This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer
File:                     YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer (raw, json)
Hash identifier:          eBtgMnAvjCxHR7qAOeDklNOypiVUiywl9B3+genj6KY=
Subject key identifier:   62:19:9A:48:F1:A7:1E:D1:80:93:20:C4:70:28:F0:27:9C:1D:9E:E3
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       13E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:36:05 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 192.50.0.0/21
                          IP: 192.50.204.0/24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 10:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5091 (0x13e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Dec 15 01:36:05 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=62199A48F1A71ED1809320C47028F0279C1D9EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:60:04:ce:79:1c:6a:10:ea:c4:ad:9d:a2:
                    94:d1:3d:91:21:b6:fc:f6:b1:cb:28:d4:4b:33:66:
                    1e:c7:d1:e4:63:47:fb:c6:98:05:3e:b6:44:f6:65:
                    39:44:ae:49:57:21:27:09:d7:60:f0:81:35:31:c1:
                    6d:92:38:5a:8f:58:02:65:ec:a3:bd:ed:9f:29:55:
                    e3:2f:52:f0:7f:9a:2a:2d:09:46:8a:8b:dc:04:09:
                    f5:2f:73:96:79:b6:b5:ba:cc:fc:80:73:db:80:f1:
                    2c:e9:5d:8d:34:0a:e7:1e:19:ec:9f:98:de:9d:7a:
                    bb:bb:62:7a:50:74:98:d8:0b:69:cf:83:c5:b9:b5:
                    4f:fb:87:2f:4a:c6:18:d9:aa:be:a7:b0:68:9c:84:
                    62:39:30:5a:20:32:f6:f3:c8:26:65:45:14:b2:9d:
                    b0:fe:3d:4d:72:51:58:76:48:39:dc:a5:5e:7e:3f:
                    65:1a:2b:dd:80:a9:f5:ce:98:c1:3b:1b:71:d2:ca:
                    0c:b2:8f:15:af:9b:fc:c2:a7:1f:4b:5f:0b:44:9b:
                    51:5a:55:7b:b8:55:28:d5:a2:f1:10:3c:b9:87:38:
                    7e:17:e4:34:74:e1:4f:e9:a5:fe:70:e1:b3:e2:a3:
                    87:b7:c2:79:56:f9:f3:93:2d:58:ac:a5:91:05:94:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:19:9A:48:F1:A7:1E:D1:80:93:20:C4:70:28:F0:27:9C:1D:9E:E3
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.0.0/21
                  192.50.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:68:75:67:ca:14:6a:39:a0:23:fc:1c:12:cf:84:6f:ce:
         1b:ed:5e:af:f0:fd:46:ef:cd:e8:97:9a:8f:af:03:ce:46:6a:
         89:46:a0:b9:6c:45:48:99:ed:f8:2c:19:6c:f7:96:b6:f9:56:
         b1:ed:a7:78:3d:3b:ad:09:99:e8:b5:a7:69:6d:92:c5:16:94:
         b6:37:ac:05:81:fd:25:57:d3:d4:13:4b:e9:f0:48:de:66:01:
         7d:85:44:c4:c3:66:cf:6d:a0:d2:95:59:0c:55:73:c5:1b:86:
         e1:48:ce:5e:49:f4:b2:6f:8a:53:90:3f:bf:d7:47:6e:17:70:
         38:90:0b:11:ab:75:6d:dc:47:b0:d6:4e:3c:55:e0:7a:11:ee:
         6e:37:9c:9b:30:85:e7:b3:ca:b2:4c:cd:a6:13:85:67:f7:8e:
         6f:3c:df:2b:ea:0d:9e:d1:16:37:b1:9b:36:39:9e:b4:ff:72:
         55:61:7b:ae:84:f7:9d:0b:42:b5:bd:a8:1e:62:a5:58:40:11:
         2a:46:eb:49:0d:b4:aa:05:cd:47:41:b2:0f:87:00:02:1c:55:
         45:70:ac:72:4f:59:2e:32:c5:f1:15:9f:a5:a0:b7:ce:ff:c4:
         33:c4:1e:45:59:1f:19:97:59:3f:d1:6b:61:79:28:f7:ca:bd:
         f5:a6:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:41:02 2026 by rpki-client