcHWVecX
Q7o7UCbJjMJUqLim5v+kmd4nLZXWH5G1yAbxivfnsjA2Fz122lCEvEU/u6vxV62O
Et+aH37eQHdAFtIsgtNv6jiRXpVCcGwV7Wqvrm9G33aMYhJju6vnAQpaayx8SxUe
hc6ZYv8N3HIyId6Jig3kTssb0cIW+AEIto4TRf9Sq523Us2IjIIGOP2Ti4hxQp5E
NpUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRElXY0cJUGj5ZGa/Oo76mD4ydxFjAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTMzL1JK
VjJOSENWQm8tV1JtdnpxTy1wZy1NbmNSWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATYAMA0GCSqGSIb3
DQEBCwUAA4IBAQBMzxdBIkw5vb05SVrE6s0n8uYH1uFYdksbwvYqYmCIeqU7tDKF
2IwjH+APflUhuDN3z8LTTHFOAjqqyHNOBEdxcDQ9yPXbo0oExOPo4DnGwNSTQRhv
onL6SLIRX3GnRu1YJzK+fx10ARK0a5NDTQOb9ILE9zOy2jSrMP6mNWd9fd9jwgVr
dQkTkk3Fjx1aJbcJ1Jdk7/WydqGoH/0B+XyagLbp4dDiaCbLZhc5WVIQlHMEMqB8
W/l6YLwi9SBSz3+aqlb6i0ZpR25CXQ5HXAJfYzimRE8QQUFFFMQCwBQ6eqs4OnKe
u0akcbMdIcTWN1Rw3zxeYKgjdSLS3L8XtEHi
-----END CERTIFICATE-----
Generated at Mon Dec 15 15:10:59 2025 by rpki-client