This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer File: XQVbLarEiHjMmxEnopzxFmaSCiM.cer (raw, json) Hash identifier: l8iEWKy5kyrIQ2UzLPdeaUmQOToLH6b5/PV+eRdi5Oc= Subject key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5F2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:40:17 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 103.24.168.0/22 IP: 103.235.124.0/22 IP: 124.47.64.0/18 IP: 202.52.16.0/20 IP: 202.91.48.0/20 IP: 202.122.224.0/19 IP: 202.171.112.0/20 IP: 203.76.64.0/19 IP: 203.140.240.0/20 IP: 203.179.0.0/20 IP: 203.191.208.0/20 IP: 211.2.184.0/21 IP: 211.125.96.0/19 IP: 219.100.64.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24362 (0x5f2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:40:17 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:fa:25:d4:c5:79:7d:36:d0:3b:cd:72:47: bc:73:aa:d7:c2:28:8e:bf:86:cc:02:5d:0b:41:33: 1c:2a:b7:c7:77:af:34:5b:28:49:a4:d2:70:e3:7f: bf:f8:25:91:2d:e9:12:dc:fe:bc:3c:15:61:3e:db: b3:3a:f7:d7:c1:12:72:79:c9:bb:e6:4f:c5:36:7f: da:43:54:5e:24:e2:10:9d:14:cb:d8:eb:dc:12:eb: de:6e:5d:a4:4b:1f:a7:bd:57:31:9f:c1:4d:4b:b3: 6a:d0:0a:b6:ce:d8:80:31:51:62:99:b0:23:29:37: cc:50:4b:fe:e6:ba:4b:be:53:44:0e:c6:7c:2f:55: e2:4f:a4:40:ac:84:b1:b2:73:a8:da:7c:e5:04:69: 3c:e4:05:7e:b4:41:e9:8c:37:41:e6:c1:13:41:14: 3a:a0:e0:58:c0:c5:e4:6c:76:aa:ac:9f:81:60:c5: a8:b0:f1:4e:ef:27:b8:c9:0a:26:ee:a5:50:60:71: 99:2c:08:5d:1e:e9:d9:76:be:00:0c:48:68:d8:7d: 6d:6e:86:c7:b3:7b:1f:5c:a3:93:f4:b9:a7:b4:d4: 6d:7b:40:9f:21:11:fe:89:51:97:13:6f:f1:29:ed: 7f:0d:e2:a3:18:e0:33:ec:01:f0:ab:b1:d1:fe:35: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.168.0/22 103.235.124.0/22 124.47.64.0/18 202.52.16.0/20 202.91.48.0/20 202.122.224.0/19 202.171.112.0/20 203.76.64.0/19 203.140.240.0/20 203.179.0.0/20 203.191.208.0/20 211.2.184.0/21 211.125.96.0/19 219.100.64.0/22 Signature Algorithm: sha256WithRSAEncryption 43:6e:45:50:98:4f:97:31:05:80:cd:a0:aa:29:6d:6c:d5:a9: cd:84:93:f1:a7:b8:6d:c2:f9:97:e1:92:e0:f2:22:70:21:8d: cf:4b:d6:f9:bf:d8:3d:fd:2c:a6:2a:49:e3:74:5d:11:46:9e: 3a:11:b5:1c:51:e6:af:df:9d:8f:4a:21:38:d2:2f:eb:f9:4e: f6:56:2b:f0:84:b4:6c:c7:37:c6:5e:2b:f2:3c:78:02:6a:8a: 20:19:aa:79:e2:fb:fe:c9:bf:3a:49:9a:64:12:b1:46:6c:3d: 41:3c:0c:d8:8f:db:75:f3:22:c3:23:b6:a9:d4:54:3e:f8:e7: a6:bf:9c:8e:a1:0f:b2:4d:75:38:c5:35:61:6f:a9:39:86:67: 07:85:7a:41:04:69:12:c7:4e:97:a5:0e:e6:ba:63:81:af:c4: 62:ca:81:15:50:0f:e5:71:0f:df:7d:02:40:e2:aa:0d:73:59: ee:b2:3d:e0:3a:c8:65:1c:d9:7b:d2:30:4a:af:50:5a:54:9b: d6:46:86:b1:44:d0:9c:6c:4f:ed:5b:c7:1d:fc:09:48:8f:3b: d7:60:c6:1e:69:64:8e:11:af:5f:b4:12:9c:ea:b5:14:46:9c: 9c:fc:ec:e6:4e:79:dd:24:4d:89:cd:1d:c9:81:84:53:de:68: 9f:36:17:d3 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgICXyowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxNDAxN1oXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoNUQwNTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEy MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL9+iXUxXl9NtA7zXJH vHOq18Iojr+GzAJdC0EzHCq3x3evNFsoSaTScON/v/glkS3pEtz+vDwVYT7bszr3 18EScnnJu+ZPxTZ/2kNUXiTiEJ0Uy9jr3BLr3m5dpEsfp71XMZ/BTUuzatAKts7Y gDFRYpmwIyk3zFBL/ua6S75TRA7GfC9V4k+kQKyEsbJzqNp85QRpPOQFfrRB6Yw3 QebBE0EUOqDgWMDF5Gx2qqyfgWDFqLDxTu8nuMkKJu6lUGBxmSwIXR7p2Xa+AAxI aNh9bW6Gx7N7H1yjk/S5p7TUbXtAnyER/olRlxNv8Sntfw3ioxjgM+wB8Kux0f41 E9kCAwEAAaOCAtQwggLQMB0GA1UdDgQWBBRdBVstqsSIeMybESeinPEWZpIKIzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8zOTMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM5My9YUVZiTGFy RWlIak1teEVub3B6eEZtYVNDaU0ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCZxioAwQCZ+t8AwQGfC9AAwQE yjQQAwQEylswAwQFynrgAwQEyqtwAwQFy0xAAwQEy4zwAwQEy7MAAwQEy7/QAwQD 0wK4AwQF031gAwQC22RAMA0GCSqGSIb3DQEBCwUAA4IBAQBDbkVQmE+XMQWAzaCq KW1s1anNhJPxp7htwvmX4ZLg8iJwIY3PS9b5v9g9/SymKknjdF0RRp46EbUcUeav 352PSiE40i/r+U72VivwhLRsxzfGXivyPHgCaoogGap54vv+yb86SZpkErFGbD1B PAzYj9t18yLDI7ap1FQ++Oemv5yOoQ+yTXU4xTVhb6k5hmcHhXpBBGkSx06XpQ7m umOBr8RiyoEVUA/lcQ/ffQJA4qoNc1nusj3gOshlHNl70jBKr1BaVJvWRoaxRNCc bE/tW8cd/AlIjzvXYMYeaWSOEa9ftBKc6rUURpyc/OzmTnndJE2JzR3JgYRT3mif NhfT -----END CERTIFICATE-----Generated at Mon Dec 22 11:02:41 2025 by rpki-client