This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer File: habDacGpx6UsPjgFcnpf0xGFp3M.cer (raw, json) Hash identifier: fFi4vAp65fFyme1K91SX9ae+GdsZsbgSa32u4RCbk5s= Subject key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 Certificate issuer: /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:43:54 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 154.33.0.0/16 IP: 154.34.64.0 -- 154.34.255.255 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Validity Not Before: Dec 15 01:43:54 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f7:55:54:fe:ff:ab:76:bf:26:e1:bd:26:ad: df:b7:bf:7b:08:17:7c:93:50:ba:e4:95:c7:73:23: eb:94:43:5f:33:ba:24:eb:08:ce:d5:d8:6a:41:a5: a2:fa:14:d2:d9:41:5c:ee:d0:ad:d2:bd:60:b6:dd: ea:21:f4:1f:cc:e1:04:84:63:c3:ab:18:05:b7:8f: 6f:f7:dc:74:a3:bd:70:ef:1c:78:62:f1:df:d3:13: b1:11:9e:35:66:aa:9e:5e:d4:9c:0d:d1:18:95:e5: 0f:53:c9:7c:ba:b2:62:5b:43:ff:89:5b:3c:a6:ad: 0c:a7:a2:a9:04:a8:86:68:5e:e4:26:e3:68:8e:40: 30:50:4a:7e:37:41:36:a6:77:bd:be:89:35:d0:22: fd:ce:19:3c:d8:99:d1:7a:78:62:ef:da:8e:0d:90: c4:f1:c5:84:f2:d1:92:fa:d6:9f:ae:cc:85:dd:eb: a6:f0:e3:c9:b1:64:cb:24:ac:5d:1b:18:50:76:e9: 8e:f3:c0:58:39:51:d6:ad:71:b7:77:94:1a:e6:e0: f7:f4:18:0f:bf:53:ee:89:9e:1e:3e:ee:9c:25:8a: 9d:95:f2:24:a0:b1:6b:74:2e:4d:f7:30:39:57:fe: 1f:8e:01:84:de:d5:89:39:f9:c8:5e:fa:05:df:d9: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 X509v3 Authority Key Identifier: keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.33.0.0/16 154.34.64.0-154.34.255.255 Signature Algorithm: sha256WithRSAEncryption 8e:47:73:20:4b:cb:30:2e:93:6e:df:78:d8:77:7a:4a:02:f9: 23:02:ba:ab:46:a9:ef:16:59:b0:9b:6c:e2:8c:04:d8:84:66: 08:e7:06:78:60:ea:e3:70:30:4a:0b:8a:da:48:2c:c5:bb:57: 3e:c1:14:d1:d0:bd:93:f2:eb:8a:a9:1c:e4:2f:9b:9f:d1:03: 9d:91:7b:57:8f:fb:cf:e2:e5:4d:b3:1e:ef:8f:bb:be:d7:b3: 13:48:f8:1b:cb:70:19:6e:05:af:bc:6d:88:ff:a1:ac:1b:c3: cf:db:8f:78:c1:77:92:b8:5d:08:89:49:8f:a8:c6:dc:66:52: d8:c6:36:ad:aa:48:d0:a3:8a:c5:e8:74:bf:38:c9:5b:b7:62: 51:bc:bb:15:17:4b:e8:46:06:5a:b4:83:ee:36:d3:65:4b:73: 7d:15:fb:6b:1f:3a:f8:34:97:0e:1c:21:c3:f4:8c:49:68:e0: a6:d5:48:fd:ce:ef:e4:a1:58:0b:c0:a7:d2:37:1f:ea:df:03: 91:48:76:a7:71:fb:ee:44:f5:f0:aa:84:27:7c:09:31:86:f1: f0:b3:12:4e:2e:2d:c3:cd:3e:19:97:63:16:95:a1:be:71:7a: 68:42:94:9c:cd:8d:a1:8c:64:c6:a1:ee:a1:93:3f:0c:b3:36: 9a:c0:f4:78 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIBfzANBgkqhkiG9w0BAQsFADBKMRUwEwYDVQQDEwxBOTFB NzM4MTAwMDAxMTAvBgNVBAUTKEM4QzBGQjg3MDQ3NEMzRTg0Q0FCODM1OTdDNDZB ODYyQzQ3Rjg4ODIwHhcNMjUxMjE1MDE0MzU0WhcNMjYxMjE1MDEzMDAyWjAzMTEw LwYDVQQDEyg4NUE2QzM2OUMxQTlDN0E1MkMzRTM4MDU3MjdBNUZEMzExODVBNzcz MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fdVVP7/q3a/JuG9Jq3f t797CBd8k1C65JXHcyPrlENfM7ok6wjO1dhqQaWi+hTS2UFc7tCt0r1gtt3qIfQf zOEEhGPDqxgFt49v99x0o71w7xx4YvHf0xOxEZ41ZqqeXtScDdEYleUPU8l8urJi W0P/iVs8pq0Mp6KpBKiGaF7kJuNojkAwUEp+N0E2pne9vok10CL9zhk82JnRenhi 79qODZDE8cWE8tGS+tafrsyF3eum8OPJsWTLJKxdGxhQdumO88BYOVHWrXG3d5Qa 5uD39BgPv1PuiZ4ePu6cJYqdlfIkoLFrdC5N9zA5V/4fjgGE3tWJOfnIXvoF39mb rQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIWmw2nBqcelLD44BXJ6X9MRhadzMB8G A1UdIwQYMBaAFMjA+4cEdMPoTKuDWXxGqGLEf4iCMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwYgYDVR0fBFswWTBXoFWgU4ZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRv cnkubmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95TUQ3aHdSMHctaE1xNE5aZkVh b1lzUl9pSUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6 Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJG ODc3QzcyRkQxRkYyL3lNRDdod1Iwdy1oTXE0TlpmRWFvWXNSX2lJSS5jZXIwDwYD VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwggEBBggrBgEFBQcBCwSB9DCB 8TBDBggrBgEFBQcwBYY3cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8xMjAzLzBiBggrBgEFBQcwCoZWcnN5bmM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8xMjAzL2hhYkRh Y0dweDZVc1BqZ0ZjbnBmMHhHRnAzTS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8v cnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlvbi54 bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDAwCaITALAwQGmiJAAwMAmiIw DQYJKoZIhvcNAQELBQADggEBAI5HcyBLyzAuk27feNh3ekoC+SMCuqtGqe8WWbCb bOKMBNiEZgjnBnhg6uNwMEoLitpILMW7Vz7BFNHQvZPy64qpHOQvm5/RA52Re1eP +8/i5U2zHu+Pu77XsxNI+BvLcBluBa+8bYj/oawbw8/bj3jBd5K4XQiJSY+oxtxm UtjGNq2qSNCjisXodL84yVu3YlG8uxUXS+hGBlq0g+4202VLc30V+2sfOvg0lw4c IcP0jElo4KbVSP3O7+ShWAvAp9I3H+rfA5FIdqdx++5E9fCqhCd8CTGG8fCzEk4u LcPNPhmXYxaVob5xemhClJzNjaGMZMah7qGTPwyzNprA9Hg= -----END CERTIFICATE-----Generated at Sun Dec 21 12:16:55 2025 by rpki-client