This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer
File:                     iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer (raw, json)
Hash identifier:          dHAnPjBJSJs0HCGwWxjXIR1wDevTPbqEnx0p7BbPMSE=
Subject key identifier:   88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5E51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:33:39 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2401:5300::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24145 (0x5e51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:33:39 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=88AC5827EA5086C58535538005B12A51FCD1F0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:2d:f8:2c:41:44:8b:d5:26:b1:03:a5:ed:
                    7e:f2:d7:1d:50:56:c5:f9:4d:3a:14:32:42:2a:bf:
                    87:e8:af:33:ef:71:cb:a6:c6:33:77:aa:a5:46:b6:
                    ee:8f:3e:02:45:1c:d7:cb:37:c9:51:42:6f:b1:6a:
                    27:01:b5:28:b8:25:76:6b:1b:08:ee:49:af:b6:9d:
                    88:e0:7e:b1:d7:cb:7e:cc:d2:60:08:8c:4d:7a:fd:
                    ef:24:4d:de:ae:58:71:19:96:b3:37:5b:d7:bb:45:
                    1f:4d:12:4c:cd:0b:a0:b8:c1:34:06:05:6f:1c:78:
                    2f:18:61:6f:60:63:5f:12:fb:9b:b4:24:18:a3:1e:
                    6f:da:5d:26:bd:95:70:ef:dc:9d:40:f5:6d:b9:b2:
                    b8:19:23:2b:0f:2a:c3:9e:03:28:57:c6:d0:9e:57:
                    46:4a:8e:ea:7a:3a:41:de:52:4c:f0:7b:16:ff:ac:
                    f4:3f:f8:c4:82:ca:fe:94:dc:80:ab:c5:27:33:3a:
                    04:a9:ec:a5:c0:eb:89:f0:ff:2d:8a:39:b3:7f:5c:
                    60:49:aa:5f:2a:84:ee:46:e2:ad:e3:b6:03:43:ff:
                    39:99:09:48:1b:c1:ad:93:24:0f:52:7d:5a:23:2a:
                    36:f5:a2:d6:48:ff:b5:f9:cf:32:7e:0b:2c:f8:bc:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:29:8e:eb:94:9d:fe:a5:7b:9a:a4:50:51:9b:31:ec:31:74:
         3d:b6:71:60:f6:8b:ab:3f:ab:2f:fb:2d:be:a2:ef:c6:c9:10:
         ba:33:dd:65:32:2e:c7:88:66:33:78:83:1d:e1:36:cb:e1:e6:
         70:d3:b6:6b:b4:09:60:a5:75:59:44:ca:e8:cf:88:f4:3c:84:
         e4:3d:ca:e0:5e:a5:3d:ca:8f:60:45:ea:3a:f8:45:8a:87:13:
         e0:f0:c3:51:62:b5:67:45:08:b5:ca:fc:eb:8b:f4:36:b9:23:
         b6:79:f5:c2:b3:b9:b9:cb:89:59:06:e1:85:a8:df:1c:2e:40:
         51:74:ae:db:9e:61:3c:96:d2:07:b3:09:9e:b9:59:e3:43:23:
         a7:6e:98:2d:71:dc:b6:52:52:ed:d2:e2:88:59:00:13:10:13:
         f6:75:93:d8:15:a5:9f:8a:fa:1b:82:e2:69:0e:51:80:0b:fa:
         0f:57:be:bd:49:95:b3:a8:70:af:3a:c4:e8:79:d1:ec:e1:e7:
         6f:d9:2c:6b:72:61:ee:59:04:84:38:2a:c2:c0:3b:f4:ae:33:
         37:fe:7b:cf:8c:e8:50:fb:4b:c1:3b:6f:b6:24:ac:33:7a:aa:
         2b:f0:f6:a1:15:0e:36:f2:dc:c4:5b:9c:c0:3b:61:70:ab:07:
         be:23:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----