This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer
File:                     ahN8Qe-zIkj1ik6riY9d4PKjutM.cer (raw, json)
Hash identifier:          fyNHcdhqV8UjAem+2dDENRQgQvfkmlbjXqW1hT+bm4U=
Subject key identifier:   6A:13:7C:41:EF:B3:22:48:F5:8A:4E:AB:89:8F:5D:E0:F2:A3:BA:D3
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5DD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:30:13 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2400:c7e0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24024 (0x5dd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:30:13 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=6A137C41EFB32248F58A4EAB898F5DE0F2A3BAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:27:39:4b:d8:4d:1f:13:a1:bc:d7:40:ec:
                    68:48:ab:2f:27:d7:ae:cf:df:69:66:17:52:23:6e:
                    1e:5a:56:c7:85:ed:dc:a6:a9:59:f1:f1:25:45:ca:
                    82:3e:50:6b:20:48:00:59:65:e7:c5:76:a5:56:a6:
                    b6:18:c8:68:79:86:b8:1e:47:b3:ee:8b:aa:fc:1e:
                    2a:5e:29:f4:8b:0f:d6:c7:67:b6:d1:72:53:42:bb:
                    e6:45:c6:11:76:c0:fc:68:b5:e1:34:75:4f:a4:ac:
                    15:67:34:8c:54:8b:41:5d:ce:71:cd:6d:f3:8b:74:
                    d2:36:9c:85:4e:e5:88:2d:68:4c:b0:2b:88:f3:be:
                    06:15:f8:04:0a:bf:12:8b:36:82:5d:47:14:4b:df:
                    c9:62:31:43:52:88:30:5a:49:98:ea:87:b6:06:98:
                    dc:82:47:50:b2:53:9a:8d:bc:96:71:c8:c6:2b:f6:
                    f5:c9:60:7c:7f:20:6d:84:b3:f2:1e:9e:3e:ad:ce:
                    db:f0:11:05:dd:1a:80:b6:19:8c:8b:62:63:ae:34:
                    af:5e:8b:b5:9b:6c:d7:61:79:4f:06:1e:f4:80:b3:
                    c5:bc:ad:e2:74:ed:64:eb:43:08:ee:9a:5f:17:83:
                    c9:48:c1:ff:18:72:2b:c1:50:41:7e:18:af:e9:fe:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:7C:41:EF:B3:22:48:F5:8A:4E:AB:89:8F:5D:E0:F2:A3:BA:D3
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:3f:df:f9:4d:48:8e:ff:61:7b:a4:ce:72:28:8f:66:da:
         b9:9f:56:b5:9a:69:a5:40:6a:ff:a4:07:30:4a:d8:3c:77:e0:
         70:f6:55:33:cf:87:ef:cf:e9:6f:e1:08:c6:a8:e0:ed:99:46:
         37:98:53:3b:84:cf:ff:f9:41:b7:c7:27:08:67:16:ce:f4:0a:
         58:bc:5e:0d:e7:6d:29:31:7a:96:69:be:83:ff:66:b3:9c:52:
         2b:14:30:2b:7b:a9:11:75:6b:2f:7b:16:9d:58:0f:bf:b8:7b:
         d4:a8:d9:ce:15:08:02:0f:28:8a:85:66:9c:4d:26:d9:c3:d4:
         4d:17:32:40:de:6b:7d:d7:85:2c:ac:7a:6e:46:cc:9f:86:29:
         05:89:36:d4:50:0f:31:20:77:6e:b3:e3:8a:55:9b:00:d9:fd:
         15:6b:f2:84:46:ae:f3:c9:02:5e:30:56:34:2d:14:40:99:f7:
         94:c8:62:33:4a:3e:fa:99:de:87:9e:57:df:7a:d6:d8:40:ad:
         9b:a8:ee:6c:f0:ed:d9:13:fc:b2:ed:b4:da:13:6e:ab:37:e3:
         57:7c:b0:af:98:17:bc:21:b9:42:16:77:72:cc:52:54:d0:cd:
         82:cf:c6:f4:92:92:a1:16:8e:55:3a:5c:33:f6:ac:cd:15:07:
         eb:a1:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----