This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer
File:                     SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer (raw, json)
Hash identifier:          q2HryUoMvDWzrhG9DW45/G+wucCHGVu9mCszfyti0tw=
Subject key identifier:   48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5F4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:41:15 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2001:350::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24395 (0x5f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:41:15 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=48DB1AE483E343093AB063037260FEB919514038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:ea:47:b3:a8:2b:54:76:fa:6c:3c:04:a5:
                    65:5c:5a:65:c2:54:c6:b4:97:f2:df:c9:64:eb:f4:
                    51:89:86:cf:d0:33:cd:72:d2:99:18:fc:09:46:1b:
                    91:70:9c:d5:bf:3f:44:34:d5:31:f3:63:92:74:a2:
                    0c:58:b9:34:a3:50:d6:5a:eb:f4:c4:4e:b7:a1:f1:
                    55:c2:ee:d2:ef:5e:be:dd:d9:eb:a1:b9:2c:45:33:
                    74:a6:59:1f:8b:6a:cb:2c:d0:70:7c:b5:44:6d:00:
                    40:36:85:09:1e:2b:7a:9a:37:49:30:66:69:93:94:
                    53:3f:d7:6d:a3:6d:69:8f:bf:c5:bf:de:66:2c:93:
                    d0:67:44:0b:c3:51:61:16:87:ca:42:ee:b8:af:db:
                    81:ca:d2:c9:8d:11:94:85:33:e4:0e:5e:51:e1:25:
                    56:00:f8:2e:e3:0d:96:64:57:93:f8:b8:bc:14:84:
                    c0:b7:e8:a1:c4:16:70:7f:54:00:e0:15:8e:d6:95:
                    ee:29:91:4b:03:47:b7:88:50:8f:fd:fc:9e:da:69:
                    b5:35:1d:47:3a:42:6c:c3:12:a0:5d:d0:d1:14:a7:
                    4e:e4:58:5c:24:0a:c2:af:80:27:12:7c:03:62:93:
                    96:10:4c:16:78:85:c5:c3:5d:6f:0a:7e:37:96:84:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:350::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:d5:d5:bf:11:e7:53:a3:dd:62:83:70:31:4c:82:eb:cb:
         5f:6d:d5:4f:b9:bd:0b:88:12:9c:e0:ca:c3:0b:2c:46:7d:ff:
         d2:df:8f:dc:bd:b4:0f:74:d1:5b:a0:2c:46:13:4e:e7:1b:49:
         4f:e7:62:8e:83:ca:8f:1c:83:14:a8:9c:25:8b:68:3e:8e:a2:
         c7:5b:c1:30:e0:f3:e6:ef:cf:21:1d:eb:cc:c1:cb:1a:86:94:
         c6:5b:91:4a:18:79:64:95:e2:e9:2c:54:2f:0e:b9:9f:f3:51:
         7b:35:4c:59:02:28:ae:de:2f:ee:6b:d8:be:74:4a:91:51:cc:
         9b:08:8d:93:91:b6:07:d6:f7:8f:63:11:2e:ce:30:33:00:aa:
         68:5f:ac:83:6d:43:dc:2a:e6:4b:4a:a1:77:36:e2:45:30:c7:
         26:a1:c5:21:c2:ce:f8:17:5d:c0:f2:d5:37:de:6a:84:fe:51:
         b1:8c:c3:03:60:29:55:03:cd:af:c7:57:a5:b7:f2:63:13:03:
         61:cd:f8:88:a2:bb:1f:06:7b:35:61:d5:1b:96:41:a9:19:30:
         f7:38:10:51:8e:67:6b:b8:7d:00:e8:2d:c5:d2:e8:02:76:de:
         66:16:bd:3b:7a:7f:20:70:ab:fc:22:e7:fc:fa:54:7f:c7:f6:
         99:85:f3:35
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICX0swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxNDExNVoXDTI2MTIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoNDhEQjFBRTQ4M0UzNDMwOTNBQjA2MzAzNzI2MEZFQjkxOTUxNDAz
ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKyE6kezqCtUdvpsPASl
ZVxaZcJUxrSX8t/JZOv0UYmGz9AzzXLSmRj8CUYbkXCc1b8/RDTVMfNjknSiDFi5
NKNQ1lrr9MROt6HxVcLu0u9evt3Z66G5LEUzdKZZH4tqyyzQcHy1RG0AQDaFCR4r
epo3STBmaZOUUz/XbaNtaY+/xb/eZiyT0GdEC8NRYRaHykLuuK/bgcrSyY0RlIUz
5A5eUeElVgD4LuMNlmRXk/i4vBSEwLfoocQWcH9UAOAVjtaV7imRSwNHt4hQj/38
ntpptTUdRzpCbMMSoF3Q0RSnTuRYXCQKwq+AJxJ8A2KTlhBMFniFxcNdbwp+N5aE
+DUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRI2xrkg+NDCTqwYwNyYP65GVFAODAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzAwMzMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDMzL1NO
c2E1SVBqUXdrNnNHTURjbUQtdVJsUlFEZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQNQMA0GCSqGSIb3
DQEBCwUAA4IBAQAn8tXVvxHnU6PdYoNwMUyC68tfbdVPub0LiBKc4MrDCyxGff/S
34/cvbQPdNFboCxGE07nG0lP52KOg8qPHIMUqJwli2g+jqLHW8Ew4PPm788hHevM
wcsahpTGW5FKGHlkleLpLFQvDrmf81F7NUxZAiiu3i/ua9i+dEqRUcybCI2TkbYH
1vePYxEuzjAzAKpoX6yDbUPcKuZLSqF3NuJFMMcmocUhws74F13A8tU33mqE/lGx
jMMDYClVA82vx1elt/JjEwNhzfiIorsfBns1YdUblkGpGTD3OBBRjmdruH0A6C3F
0ugCdt5mFr07en8gcKv8Iuf8+lR/x/aZhfM1
-----END CERTIFICATE-----
Generated at Mon Dec 22 11:05:03 2025 by rpki-client