This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
File: WWOeon3tRg88m0MhbvxRlV9iick.cer (raw, json)
Hash identifier: sJU0Subv4uXj8iHRflZInjQfei7G4U0x+VzZldpxi5c=
Subject key identifier: 59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5F97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Dec 2025 01:43:23 +0000
Certificate not after: Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources: IP: 202.240.84.0/23
IP: 210.172.192.0/19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24471 (0x5f97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 15 01:43:23 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=59639EA27DED460F3C9B43216EFC51955F6289C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:7a:90:9c:2f:2b:d1:34:13:73:54:c4:16:
1f:c5:d6:a1:36:9a:5d:7e:2c:6b:a6:7e:8e:7e:c5:
48:5d:2e:67:b0:fb:64:fa:a6:2f:83:95:8f:3c:3a:
75:d1:e7:19:54:83:41:2a:fb:ea:bf:7b:a5:b0:04:
0d:63:fd:a9:47:41:ec:39:85:11:87:28:08:32:e8:
ae:25:e2:99:66:21:5a:00:f9:1f:df:0c:11:98:65:
4c:69:b2:a3:93:00:4e:e3:98:9b:0d:cd:82:ac:0e:
b2:54:38:25:c7:d5:b9:8c:67:7d:5a:df:94:70:de:
fe:c8:6d:30:ed:b2:ef:59:5c:c1:39:6f:6e:5c:fe:
ab:33:f4:43:fc:a9:fb:65:c6:8c:5b:16:b4:1e:90:
4a:85:2a:ce:0f:f2:30:94:5d:a2:59:12:ea:b5:f1:
07:87:35:86:96:c4:81:a1:88:38:e2:db:5e:7f:0b:
86:47:15:50:d3:0a:a2:c1:8b:5b:c3:25:91:bb:1b:
62:f8:d7:48:08:19:3f:d3:d2:a5:01:08:62:74:43:
f0:e4:73:b8:33:a1:16:72:8e:db:f7:03:a6:cf:c4:
e8:bc:23:ce:2a:e7:89:58:a0:e0:bb:ec:f1:67:57:
36:92:58:41:c6:06:bc:40:0d:65:d1:b4:28:56:6d:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.240.84.0/23
210.172.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:78:e4:3d:c2:d8:97:28:95:60:f8:cd:55:f8:f0:5e:17:95:
17:eb:0e:08:8d:54:32:2d:fe:9f:27:78:ce:b9:2a:8d:26:59:
a1:62:8e:72:15:5f:24:91:56:18:f1:4b:06:ac:97:aa:1d:e4:
42:39:4d:4f:b2:37:e6:2e:a2:f0:ff:62:47:5a:a3:eb:4a:3f:
9e:71:8b:c5:94:6c:09:9a:f3:88:d7:a2:ef:be:ed:6a:69:9f:
c2:e5:d0:96:b4:6c:03:65:bf:af:55:a9:ec:ed:bd:0c:c5:1f:
4f:e0:4c:8c:71:af:b3:44:cb:7c:1c:30:b5:d9:5a:17:5a:62:
77:be:a9:55:89:96:0d:51:c3:3d:1f:03:d9:d1:3e:ee:fc:d1:
5b:24:a4:79:9d:23:73:3f:c2:6e:d0:72:15:25:d2:4b:92:9b:
62:a1:d5:68:67:8b:e0:3f:fd:24:d5:a5:34:15:d4:66:60:e1:
57:9f:b2:38:c2:c4:7b:e5:9f:94:ef:56:c6:fe:79:d1:95:67:
f8:02:d3:af:5d:66:e4:8f:56:33:65:58:2f:27:0c:89:fb:75:
5f:6b:31:45:e0:5c:a3:60:0c:12:28:5e:2c:cb:90:76:ea:f2:
a3:55:91:81:00:c5:7d:90:26:b0:b4:95:c9:b3:59:ba:52:4e:
cc:81:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:02:34 2025 by rpki-client