This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer File: Tz5jlsnXbL307S1d56KnYCFMmDc.cer (raw, json) Hash identifier: BAkBvin+6mmr2Fj148T/n+gGzK6uvaSbVdW32wDPqfI= Subject key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5F52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:41:31 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 14.102.192.0/19 IP: 14.128.16.0/20 IP: 101.203.192.0/18 IP: 103.140.200.0/23 IP: 112.137.184.0/21 IP: 112.140.32.0/19 IP: 112.140.128.0/20 IP: 180.211.72.0/21 IP: 180.214.0.0/18 IP: 202.226.52.0/22 IP: 203.140.224.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24402 (0x5f52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:41:31 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:dc:c8:bb:c9:ca:57:39:a8:2e:2f:3b:c4: 2d:0f:52:f0:68:87:e0:6f:53:4c:63:e2:3f:cb:50: ac:76:10:6f:75:26:3f:25:78:9e:c5:ee:3b:2c:fc: d3:6e:63:d1:3e:ec:8e:38:45:38:78:b3:3b:fd:f5: 34:3d:71:07:56:ed:53:e3:9c:f0:99:00:a8:91:88: c7:0c:20:92:c4:f7:22:39:5a:b5:dd:99:17:7d:69: 57:15:0f:0d:b9:92:33:00:ad:f1:09:ca:b6:0a:f8: 6d:fe:9c:63:d4:a5:8e:9d:37:97:d9:6b:dc:66:58: e4:76:f4:5e:2c:ac:c9:c6:8f:d0:e6:70:d6:34:73: e1:91:dc:da:ec:46:90:a4:eb:d5:36:bf:ca:f6:ec: 13:76:2a:ef:c7:e4:30:01:a7:6d:29:d5:06:8a:f9: 26:9d:64:97:48:42:4f:5b:93:29:23:a3:e1:1b:e1: 8b:01:b3:c4:08:29:3b:6e:0c:a5:96:4d:63:18:ad: f9:2f:75:3d:0d:a3:4d:aa:b7:03:99:b1:91:a6:a8: fb:0c:e2:ea:62:e7:24:3d:18:82:bf:51:85:f0:bf: 6b:4c:fb:fc:ab:9b:02:c4:c9:87:05:6b:8b:15:cd: e8:ae:eb:be:ee:f6:c2:bd:49:d5:7c:1c:55:73:50: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.102.192.0/19 14.128.16.0/20 101.203.192.0/18 103.140.200.0/23 112.137.184.0/21 112.140.32.0/19 112.140.128.0/20 180.211.72.0/21 180.214.0.0/18 202.226.52.0/22 203.140.224.0/20 Signature Algorithm: sha256WithRSAEncryption 30:fd:25:ca:d2:f9:70:5f:19:f2:bc:8b:04:9b:5f:1b:0a:df: 9b:a4:8a:69:79:59:3e:d4:57:7d:0e:6f:8d:66:da:67:07:3e: 30:45:73:d1:4d:2d:33:d9:8b:87:15:9c:b2:76:af:a7:17:65: 50:ba:56:92:88:82:29:95:54:ee:1d:89:2f:f3:ad:ae:0b:31: 1f:8b:4e:f7:90:04:66:4c:fc:70:56:6f:59:63:05:fc:af:a9: cd:bf:58:ff:35:09:20:50:39:12:e8:73:f5:ea:6c:a6:ba:07: 4c:c4:62:9b:4c:34:d4:a8:da:69:c7:a5:f7:3e:fd:2e:e2:76: c7:62:c1:9a:da:25:fb:17:04:c9:45:42:3d:81:1f:51:80:1b: 30:7e:0c:16:a6:ab:f9:4f:ed:89:fd:34:84:dd:bc:62:51:b4: 4f:6d:4f:6e:2b:cf:68:b8:a0:59:25:47:0d:29:da:1d:8f:01: a1:e2:21:b1:ac:54:2e:1e:33:4c:91:c5:c6:7d:f3:68:e3:97: 5f:d8:c8:3e:56:41:2a:1b:d5:98:eb:7b:71:50:42:6f:83:c4: bf:b6:b2:e2:38:37:0f:45:5b:67:ee:a3:d4:6d:76:35:01:e3: 71:f5:de:f5:9e:1c:c1:46:98:15:3a:28:e6:95:8f:dc:d5:4b: 9f:48:f0:47 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgICX1IwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxNDEzMVoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoNEYzRTYzOTZDOUQ3NkNCREY0RUQyRDVERTdBMkE3NjAyMTRDOTgz NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALKm3Mi7ycpXOaguLzvE LQ9S8GiH4G9TTGPiP8tQrHYQb3UmPyV4nsXuOyz8025j0T7sjjhFOHizO/31ND1x B1btU+Oc8JkAqJGIxwwgksT3Ijlatd2ZF31pVxUPDbmSMwCt8QnKtgr4bf6cY9Sl jp03l9lr3GZY5Hb0XiysycaP0OZw1jRz4ZHc2uxGkKTr1Ta/yvbsE3Yq78fkMAGn bSnVBor5Jp1kl0hCT1uTKSOj4RvhiwGzxAgpO24MpZZNYxit+S91PQ2jTaq3A5mx kaao+wzi6mLnJD0Ygr9RhfC/a0z7/KubAsTJhwVrixXN6K7rvu72wr1J1XwcVXNQ VysCAwEAAaOCAscwggLDMB0GA1UdDgQWBBRPPmOWyddsvfTtLV3noqdgIUyYNzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjEwNDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIxMDQyL1R6 NWpsc25YYkwzMDdTMWQ1NktuWUNGTW1EYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwWwYIKwYBBQUHAQcBAf8ETDBKMEgEAgABMEIDBAUOZsADBAQOgBADBAZl y8ADBAFnjMgDBANwibgDBAVwjCADBARwjIADBAO000gDBAa01gADBALK4jQDBATL jOAwDQYJKoZIhvcNAQELBQADggEBADD9JcrS+XBfGfK8iwSbXxsK35ukiml5WT7U V30Ob41m2mcHPjBFc9FNLTPZi4cVnLJ2r6cXZVC6VpKIgimVVO4diS/zra4LMR+L TveQBGZM/HBWb1ljBfyvqc2/WP81CSBQORLoc/XqbKa6B0zEYptMNNSo2mnHpfc+ /S7idsdiwZraJfsXBMlFQj2BH1GAGzB+DBamq/lP7Yn9NITdvGJRtE9tT24rz2i4 oFklRw0p2h2PAaHiIbGsVC4eM0yRxcZ982jjl1/YyD5WQSob1Zjre3FQQm+DxL+2 suI4Nw9FW2fuo9RtdjUB43H13vWeHMFGmBU6KOaVj9zVS59I8Ec= -----END CERTIFICATE-----Generated at Mon Dec 22 11:03:58 2025 by rpki-client