This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer File: jStimyfLTOa4ULYZAhzuU7HQlac.cer (raw, json) Hash identifier: rM7+5gm1Z0fWaElw0yWprZddu9ZgMbH4KSf4PUOTH1M= Subject key identifier: 8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5EF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:38:09 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 2406:2800::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24304 (0x5ef0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:38:09 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:44:72:05:24:71:17:bf:30:f3:f8:d1:dc:3d: a0:ce:83:96:df:df:97:35:45:f5:83:ca:89:fc:a6: b0:41:8a:e6:ae:ab:94:00:d2:4e:f9:c9:35:49:84: 51:a2:8a:82:2b:f3:16:3d:a8:59:56:96:b0:21:70: ba:58:29:f0:4a:ba:35:ca:c3:6c:ca:57:58:8e:57: c2:8e:a1:d0:12:de:d5:ec:1a:65:be:42:5a:7f:9a: 6b:54:c5:37:4a:fc:d3:c3:94:4c:9c:b4:49:db:5e: 08:bd:d4:76:37:a9:50:b3:d3:34:64:e4:f0:16:75: f8:76:b5:90:55:6f:0e:78:bc:a9:c2:ed:22:98:f1: 0b:e2:2c:2e:a1:5b:68:11:3f:a1:96:e8:d0:0b:11: 17:57:19:c2:07:61:fd:7b:5c:8c:59:1a:6c:da:a9: 95:12:dc:ce:a6:9e:bd:1a:f5:90:f9:8a:c3:07:ab: 18:cc:c3:00:5b:b1:13:92:5e:62:c7:de:b4:aa:6c: 99:a7:ce:89:48:ca:25:01:8d:7b:cf:a9:cf:a0:75: 54:3f:f8:97:fd:73:85:0a:d0:1b:ca:b1:de:8c:96: bd:7c:e2:15:dc:6a:5b:e9:92:64:c4:d1:bf:18:07: cb:c4:3e:bc:85:96:e7:3f:f3:8b:9a:71:70:50:1f: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:2800::/32 Signature Algorithm: sha256WithRSAEncryption 0a:e9:1c:e5:da:e8:34:e3:8d:4c:f2:08:c5:da:cc:a1:14:a5: 9e:e6:f7:aa:c0:e9:1b:66:11:99:81:0b:30:dd:af:aa:42:d9: 50:f6:da:3d:0e:7a:75:58:da:36:0f:79:b9:8d:66:59:32:ee: db:08:e2:1b:94:5d:c2:7d:79:90:06:2c:f3:19:62:af:1f:c2: 01:ea:5a:5e:b4:b5:72:9c:ce:f3:cc:3e:08:37:4a:db:a7:d0: 08:20:b2:66:50:c3:f9:88:0d:3b:b4:6a:99:38:b1:6d:d8:07: cb:56:33:b5:ec:2b:15:fb:58:f2:6c:84:05:8e:94:b1:48:84: e5:15:87:89:12:ca:92:0d:04:ea:74:65:00:f0:f2:02:9a:2c: fa:85:12:27:87:91:fd:0e:fe:dd:00:51:e5:87:a1:98:68:5e: 84:71:68:e0:8e:4e:79:b9:49:95:be:57:59:7c:60:da:9d:fa: 0c:68:8f:83:7e:d7:a8:e9:5b:5e:96:d7:e6:b6:80:90:55:f3: cf:38:55:80:eb:f3:98:67:74:bc:d4:f6:0f:06:6d:b3:76:ec: 1f:8a:da:ff:a9:0e:ba:ae:99:4e:3b:98:b2:4e:9e:ca:98:fd: 7c:09:2e:1e:7e:85:fe:25:cc:60:ff:db:9b:8c:a2:23:7a:23: 3e:45:1f:a0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICXvAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzgwOVoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoOEQyQjYyOUIyN0NCNENFNkI4NTBCNjE5MDIxQ0VFNTNCMUQwOTVB NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMNEcgUkcRe/MPP40dw9 oM6Dlt/flzVF9YPKifymsEGK5q6rlADSTvnJNUmEUaKKgivzFj2oWVaWsCFwulgp 8Eq6NcrDbMpXWI5Xwo6h0BLe1ewaZb5CWn+aa1TFN0r808OUTJy0SdteCL3Udjep ULPTNGTk8BZ1+Ha1kFVvDni8qcLtIpjxC+IsLqFbaBE/oZbo0AsRF1cZwgdh/Xtc jFkabNqplRLczqaevRr1kPmKwwerGMzDAFuxE5JeYsfetKpsmafOiUjKJQGNe8+p z6B1VD/4l/1zhQrQG8qx3oyWvXziFdxqW+mSZMTRvxgHy8Q+vIWW5z/zi5pxcFAf H8UCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSNK2KbJ8tM5rhQthkCHO5TsdCVpzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzODIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzgyL2pT dGlteWZMVE9hNFVMWVpBaHp1VTdIUWxhYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBigAMA0GCSqGSIb3 DQEBCwUAA4IBAQAK6Rzl2ug0441M8gjF2syhFKWe5veqwOkbZhGZgQsw3a+qQtlQ 9to9Dnp1WNo2D3m5jWZZMu7bCOIblF3CfXmQBizzGWKvH8IB6lpetLVynM7zzD4I N0rbp9AIILJmUMP5iA07tGqZOLFt2AfLVjO17CsV+1jybIQFjpSxSITlFYeJEsqS DQTqdGUA8PICmiz6hRInh5H9Dv7dAFHlh6GYaF6EcWjgjk55uUmVvldZfGDanfoM aI+Dfteo6VteltfmtoCQVfPPOFWA6/OYZ3S81PYPBm2zduwfitr/qQ66rplOO5iy Tp7KmP18CS4efoX+Jcxg/9ubjKIjeiM+RR+g -----END CERTIFICATE-----Generated at Mon Dec 22 11:03:56 2025 by rpki-client