This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
File:                     gMrPcKS2wbb2JO9DSEByQGuNPzY.cer (raw, json)
Hash identifier:          h3pZ3v9Uu/PglbBzBTMQzgKAXVnhR5q11+OacYczLd4=
Subject key identifier:   80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5F88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:42:57 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 103.6.16.0/22
                          IP: 103.235.112.0/22
                          IP: 115.85.136.0/21
                          IP: 116.90.144.0/20
                          IP: 202.179.32.0/19
                          IP: 219.100.128.0/22
                          IP: 223.27.180.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24456 (0x5f88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:42:57 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:d2:b1:14:40:cb:4a:08:37:20:36:5e:74:
                    12:9d:82:31:ab:f9:7a:ec:24:c8:14:33:af:40:09:
                    48:3a:de:6b:69:67:2d:c0:e6:cc:af:01:ca:ed:bc:
                    6c:fe:51:68:f6:2e:f8:ac:95:33:ce:ed:3b:4e:b4:
                    0d:a3:e3:db:73:8a:29:db:82:c2:66:a6:6e:b3:b2:
                    af:8d:94:4c:d1:98:39:ca:14:53:6e:1c:f6:25:1b:
                    a7:7a:3f:bb:90:66:06:11:6a:8a:31:84:6d:78:14:
                    76:51:de:28:05:12:b3:99:b4:fd:f0:e9:e2:ef:f9:
                    a1:63:bf:90:1b:9a:3a:92:3d:c9:84:cc:6d:f9:d9:
                    1c:d7:90:a4:91:4b:98:ba:9a:be:09:4a:28:f7:0d:
                    37:1f:20:3c:7f:4c:ed:77:6a:85:74:61:69:bb:69:
                    a4:b0:58:19:79:76:c8:cc:d5:6f:f4:7f:bb:a6:13:
                    52:03:93:16:2d:54:05:50:c0:95:77:69:12:b5:76:
                    22:b5:39:ac:a7:f4:50:9a:75:9d:d5:c1:8d:58:d9:
                    2d:49:7b:38:cd:55:f4:28:c4:b9:bc:8c:2e:de:96:
                    e0:1c:37:f5:70:7b:45:61:7e:07:56:82:16:47:67:
                    a0:d3:8c:17:42:67:62:dc:13:7e:59:8b:c1:20:88:
                    56:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.16.0/22
                  103.235.112.0/22
                  115.85.136.0/21
                  116.90.144.0/20
                  202.179.32.0/19
                  219.100.128.0/22
                  223.27.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:8b:68:33:e5:75:85:a5:72:ce:b6:72:ef:5b:2e:26:36:8f:
         91:6c:e1:10:76:1a:56:ae:4d:a5:0f:59:4e:68:55:0f:97:67:
         6c:39:06:86:03:6a:26:42:84:7d:dc:36:84:8b:b8:e5:f9:d3:
         00:7a:cb:c8:f1:e9:f6:8f:b5:91:62:c5:0b:77:a0:ec:54:3d:
         a7:7a:49:fc:3f:a1:cf:2d:ff:d5:28:6c:b6:ea:33:84:7a:3b:
         5d:bb:62:69:41:bc:cf:87:4f:b1:0a:e7:ac:a1:1f:ec:49:43:
         a9:ef:e3:0b:55:05:a2:bf:b2:18:ed:5d:32:55:7a:90:09:d3:
         36:83:4e:89:af:79:cc:a5:10:d8:bd:b1:7a:2f:07:a7:0b:ff:
         73:2c:34:8c:02:31:e6:5e:6b:1c:e9:86:d6:1a:69:a8:f0:a7:
         a5:08:89:6a:0b:f2:f2:d6:62:ae:64:3d:5f:a4:7d:2c:d2:af:
         69:6f:b2:38:26:f3:3f:af:ee:ba:f7:a6:5d:2d:bc:11:20:3a:
         b1:34:3f:67:6b:f7:7d:36:20:aa:0a:77:55:d6:b8:8c:7b:77:
         be:b5:f4:d9:33:ed:7e:4b:66:04:e7:32:c2:c4:4d:6e:df:23:
         11:06:0e:72:2e:98:8e:1f:27:69:d1:4c:49:f7:b5:0c:e4:e9:
         a9:62:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:04:48 2025 by rpki-client