This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer
File:                     hTvMypswbARZZY4oio0_3nUbT2s.cer (raw, json)
Hash identifier:          8QpVBzAkdTLVhvX0TAvuG9Z6EjSk9CmARCxdfDUVJvA=
Subject key identifier:   85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer:       /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial:       0287
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:36:58 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 194.91.0.0/16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
        Validity
            Not Before: Dec 15 01:36:58 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=853BCCCA9B306C0459658E288A8D3FDE751B4F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:ed:cf:c8:53:34:1f:03:ff:11:67:8c:13:
                    71:8b:1c:7f:60:a9:8f:1f:1b:f0:d6:d4:75:c2:23:
                    77:86:a1:fd:ed:d7:bd:eb:17:5a:0c:0b:3d:96:26:
                    27:d7:55:21:f3:23:fe:8b:99:30:ac:f4:33:7a:53:
                    e8:6d:ea:32:3b:9b:f1:ff:7a:75:63:40:d1:af:23:
                    6a:0c:0f:79:58:81:7a:28:dc:91:1b:86:55:58:08:
                    c0:e5:34:32:b7:d4:c7:16:f3:c2:8d:3b:6e:6f:74:
                    53:cb:27:58:c6:47:e5:39:c5:c7:ba:14:84:8b:d3:
                    cd:31:2d:c6:ff:e4:c8:c0:3a:1d:0d:99:d7:09:55:
                    fe:6f:51:20:be:a7:c9:73:fb:9d:99:d1:85:00:14:
                    3e:71:29:f8:dd:6e:6f:64:d1:c6:d8:c4:c9:da:12:
                    0e:c9:70:02:65:8e:6f:82:f8:09:5a:9b:01:8a:21:
                    50:25:69:6e:dd:c9:a2:b5:f5:d9:fe:ae:6e:34:e6:
                    b1:59:55:27:ae:01:62:91:f1:36:f7:35:fe:3d:33:
                    b4:28:e8:d9:11:8d:b6:04:c1:a0:4e:f2:11:c6:6f:
                    f5:6a:1d:05:8b:4e:2b:ea:23:d1:c9:d8:eb:9b:aa:
                    d6:96:94:c4:a8:3d:91:9a:29:15:de:51:02:d4:77:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
            X509v3 Authority Key Identifier:
                keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:8a:a7:5b:89:c1:68:89:7b:70:2d:06:a2:2c:3a:73:34:
         eb:ac:5f:c4:1e:a0:83:67:6f:83:10:b9:fc:be:44:84:08:e1:
         ab:12:7e:72:08:2c:40:cd:dc:cc:9d:65:60:41:0a:ac:12:bb:
         5e:40:84:5f:24:0f:c5:d5:8a:0c:a8:fc:54:df:ea:4c:d2:71:
         8d:48:1a:0c:0d:66:20:e6:08:55:81:f2:81:ec:6d:eb:c3:2f:
         f9:47:71:bd:ff:db:10:0e:45:0f:eb:3d:c4:6c:a6:91:31:4f:
         05:14:5b:2e:78:9d:61:cf:11:4d:6b:ca:91:9a:a9:1d:eb:2c:
         62:3d:11:96:b5:e0:bd:5c:bb:bd:80:b4:9f:b8:3e:57:08:40:
         24:0a:24:10:ac:09:75:89:cc:06:71:a8:c6:5b:ce:6e:b4:25:
         47:da:f5:bc:50:27:69:bb:ee:ca:06:31:5b:0f:e0:b7:fc:4d:
         0d:40:21:5b:b2:56:5d:44:d0:4c:e9:9b:65:03:36:a7:5c:06:
         07:5e:60:48:26:9f:69:b3:1f:bd:40:af:e4:f0:fd:ec:a9:2a:
         72:15:8c:8f:4f:25:3b:f5:3c:08:63:9c:95:4b:e3:82:5d:f7:
         c9:e9:26:64:67:2c:6f:c6:44:69:3e:ae:92:6e:aa:f3:23:31:
         80:9a:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----