This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/VdPwjq-1MFAHwQl4JEYOBEkiyU8.cer
File:                     VdPwjq-1MFAHwQl4JEYOBEkiyU8.cer (raw, json)
Hash identifier:          r/SoSzYlY1LJRhGhBODyYa+HYjNmZXiK2ZxWxCuLM1U=
Subject key identifier:   55:D3:F0:8E:AF:B5:30:50:07:C1:09:78:24:46:0E:04:49:22:C9:4F
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5EF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:38:19 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 103.179.160.0/23
                          IP: 202.237.92.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 12:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24311 (0x5ef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:38:19 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=55D3F08EAFB5305007C1097824460E044922C94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:48:71:83:32:ea:da:55:b8:5d:f5:46:f5:
                    ab:b6:c8:56:ce:bd:eb:ba:51:90:65:c6:86:2c:03:
                    40:41:d6:a2:e1:4e:15:e6:0d:02:e2:84:10:1e:58:
                    4c:05:bf:8a:a3:97:59:87:7a:03:b1:d5:93:04:12:
                    61:9c:3a:21:fc:a5:ae:41:e5:71:30:84:6f:2e:35:
                    a8:30:90:5b:9b:88:b9:4e:c4:dc:b0:29:54:22:d7:
                    33:eb:67:02:b1:50:86:10:e6:52:ec:71:d1:74:a2:
                    e6:93:e8:e3:e4:5f:31:99:85:2c:92:2c:cf:1e:d3:
                    a9:d4:d8:af:2c:da:b4:ee:9f:01:49:fd:41:4e:32:
                    0c:cb:08:bb:41:45:ec:d5:06:0c:ee:28:0c:a1:fa:
                    1b:b2:50:9f:5b:53:7f:81:d0:88:0d:14:a2:81:a6:
                    8c:57:fe:4c:b3:01:cb:18:2c:18:1c:0b:50:20:60:
                    82:90:ef:71:f5:fd:b6:c1:f1:c9:ff:db:c5:1c:5f:
                    fa:bd:be:1f:8c:c1:60:83:7c:0b:cf:33:63:d3:d5:
                    51:89:2c:09:4e:72:31:f8:ca:dc:f5:20:bc:4f:71:
                    96:2a:71:45:28:6c:7d:03:e5:52:c9:90:61:af:b0:
                    6b:3e:b5:e9:a3:0e:51:b7:d6:64:d0:03:29:3b:c3:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D3:F0:8E:AF:B5:30:50:07:C1:09:78:24:46:0E:04:49:22:C9:4F
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.160.0/23
                  202.237.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:41:29:3c:cd:38:88:db:66:00:5b:a9:35:c7:d1:57:93:44:
         4d:a8:06:71:61:03:d5:9d:41:35:bf:1e:37:62:9e:b6:c2:7e:
         c5:6f:31:53:f5:1c:aa:ac:4c:1c:09:ac:53:51:c4:b9:b1:74:
         04:32:38:da:d1:07:50:df:e8:7c:68:29:a9:97:d7:b9:85:9b:
         ac:09:9a:77:3b:80:c0:e6:49:3c:01:0e:64:10:36:57:eb:de:
         e4:d3:6f:cf:3d:22:9d:dd:5c:14:46:44:f6:f4:c4:a3:86:47:
         2b:88:85:c5:92:53:6e:35:87:26:f4:65:22:0c:7a:9c:52:f2:
         1f:09:cc:a7:95:c2:ee:9c:ca:86:30:a9:e9:78:68:7f:eb:9f:
         ba:88:2e:e8:fa:aa:82:81:ef:76:5c:3f:87:a3:d5:fd:07:cb:
         fa:b2:ff:d8:0c:ab:f9:14:79:8a:90:92:84:74:e3:92:f9:d8:
         b8:75:83:bc:98:9b:78:ea:d8:f3:4e:2b:ac:14:b8:88:72:83:
         90:8d:ed:9d:d9:7b:cf:81:1e:b3:1f:27:0c:b1:31:31:03:0a:
         67:ca:eb:6d:65:42:bb:5b:10:84:4b:09:fe:60:11:4d:5d:a4:
         12:e7:14:9a:c2:83:47:2e:ab:2e:3f:67:8f:e9:42:5f:f3:54:
         f5:90:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:43:09 2025 by rpki-client