This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/apWCSYAD-L9tk8FR84y0iWpLLVw.cer File: apWCSYAD-L9tk8FR84y0iWpLLVw.cer (raw, json) Hash identifier: BDctLfyLm+8K16uT5bc8A4IAYD5p7HO4ZUERyIgXS0Y= Subject key identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5E10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:31:44 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 202.253.252.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24080 (0x5e10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:31:44 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=6A9582498003F8BF6D93C151F38CB4896A4B2D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:18:b3:bf:9b:21:ed:7e:d1:13:6b:dd:5b: 69:7d:30:a7:a7:c1:ac:84:da:9d:60:9b:76:fc:5d: c5:14:ad:ed:66:f2:43:42:34:cb:bf:c2:98:51:89: 81:2b:c0:cf:88:f9:ef:c8:86:8d:1e:4c:16:45:d9: ec:28:dd:66:19:ea:d0:f9:19:d9:57:db:95:7a:a1: 8a:b1:8f:fc:93:4b:b4:ff:56:7a:85:69:34:e1:05: c9:d9:a8:21:09:d5:e0:5a:78:9f:05:3f:0e:aa:65: 95:28:de:2c:5c:d0:f7:4c:53:2a:f1:49:76:12:63: ae:a4:17:46:bd:bc:f0:9b:51:7f:31:51:20:c3:b7: 16:d7:da:07:b2:67:60:f2:d5:78:fb:c3:0c:05:8f: 99:9c:c3:b7:28:14:94:63:ed:18:2c:ed:28:9b:6f: 4c:14:81:43:f9:f2:34:a3:65:54:01:61:2e:ae:f7: 56:c4:46:b9:46:99:5a:63:6a:27:4c:9f:62:97:c5: 56:ab:4b:cb:a5:69:eb:3d:e4:0d:f9:c2:6e:32:a0: fd:5d:b8:4f:58:ab:11:0e:99:f9:b6:f7:91:21:50: a2:f7:fa:7a:91:2a:d2:0f:3b:12:c8:09:56:d4:ec: 7a:3f:b2:90:3f:20:c6:9b:86:24:ad:8b:53:9e:37: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.253.252.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:24:0d:e4:f8:3d:14:54:1e:42:be:f1:35:3e:4b:86:20:72: 36:4b:56:b9:76:fd:58:86:1d:32:39:27:d3:cd:20:2f:a4:76: 6a:0d:d2:30:29:79:d1:d6:61:e9:ae:2d:f9:06:bc:64:c6:ec: 44:26:86:7d:15:47:89:96:8c:31:6c:23:c4:5b:c7:7f:a6:b5: c0:ab:e5:ea:3c:69:a1:3d:9b:31:10:8f:a4:39:89:87:c4:c6: 64:f4:d8:bc:65:1b:1d:48:8b:bf:6a:e6:47:60:ea:64:5c:be: ed:21:58:f6:3f:5a:0c:bf:00:dc:7c:8e:93:6e:e6:5c:45:58: 4b:f8:7f:cb:8e:f2:7a:0f:20:59:4f:39:a7:47:e4:e8:8d:fa: b2:c7:da:b9:30:b3:86:31:c9:65:67:c0:69:20:50:c0:e2:fb: f7:67:fe:fd:f9:f0:d8:9d:86:83:f3:59:5d:90:1f:2c:41:d9: a8:49:de:64:6e:1f:1b:b8:70:60:ac:db:8f:f9:7e:4e:04:bb: e2:ff:6f:fe:7b:97:30:e5:e0:d5:d2:c2:bc:6b:c8:96:8a:e1: 8e:1f:82:75:6b:46:49:ce:fb:49:60:6e:c7:69:d2:4a:ab:4d: 83:a2:78:9f:3b:76:1a:d6:38:ca:65:4c:63:03:ea:3e:13:54: 7f:45:5f:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICXhAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzE0NFoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoNkE5NTgyNDk4MDAzRjhCRjZEOTNDMTUxRjM4Q0I0ODk2QTRCMkQ1 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6KGLO/myHtftETa91b aX0wp6fBrITanWCbdvxdxRSt7WbyQ0I0y7/CmFGJgSvAz4j578iGjR5MFkXZ7Cjd Zhnq0PkZ2VfblXqhirGP/JNLtP9WeoVpNOEFydmoIQnV4Fp4nwU/DqpllSjeLFzQ 90xTKvFJdhJjrqQXRr288JtRfzFRIMO3FtfaB7JnYPLVePvDDAWPmZzDtygUlGPt GCztKJtvTBSBQ/nyNKNlVAFhLq73VsRGuUaZWmNqJ0yfYpfFVqtLy6Vp6z3kDfnC bjKg/V24T1irEQ6Z+bb3kSFQovf6epEq0g87EsgJVtTsej+ykD8gxpuGJK2LU543 Ut8CAwEAAaOCAokwggKFMB0GA1UdDgQWBBRqlYJJgAP4v22TwVHzjLSJakstXDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi9hcFdD U1lBRC1MOXRrOEZSODR5MGlXcExMVncubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByv38MA0GCSqGSIb3DQEB CwUAA4IBAQA9JA3k+D0UVB5CvvE1PkuGIHI2S1a5dv1Yhh0yOSfTzSAvpHZqDdIw KXnR1mHpri35BrxkxuxEJoZ9FUeJlowxbCPEW8d/prXAq+XqPGmhPZsxEI+kOYmH xMZk9Ni8ZRsdSIu/auZHYOpkXL7tIVj2P1oMvwDcfI6TbuZcRVhL+H/LjvJ6DyBZ TzmnR+Tojfqyx9q5MLOGMcllZ8BpIFDA4vv3Z/79+fDYnYaD81ldkB8sQdmoSd5k bh8buHBgrNuP+X5OBLvi/2/+e5cw5eDV0sK8a8iWiuGOH4J1a0ZJzvtJYG7HadJK q02DonifO3Ya1jjKZUxjA+o+E1R/RV+v -----END CERTIFICATE-----Generated at Mon Dec 22 11:04:27 2025 by rpki-client