This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/SE5TPLMZJRVBLCJclXQYroRXQ54.cer
File:                     SE5TPLMZJRVBLCJclXQYroRXQ54.cer (raw, json)
Hash identifier:          i5E7z6bUpq4TvMGkFiMET6URimL3xfSvv7zBsq+a1R0=
Subject key identifier:   48:4E:53:3C:B3:19:25:15:41:2C:22:5C:95:74:18:AE:84:57:43:9E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5FB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1314/SE5TPLMZJRVBLCJclXQYroRXQ54.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1314/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:44:32 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 202.244.138.0/23
                          IP: 202.246.176.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24505 (0x5fb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:44:32 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=484E533CB3192515412C225C957418AE8457439E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:9f:b7:3b:59:c9:37:86:56:b4:38:9a:a1:
                    5e:f5:4f:f8:1a:1f:24:9f:49:65:74:e1:74:84:e2:
                    4d:ff:08:bf:19:de:2f:05:10:b1:14:5a:bf:df:1f:
                    fe:4f:d6:70:d2:55:cb:16:b3:ec:82:2b:a9:d2:4b:
                    c7:15:d5:80:54:fb:d5:3d:84:27:8b:18:11:29:a3:
                    9c:3a:f7:97:3c:c4:b2:36:22:f9:b1:ce:5e:da:96:
                    09:f3:79:06:a1:77:2d:7b:d9:94:f7:56:c3:a8:87:
                    86:ec:db:48:b8:c5:1b:b0:33:ee:dd:e3:7e:4a:a0:
                    7a:45:4f:4a:1f:11:d0:e5:4a:86:18:cf:3a:0d:66:
                    95:48:ab:73:60:35:8a:e0:e6:ba:60:f6:da:22:33:
                    72:11:3b:eb:d9:0c:52:96:84:bf:c2:f9:c5:08:1d:
                    bc:a9:f0:25:11:96:c2:4a:1a:73:fa:4f:2d:a0:e2:
                    42:4f:2f:4a:bd:89:65:10:4d:44:8d:67:57:f0:72:
                    83:7a:7d:71:5a:79:89:3d:f9:af:d1:a5:0b:b8:9e:
                    0c:26:6a:a8:fc:37:f6:6a:4c:14:bf:df:a9:b1:ea:
                    16:2c:71:06:87:1a:1d:b0:8b:c9:6b:2a:25:9e:db:
                    2a:ce:7d:f3:b0:da:4c:32:6c:ed:90:8d:01:04:64:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4E:53:3C:B3:19:25:15:41:2C:22:5C:95:74:18:AE:84:57:43:9E
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1314/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1314/SE5TPLMZJRVBLCJclXQYroRXQ54.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.138.0/23
                  202.246.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:16:47:5d:72:15:0d:04:d1:05:7a:96:b9:26:32:c9:7e:9d:
         86:58:77:03:39:98:de:bd:77:e2:81:3d:2d:e0:d3:2c:a5:cf:
         99:50:85:c0:a1:92:8f:6c:4b:16:a7:ff:08:67:e7:29:0b:03:
         5f:b3:29:52:b1:a9:ef:9b:41:fb:0a:bb:0f:01:64:99:f4:91:
         dd:1a:23:cf:58:0f:8f:20:b0:d5:47:c6:a3:51:55:5b:d2:07:
         62:bc:fc:37:05:3e:36:b0:38:21:a2:46:a0:60:b4:31:ea:71:
         14:7f:50:39:6d:49:b1:82:eb:47:07:b0:10:18:87:a5:6e:61:
         76:63:28:4c:01:6e:8c:d1:5d:9a:07:c1:ce:8b:02:df:1f:67:
         9a:e3:a0:c1:10:be:39:75:e8:ba:8c:ef:fb:8f:4d:c4:74:c9:
         aa:74:a7:5d:29:47:1a:e2:dd:94:cf:7b:65:3a:69:d7:24:c1:
         5e:07:89:cf:54:95:27:e7:ec:31:54:44:62:55:5d:6e:b0:a8:
         bd:0d:bb:29:ff:7f:ba:c3:eb:69:b2:04:b9:2b:8b:02:f1:32:
         4f:d7:9a:8a:b0:89:cd:4a:c3:32:85:0d:ed:8d:53:55:f2:4f:
         a7:fe:6c:02:55:a9:0d:b9:e2:dd:d2:e4:8d:e3:e6:ec:4d:79:
         92:cd:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:00:52 2025 by rpki-client