This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer File: miG9_y3K_ME49b_WwDMNAhng9TI.cer (raw, json) Hash identifier: l+j0M6rW2GY7eRoxZwI3I+GCZFgPDxz6Z2z+UecQ1hM= Subject key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5F0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:39:20 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 27.131.240.0/21 IP: 27.133.128.0/19 IP: 27.133.247.0 -- 27.133.255.255 IP: 27.134.240.0/20 IP: 36.53.0.0 -- 36.53.191.255 IP: 59.106.0.0/16 IP: 61.211.224.0/20 IP: 110.44.128.0/20 IP: 110.232.160.0/20 IP: 112.109.0.0/20 IP: 113.20.160.0/19 IP: 122.202.96.0/19 IP: 153.121.0.0/17 IP: 153.125.224.0/20 IP: 163.43.0.0/16 IP: 175.28.48.0/22 IP: 180.131.127.0/24 IP: 202.181.96.0/20 IP: 202.222.16.0/20 IP: 202.242.89.0/24 IP: 210.188.224.0/19 IP: 210.229.64.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24335 (0x5f0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:39:20 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:0f:f9:55:e6:c7:49:ce:1e:34:b7:68:55: 96:6c:50:36:ed:41:15:29:e2:6c:c8:9e:5f:1a:93: c1:cc:db:3a:1f:f5:d4:80:1f:96:4c:8f:4b:66:d8: 05:39:89:61:a4:72:d8:24:e3:48:63:c1:a0:ff:27: 74:27:6f:00:76:70:ff:ba:c2:2b:98:7a:a2:94:2d: c9:2c:2d:7e:30:25:69:c9:27:69:30:17:75:2c:e5: ac:a6:48:24:66:5e:5f:f5:72:df:e1:b8:92:8f:d6: 8d:52:54:82:cc:22:f4:40:55:f9:8f:cf:ab:22:92: db:03:06:71:9e:e1:7a:93:92:dd:32:5d:6f:ff:60: 90:e5:87:b5:62:e8:83:34:f4:96:75:b2:ea:dd:91: 97:b3:58:18:6a:cc:3b:da:95:54:8c:39:cb:41:5c: 30:8d:6c:75:39:48:f4:37:55:ce:c1:fa:95:5d:da: 17:7f:15:7e:35:76:18:a4:90:7b:e9:6f:5a:1e:a7: bc:33:9e:41:ba:e4:43:72:3a:ae:24:c9:85:2c:99: b4:33:fd:6b:85:9b:86:da:de:94:10:38:02:78:c9: 09:df:04:bd:54:b8:d2:75:2e:d0:d2:02:fe:20:d1: 24:49:2f:b2:b8:fa:86:a3:ad:04:bd:44:b0:19:8e: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.131.240.0/21 27.133.128.0/19 27.133.247.0-27.133.255.255 27.134.240.0/20 36.53.0.0-36.53.191.255 59.106.0.0/16 61.211.224.0/20 110.44.128.0/20 110.232.160.0/20 112.109.0.0/20 113.20.160.0/19 122.202.96.0/19 153.121.0.0/17 153.125.224.0/20 163.43.0.0/16 175.28.48.0/22 180.131.127.0/24 202.181.96.0/20 202.222.16.0/20 202.242.89.0/24 210.188.224.0/19 210.229.64.0/21 Signature Algorithm: sha256WithRSAEncryption 83:87:c9:e7:c0:80:68:b1:10:0a:3d:31:d6:ea:c2:61:2f:f3: ed:a0:0b:74:21:c1:a6:52:c7:b0:27:29:b2:2e:84:52:e5:b5: 73:a0:b0:af:3a:a4:4a:c3:4b:57:a8:d8:6d:79:f1:33:d6:d8: 4d:22:42:67:11:9b:d2:35:4c:dd:b2:fb:59:6d:c7:08:fa:94: ed:cf:63:66:93:fd:1a:02:ad:3e:fe:ef:4c:f7:ff:a3:e5:0b: bb:e3:34:bc:72:0b:e8:0f:d0:7b:62:93:c0:85:bc:eb:54:aa: d2:e5:50:90:d5:2e:d9:c4:df:89:16:05:36:72:43:5a:92:b1: be:b0:0e:ab:c7:ed:1c:e1:5e:71:cb:0e:9a:50:10:a0:28:98: be:a0:df:44:9a:28:77:44:c4:81:6c:6b:ba:06:4e:91:19:f8: ec:a9:e3:f4:f5:a5:aa:5e:a6:1e:a2:b8:85:02:dd:c9:92:9c: 72:e4:fd:e0:0f:b8:4f:08:05:25:56:55:d8:ed:78:a4:6c:cb: 06:b1:59:35:18:d2:61:50:15:14:38:3f:ad:16:ff:07:ba:2c: 64:32:22:b3:6a:e9:a4:95:88:91:ec:bf:74:0e:15:5d:99:86: 13:2c:76:4e:a0:af:84:ba:a7:f5:f8:94:76:13:57:5d:6a:3a: 2c:9c:d5:e3 -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgICXw8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzkyMFoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoOUEyMUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUz MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7mD/lV5sdJzh40t2hV lmxQNu1BFSnibMieXxqTwczbOh/11IAflkyPS2bYBTmJYaRy2CTjSGPBoP8ndCdv AHZw/7rCK5h6opQtySwtfjAlacknaTAXdSzlrKZIJGZeX/Vy3+G4ko/WjVJUgswi 9EBV+Y/PqyKS2wMGcZ7hepOS3TJdb/9gkOWHtWLogzT0lnWy6t2Rl7NYGGrMO9qV VIw5y0FcMI1sdTlI9DdVzsH6lV3aF38VfjV2GKSQe+lvWh6nvDOeQbrkQ3I6riTJ hSyZtDP9a4WbhtrelBA4AnjJCd8EvVS40nUu0NIC/iDRJEkvsrj6hqOtBL1EsBmO mkUCAwEAAaOCAxUwggMRMB0GA1UdDgQWBBSaIb3/Lcr8wTj1v9bAMw0CGeD1MjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8yNDcvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzI0Ny9taUc5X3kz S19NRTQ5Yl9Xd0RNTkFobmc5VEkubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAMbg/ADBAUbhYAwCwME ABuF9wMDARuEAwQEG4bwMAsDAwAkNQMEBiQ1gAMDADtqAwQEPdPgAwQEbiyAAwQE buigAwQEcG0AAwQFcRSgAwQFespgAwQHmXkAAwQEmX3gAwMAoysDBAKvHDADBAC0 g38DBATKtWADBATK3hADBADK8lkDBAXSvOADBAPS5UAwDQYJKoZIhvcNAQELBQAD ggEBAIOHyefAgGixEAo9MdbqwmEv8+2gC3QhwaZSx7AnKbIuhFLltXOgsK86pErD S1eo2G158TPW2E0iQmcRm9I1TN2y+1ltxwj6lO3PY2aT/RoCrT7+70z3/6PlC7vj NLxyC+gP0Htik8CFvOtUqtLlUJDVLtnE34kWBTZyQ1qSsb6wDqvH7RzhXnHLDppQ EKAomL6g30SaKHdExIFsa7oGTpEZ+Oyp4/T1papeph6iuIUC3cmSnHLk/eAPuE8I BSVWVdjteKRsywaxWTUY0mFQFRQ4P60W/we6LGQyIrNq6aSViJHsv3QOFV2ZhhMs dk6gr4S6p/X4lHYTV11qOiyc1eM= -----END CERTIFICATE-----Generated at Mon Dec 22 11:02:41 2025 by rpki-client