This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer
File: SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer (raw, json)
Hash identifier: q2HryUoMvDWzrhG9DW45/G+wucCHGVu9mCszfyti0tw=
Subject key identifier: 48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5F4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Dec 2025 01:41:15 +0000
Certificate not after: Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources: IP: 2001:350::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24395 (0x5f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 15 01:41:15 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=48DB1AE483E343093AB063037260FEB919514038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:ea:47:b3:a8:2b:54:76:fa:6c:3c:04:a5:
65:5c:5a:65:c2:54:c6:b4:97:f2:df:c9:64:eb:f4:
51:89:86:cf:d0:33:cd:72:d2:99:18:fc:09:46:1b:
91:70:9c:d5:bf:3f:44:34:d5:31:f3:63:92:74:a2:
0c:58:b9:34:a3:50:d6:5a:eb:f4:c4:4e:b7:a1:f1:
55:c2:ee:d2:ef:5e:be:dd:d9:eb:a1:b9:2c:45:33:
74:a6:59:1f:8b:6a:cb:2c:d0:70:7c:b5:44:6d:00:
40:36:85:09:1e:2b:7a:9a:37:49:30:66:69:93:94:
53:3f:d7:6d:a3:6d:69:8f:bf:c5:bf:de:66:2c:93:
d0:67:44:0b:c3:51:61:16:87:ca:42:ee:b8:af:db:
81:ca:d2:c9:8d:11:94:85:33:e4:0e:5e:51:e1:25:
56:00:f8:2e:e3:0d:96:64:57:93:f8:b8:bc:14:84:
c0:b7:e8:a1:c4:16:70:7f:54:00:e0:15:8e:d6:95:
ee:29:91:4b:03:47:b7:88:50:8f:fd:fc:9e:da:69:
b5:35:1d:47:3a:42:6c:c3:12:a0:5d:d0:d1:14:a7:
4e:e4:58:5c:24:0a:c2:af:80:27:12:7c:03:62:93:
96:10:4c:16:78:85:c5:c3:5d:6f:0a:7e:37:96:84:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:350::/32
Signature Algorithm: sha256WithRSAEncryption
27:f2:d5:d5:bf:11:e7:53:a3:dd:62:83:70:31:4c:82:eb:cb:
5f:6d:d5:4f:b9:bd:0b:88:12:9c:e0:ca:c3:0b:2c:46:7d:ff:
d2:df:8f:dc:bd:b4:0f:74:d1:5b:a0:2c:46:13:4e:e7:1b:49:
4f:e7:62:8e:83:ca:8f:1c:83:14:a8:9c:25:8b:68:3e:8e:a2:
c7:5b:c1:30:e0:f3:e6:ef:cf:21:1d:eb:cc:c1:cb:1a:86:94:
c6:5b:91:4a:18:79:64:95:e2:e9:2c:54:2f:0e:b9:9f:f3:51:
7b:35:4c:59:02:28:ae:de:2f:ee:6b:d8:be:74:4a:91:51:cc:
9b:08:8d:93:91:b6:07:d6:f7:8f:63:11:2e:ce:30:33:00:aa:
68:5f:ac:83:6d:43:dc:2a:e6:4b:4a:a1:77:36:e2:45:30:c7:
26:a1:c5:21:c2:ce:f8:17:5d:c0:f2:d5:37:de:6a:84:fe:51:
b1:8c:c3:03:60:29:55:03:cd:af:c7:57:a5:b7:f2:63:13:03:
61:cd:f8:88:a2:bb:1f:06:7b:35:61:d5:1b:96:41:a9:19:30:
f7:38:10:51:8e:67:6b:b8:7d:00:e8:2d:c5:d2:e8:02:76:de:
66:16:bd:3b:7a:7f:20:70:ab:fc:22:e7:fc:fa:54:7f:c7:f6:
99:85:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:05:03 2025 by rpki-client