This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer File: ic9cKvpbV2V3NRxBmQGNRM3C1to.cer (raw, json) Hash identifier: 4Oq2wk71jq4+3kFtFTsuibchuf4AHpGBYDFLYvcLuKY= Subject key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5EA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:36:03 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 119.63.112.0/20 IP: 153.125.0.0/17 IP: 182.255.64.0/20 IP: 202.53.112.0/20 IP: 202.129.176.0/21 IP: 202.216.128.0/19 IP: 202.224.112.0/20 IP: 203.141.112.0/20 IP: 210.1.144.0/20 IP: 219.101.96.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24229 (0x5ea5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:36:03 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:50:d1:dc:ec:2e:37:aa:77:67:a6:1c:49: f2:59:3b:e5:2e:47:23:18:d4:ad:75:85:6f:31:2c: 4a:88:e4:88:21:a2:4e:d1:95:8c:6c:70:3c:7d:8d: 3b:2c:44:40:28:56:59:59:84:82:d8:fb:54:a0:2c: 10:00:b9:ee:5e:07:d6:98:5b:de:85:5e:49:8c:cb: ea:eb:b8:b9:7a:ad:6c:0a:1e:bc:4b:eb:fc:f8:4e: 21:d9:65:08:be:13:73:3b:35:71:90:bf:0d:3b:d2: 51:e7:73:fc:2c:80:08:66:a5:6d:f1:11:99:57:a7: 83:87:06:d0:89:16:e7:f1:29:13:20:0c:6f:ef:9d: 1c:36:be:7a:33:1b:b2:19:43:c7:03:f0:9a:23:79: e0:20:76:b5:bb:9e:23:47:39:f1:72:43:2d:50:2e: d3:5c:d7:a2:10:23:e5:eb:57:83:db:35:6e:e2:79: 4c:bf:56:cc:ae:f9:1f:51:bf:47:5d:a1:fa:ee:fc: c6:36:aa:0b:20:52:56:ea:59:1c:93:b3:23:76:b1: d9:93:a0:eb:1d:17:f1:98:7b:58:95:ac:54:a9:db: 3d:f6:cd:3e:af:14:48:0c:81:44:43:5a:26:ac:1d: c2:50:da:1e:a1:7f:82:97:ae:57:eb:1a:a5:31:4c: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.63.112.0/20 153.125.0.0/17 182.255.64.0/20 202.53.112.0/20 202.129.176.0/21 202.216.128.0/19 202.224.112.0/20 203.141.112.0/20 210.1.144.0/20 219.101.96.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:d4:2c:bd:48:c8:2e:f7:ff:fd:55:8f:ef:64:cc:22:58:40: 69:58:7a:5e:48:10:cd:bb:f0:65:b7:f5:e0:7d:99:42:02:f7: ac:a8:5b:b3:25:c9:95:fd:2c:b0:f3:b1:84:51:f4:46:b4:b7: f8:63:74:e8:22:57:4f:64:7e:dd:b4:08:f2:45:27:d1:a5:62: 2c:27:dd:10:b7:3a:c0:e9:6a:fb:fd:9c:f9:46:83:8a:60:aa: d1:d3:90:7e:65:ac:ab:2b:ef:43:39:5d:d4:a8:b5:4a:2c:74: bd:9a:f2:83:79:0e:4f:af:80:00:d6:3a:4a:54:db:eb:1f:00: 89:8a:f2:b4:35:65:40:d6:64:2f:12:e7:b7:10:7b:be:38:d0: cd:29:d8:02:25:67:f7:3a:58:ed:8d:c8:e7:b6:69:84:9f:47: 2d:96:9b:14:e8:9c:ae:73:b7:8f:3e:c4:d6:88:ee:65:be:a0: 5d:d7:3e:dd:33:8e:8b:89:7b:86:41:26:54:ff:b1:cd:cd:94: e5:5c:a0:d1:8c:bf:5c:57:ab:84:db:a7:90:54:22:71:d0:e2: c8:9e:a6:8f:e0:eb:a6:dc:4e:f8:e7:1b:8e:e3:7a:4e:83:de: 83:b8:49:8c:7c:82:da:8d:06:1b:52:29:79:dc:e4:c4:9d:f6: 9d:04:5f:ee -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICXqUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzYwM1oXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoODlDRjVDMkFGQTVCNTc2NTc3MzUxQzQxOTkwMThENDRDREMyRDZE QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALiDUNHc7C43qndnphxJ 8lk75S5HIxjUrXWFbzEsSojkiCGiTtGVjGxwPH2NOyxEQChWWVmEgtj7VKAsEAC5 7l4H1phb3oVeSYzL6uu4uXqtbAoevEvr/PhOIdllCL4Tczs1cZC/DTvSUedz/CyA CGalbfERmVeng4cG0IkW5/EpEyAMb++dHDa+ejMbshlDxwPwmiN54CB2tbueI0c5 8XJDLVAu01zXohAj5etXg9s1buJ5TL9WzK75H1G/R12h+u78xjaqCyBSVupZHJOz I3ax2ZOg6x0X8Zh7WJWsVKnbPfbNPq8USAyBRENaJqwdwlDaHqF/gpeuV+sapTFM hlMCAwEAAaOCArwwggK4MB0GA1UdDgQWBBSJz1wq+ltXZXc1HEGZAY1EzcLW2jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8zNzMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM3My9pYzljS3Zw YlYyVjNOUnhCbVFHTlJNM0MxdG8ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEdz9wAwQHmX0AAwQEtv9AAwQE yjVwAwQDyoGwAwQFytiAAwQEyuBwAwQEy41wAwQE0gGQAwQE22VgMA0GCSqGSIb3 DQEBCwUAA4IBAQAK1Cy9SMgu9//9VY/vZMwiWEBpWHpeSBDNu/Blt/XgfZlCAves qFuzJcmV/Syw87GEUfRGtLf4Y3ToIldPZH7dtAjyRSfRpWIsJ90QtzrA6Wr7/Zz5 RoOKYKrR05B+ZayrK+9DOV3UqLVKLHS9mvKDeQ5Pr4AA1jpKVNvrHwCJivK0NWVA 1mQvEue3EHu+ONDNKdgCJWf3OljtjcjntmmEn0ctlpsU6Jyuc7ePPsTWiO5lvqBd 1z7dM46LiXuGQSZU/7HNzZTlXKDRjL9cV6uE26eQVCJx0OLInqaP4Oum3E745xuO 43pOg96DuEmMfILajQYbUil53OTEnfadBF/u -----END CERTIFICATE-----Generated at Mon Dec 22 11:03:59 2025 by rpki-client