This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/jpVNfQWf1KP899x5vLTnYqJNZmo.cer
File:                     jpVNfQWf1KP899x5vLTnYqJNZmo.cer (raw, json)
Hash identifier:          6aZU/zekkJY0crnIeIGpCuRfhvVfK6SXghBeIYz7JeQ=
Subject key identifier:   8E:95:4D:7D:05:9F:D4:A3:FC:F7:DC:79:BC:B4:E7:62:A2:4D:66:6A
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5E18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:31:57 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2001:df0:25e::/48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24088 (0x5e18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:31:57 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=8E954D7D059FD4A3FCF7DC79BCB4E762A24D666A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:f4:02:85:e6:80:02:aa:9b:09:99:3b:be:
                    f0:c2:86:a9:d2:f7:e1:11:a7:c5:bf:80:09:02:a2:
                    74:ad:a4:ec:01:3e:b6:b8:01:a0:c6:5b:0d:77:bc:
                    31:8a:7c:c1:67:0e:a5:09:25:0f:59:8b:e4:c1:c5:
                    c8:c7:17:32:04:40:ac:41:ca:7e:d3:9d:58:eb:e9:
                    b4:e1:45:a4:4b:a9:c6:9c:3c:50:f9:2a:01:51:2a:
                    f1:9e:56:48:e2:7e:d2:a2:1e:ae:18:57:ef:f4:4e:
                    69:40:07:c0:8b:9c:91:72:2c:32:08:21:d9:8e:ab:
                    03:c0:f1:38:ba:10:27:9f:4c:21:3f:b4:21:45:01:
                    88:18:42:c0:33:84:15:9b:62:7e:90:14:ac:8f:5f:
                    19:7c:4b:06:04:08:08:3e:7f:4c:4e:47:d6:c0:26:
                    68:58:b5:97:5f:8f:eb:ae:00:3e:1b:0f:6c:0b:02:
                    f4:6e:ba:02:a4:46:9e:e8:3b:02:d6:e6:f6:ca:97:
                    2d:d1:62:1b:77:00:69:5e:ac:94:a0:c1:dc:a0:23:
                    29:c0:e2:6a:03:5c:b9:23:65:a0:45:16:08:e6:15:
                    dd:88:5f:6e:e8:7a:29:50:2f:37:de:e3:4d:83:bf:
                    d8:b8:c1:54:a8:2f:62:46:44:6c:23:42:20:62:6f:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:95:4D:7D:05:9F:D4:A3:FC:F7:DC:79:BC:B4:E7:62:A2:4D:66:6A
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:25e::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:a8:5a:c6:76:f4:a0:4b:4c:34:11:3b:72:1e:a9:06:9e:
         c0:62:95:a1:f3:fb:e4:ca:4a:6c:90:b6:6b:fc:91:75:35:0c:
         35:0c:d9:a2:db:9e:6f:5c:dd:94:50:5b:05:76:ed:76:3b:32:
         97:b8:dc:7d:8d:ab:ee:15:c9:df:84:1d:27:e6:ad:19:03:cb:
         6b:0d:f0:8b:54:c6:54:f1:53:b0:86:13:6b:c3:0e:05:28:5b:
         59:b7:66:65:e1:2d:08:ee:ab:b7:2f:24:29:68:f7:09:b1:68:
         a8:67:c4:58:43:b2:e3:98:23:58:5b:6d:47:88:18:35:7b:44:
         70:fa:d7:69:f4:76:f7:06:71:c2:08:28:d8:6e:b6:03:b7:4a:
         6a:28:26:64:41:8b:84:11:7e:ed:f9:79:56:b6:88:18:4b:6f:
         09:6c:37:b2:22:7a:5e:aa:71:f9:ff:56:62:aa:d4:89:bd:6c:
         d4:91:99:6a:23:c5:a7:cb:1e:84:1a:c9:98:b0:55:15:f4:74:
         48:c8:4c:03:13:93:37:59:ef:61:60:a4:3f:24:3c:28:63:02:
         cf:29:17:e0:a2:d4:4d:28:5b:a9:a8:3a:6f:3b:73:2d:65:01:
         47:da:ed:f3:3e:ab:73:42:b1:9e:11:85:9d:69:a9:73:4c:70:
         d9:15:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----