This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/n_1hCP46yEH5IOgIwaGkN0qBIO0.cer
File:                     n_1hCP46yEH5IOgIwaGkN0qBIO0.cer (raw, json)
Hash identifier:          xz/oZ3Mnoieq0rK4NHzttUHPCY707tC38+bHpj8Dflw=
Subject key identifier:   9F:FD:61:08:FE:3A:C8:41:F9:20:E8:08:C1:A1:A4:37:4A:81:20:ED
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5EFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/n_1hCP46yEH5IOgIwaGkN0qBIO0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:38:26 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2001:f60::/27
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24314 (0x5efa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:38:26 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=9FFD6108FE3AC841F920E808C1A1A4374A8120ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:c9:8e:30:17:fb:e2:1c:68:94:ff:ca:85:
                    86:8a:9e:e8:e5:36:1b:23:42:d0:a6:2d:83:14:d5:
                    5a:66:3d:04:2b:4a:5c:ee:92:8c:75:33:be:b7:e0:
                    24:40:af:aa:45:1f:ab:a5:d6:18:a5:e3:e9:01:51:
                    02:43:ea:9f:08:7b:f9:03:9c:f5:28:51:a9:57:da:
                    39:85:3c:8c:e6:78:3e:fd:7a:dd:53:f3:58:18:67:
                    75:04:f5:4f:bd:a1:8d:4d:36:9c:5f:88:f6:f8:b9:
                    39:3a:84:27:65:74:f2:be:df:5a:94:5d:71:40:5f:
                    1c:cd:b5:06:8e:5e:fa:ad:f2:ac:e6:da:2f:f8:ab:
                    de:7c:17:78:b7:87:b7:2e:c4:dd:4a:d3:32:17:b1:
                    d9:29:46:ae:ae:b4:25:09:da:2a:f1:93:30:ca:93:
                    03:c1:6f:13:3b:36:1c:b8:a9:7d:b0:40:49:5e:0d:
                    21:a6:4b:09:31:fc:f6:11:9e:0d:09:71:9c:c0:3b:
                    f2:24:83:70:1a:55:c0:4d:b2:41:db:f6:f5:4e:ac:
                    fb:d5:63:3a:e0:ad:62:77:77:03:34:52:7f:be:6f:
                    a7:69:14:79:05:12:8a:09:bf:9e:29:e5:44:97:28:
                    e0:4f:8d:56:70:24:07:e8:91:01:8c:bf:6c:47:17:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:61:08:FE:3A:C8:41:F9:20:E8:08:C1:A1:A4:37:4A:81:20:ED
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/n_1hCP46yEH5IOgIwaGkN0qBIO0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f60::/27

    Signature Algorithm: sha256WithRSAEncryption
         9d:51:ab:18:7e:3c:10:4d:51:72:0a:b1:a2:7b:e0:8c:4c:3a:
         16:52:79:9b:6a:98:b3:9e:05:90:40:52:86:32:d3:7e:63:c1:
         22:57:f5:2e:1a:0f:35:bc:da:0a:f7:58:b7:76:36:8d:d7:b8:
         3e:a2:39:bb:d5:01:df:5e:74:92:d9:32:03:f2:c6:6a:42:94:
         84:3c:36:ef:a8:94:90:86:60:7a:8e:cc:08:3c:46:54:09:cb:
         b4:19:cf:18:59:70:d0:b8:9c:d6:03:6b:ee:bb:68:de:48:13:
         04:da:9d:09:4c:ac:91:21:41:e4:a1:03:62:29:bf:41:ab:7e:
         72:57:47:0d:a1:d5:a2:b3:38:c6:4d:a2:ab:d1:f0:cc:25:0f:
         76:5a:0c:80:57:ca:32:db:a1:82:d3:9e:03:28:8d:2c:59:08:
         c3:ce:e5:40:f6:25:95:3c:4d:3a:05:8c:37:79:7a:b4:1d:c3:
         95:29:92:96:3b:15:fe:9d:5b:7e:93:d5:df:05:eb:37:80:27:
         be:a1:5a:f2:67:06:30:16:48:16:dc:a5:b7:c9:e9:59:ad:f0:
         a9:29:c2:c4:36:f1:98:6f:2d:34:9c:17:93:61:86:6c:0b:39:
         74:bd:de:34:02:fe:7f:f0:13:11:58:ac:d7:4e:24:5f:b1:b7:
         66:28:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:01:45 2025 by rpki-client