This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
File:                     fb52dbLJA_BlqrZMj48D8evm3z0.cer (raw, json)
Hash identifier:          OsiYLlkeByY/UoMkvuuJbu51QShUHZC4bOCaja04FGU=
Subject key identifier:   7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5F54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:41:34 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2001:d28::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24404 (0x5f54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:41:34 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:37:67:e7:87:7b:4b:93:6b:b2:2f:32:87:
                    70:17:b5:88:ba:44:77:e8:6c:9c:42:d7:a1:c6:a8:
                    79:fd:6d:15:a1:ba:32:f7:58:19:d8:9b:15:46:cc:
                    10:02:fd:30:a9:ef:ca:c1:d6:34:ea:a7:aa:b6:97:
                    04:20:d0:3d:97:e9:5c:8c:90:d2:e7:63:8a:f1:a7:
                    02:72:78:f2:f1:39:5b:ca:ae:32:f2:33:8a:97:6b:
                    df:3e:42:aa:0d:74:b5:5e:d4:e9:30:6b:3d:af:6a:
                    d1:72:32:fa:81:d9:1c:5f:89:7e:d8:29:2c:d8:14:
                    12:15:bf:3e:49:81:00:4a:93:0a:eb:bb:46:93:39:
                    28:2e:81:44:d8:76:98:58:c0:1f:e6:a5:ec:26:74:
                    e9:5a:00:90:b6:9b:b9:ec:55:16:dd:60:c3:96:98:
                    15:f9:df:0b:59:e9:be:da:6e:3a:d2:1c:d8:6c:50:
                    72:fe:8b:eb:72:26:70:ce:2b:84:c5:62:84:59:c1:
                    01:ed:02:a4:16:91:b1:3b:76:e5:28:4f:b3:03:ac:
                    bf:a5:c2:b4:14:b1:9a:11:73:3d:e1:7b:a8:e3:b9:
                    a7:87:e9:a7:35:fd:34:68:6c:5c:09:07:c5:3b:bc:
                    06:c6:87:82:d2:e9:75:ed:a4:ab:17:da:57:ee:48:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:c4:d0:ac:9a:37:da:d0:45:aa:67:d4:8a:3a:d6:1c:84:eb:
         12:e2:74:71:ad:81:0f:84:37:45:5b:63:e3:76:2e:2b:a5:2f:
         d8:3a:4b:2c:8f:b8:f5:22:be:46:e8:20:2e:2e:3e:9b:6a:f6:
         a4:b6:45:0c:5c:21:bb:98:bc:b8:52:fc:ec:ad:74:3e:50:d1:
         b9:92:90:ea:08:b6:f2:35:5b:81:13:24:48:22:3c:20:24:89:
         66:1a:f3:a0:57:43:9d:68:46:d0:7d:e9:bd:88:87:23:d1:05:
         cb:ba:82:7a:ce:df:87:31:68:7a:c3:d4:3b:ee:29:9a:c6:90:
         1a:d1:54:17:2e:59:14:95:86:1e:76:3a:08:38:a6:8e:c2:09:
         6a:39:1e:c2:57:69:60:ce:8f:ba:04:66:3c:d7:58:26:e6:db:
         5d:a9:3d:e0:fc:d1:88:07:f6:09:e5:76:23:9c:00:e3:03:96:
         5c:a9:92:5a:67:15:78:3a:9d:b0:37:4c:5e:4d:cd:1b:40:d5:
         73:3a:6b:84:06:b3:c0:45:a3:a5:29:c1:26:8d:af:82:43:b3:
         c1:b0:03:c2:6f:6b:4e:91:ca:ec:43:24:9d:63:c0:20:e7:03:
         cd:2d:35:b3:a9:46:9f:82:6e:81:0b:75:dc:0b:b1:33:47:70:
         22:e7:4f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:02:35 2025 by rpki-client