This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/fHC-j7qPeAoxbAp3hluH8DY5488.cer
File: fHC-j7qPeAoxbAp3hluH8DY5488.cer (raw, json)
Hash identifier: QwP1No5XP8nLnfjJ+LkjyGZ+cUjAprtzcSjBrvJ8nmk=
Subject key identifier: 7C:70:BE:8F:BA:8F:78:0A:31:6C:0A:77:86:5B:87:F0:36:39:E3:CF
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5DF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30342/fHC-j7qPeAoxbAp3hluH8DY5488.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30342/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Dec 2025 01:31:02 +0000
Certificate not after: Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources: IP: 2404:e840::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24053 (0x5df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 15 01:31:02 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=7C70BE8FBA8F780A316C0A77865B87F03639E3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:d5:b8:db:7b:f4:71:39:58:59:1e:34:9a:
eb:f4:33:b1:1b:08:bb:75:12:7c:e6:88:12:d2:83:
14:01:7a:4a:1d:2a:58:54:81:af:51:1f:d5:c7:34:
78:f2:0a:c3:91:05:50:ab:72:c6:f5:2d:1f:b6:2e:
c5:fc:b8:c8:06:60:20:c0:87:29:45:de:ad:b8:5e:
97:1c:d0:4d:58:f5:aa:36:93:ad:96:28:21:bc:53:
dc:9e:e1:89:f2:56:cd:ec:55:f2:0b:99:e7:80:c0:
a9:ee:29:71:73:97:f1:5b:aa:cb:ed:93:c7:34:05:
a4:6b:8c:bf:8d:51:39:b1:06:36:23:24:6b:40:25:
3a:50:87:04:2d:03:db:a4:f3:b5:1e:95:37:83:d5:
73:72:b3:dd:0e:73:c4:8a:f4:3e:4c:8a:9a:08:15:
92:58:74:fe:cf:91:14:7e:8d:70:84:85:f6:48:02:
b7:76:d9:c6:f7:b7:fd:79:2a:39:62:71:dc:db:7a:
47:e1:d3:16:74:01:35:d4:e4:a3:f8:ce:d5:46:41:
7b:aa:ac:9f:f0:05:77:06:c5:81:b2:65:fc:fe:86:
fd:1c:e6:6b:ff:68:7b:c2:c4:a4:10:2f:b9:14:a5:
ca:fd:0b:80:67:2b:5a:9e:f7:42:37:c8:d6:14:86:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:BE:8F:BA:8F:78:0A:31:6C:0A:77:86:5B:87:F0:36:39:E3:CF
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30342/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30342/fHC-j7qPeAoxbAp3hluH8DY5488.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:e840::/32
Signature Algorithm: sha256WithRSAEncryption
8d:d0:68:24:16:cc:eb:06:42:0b:70:dd:1f:47:03:9d:a3:15:
f4:19:00:0a:99:b9:0a:c4:66:d2:c9:cf:4a:7a:6e:5e:63:b6:
99:e0:9e:12:09:eb:b1:db:2c:2c:75:cd:6b:e5:8b:53:7a:6c:
16:2e:c9:d8:bf:9c:00:93:36:c9:f9:41:1f:17:2a:0c:95:d4:
95:36:90:3e:88:39:4e:57:7a:74:16:79:65:c0:7c:72:99:32:
55:8e:31:57:78:73:63:0f:b5:e9:2e:78:9b:eb:8f:74:18:e1:
8a:0c:39:77:19:da:34:65:5c:8b:b1:a3:6f:5a:ef:b9:6c:08:
06:8e:e0:22:25:14:81:d0:16:c8:1f:28:cf:a3:ce:aa:59:be:
1d:e7:66:4a:41:39:3c:bb:c4:b1:7d:e5:05:7b:75:3b:2c:98:
1e:10:10:08:bd:2f:9c:b1:c2:59:c9:43:0d:9a:1f:e8:b0:53:
2b:89:80:d8:34:d3:8c:16:d8:bf:46:5b:ed:e4:53:08:67:82:
b4:6a:d6:06:2f:45:8b:f8:a2:6a:db:e4:eb:3c:4b:14:79:8e:
7f:ef:90:6b:1d:bf:04:f9:a1:03:1e:44:dc:cc:d4:25:4f:5d:
83:9b:f2:40:84:9b:a2:83:e7:43:bf:e0:45:f9:f5:bb:10:83:
1b:66:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:04:08 2025 by rpki-client