This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer File: qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer (raw, json) Hash identifier: LBl4bZ83Q/CNVEt865w8RtctyW2ILClT7KR8vx0+WZI= Subject key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5F07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:39:03 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 61.122.16.0/22 IP: 103.210.108.0/22 IP: 133.112.0.0/16 IP: 133.233.0.0/16 IP: 150.41.0.0/16 IP: 202.1.208.0/20 IP: 202.13.62.0 -- 202.13.79.255 IP: 202.210.56.0/22 IP: 202.243.188.0/22 IP: 203.178.8.0/24 IP: 203.178.17.0/24 IP: 203.179.64.0/20 IP: 210.134.208.0/20 IP: 211.1.0.0/19 IP: 211.120.240.0/21 IP: 218.231.16.0/20 IP: 219.101.112.0/20 IP: 220.213.240.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24327 (0x5f07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:39:03 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:d5:8d:5f:ee:b9:c8:c1:73:da:a3:53:aa: ec:75:d4:7b:f8:71:36:3e:48:e3:19:ed:3e:8a:e3: 2c:c7:62:08:2d:03:dc:91:89:ce:9e:8e:89:84:13: d0:e0:6d:88:53:bd:35:3a:8b:16:5a:5e:80:c9:d1: fd:76:23:f6:a0:7c:d2:a9:6b:12:29:c7:0d:b2:f7: 6b:80:56:41:fb:7a:52:63:e2:ba:a8:0a:0e:b5:60: 1c:31:7b:da:66:29:03:89:09:66:78:e0:38:b6:61: dd:b5:cd:a9:28:7b:c2:76:9e:2b:9a:55:0f:cd:db: 82:0f:c0:2f:d1:e5:0d:4d:e7:23:bd:f2:11:50:cb: bb:3c:23:d6:7a:91:e3:38:e4:21:3f:ec:e7:76:ac: f4:b8:2e:0f:7b:5c:1e:63:7d:1b:ce:1e:95:49:6a: 31:2f:eb:7e:7f:6b:72:7a:e8:da:b5:b6:52:54:07: 69:ad:89:f4:b9:8a:67:9a:a1:f2:68:bd:74:84:3d: d5:5f:13:21:32:12:dc:cd:6b:3a:c4:cb:6d:4c:d8: e8:2f:71:dd:b6:01:04:9c:9f:53:e3:4a:af:b4:61: e5:93:ee:4e:91:b3:8b:6b:43:5a:f0:b1:bf:fd:b3: 6f:b1:79:b2:ac:2c:b5:63:be:0c:16:13:de:bb:80: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.122.16.0/22 103.210.108.0/22 133.112.0.0/16 133.233.0.0/16 150.41.0.0/16 202.1.208.0/20 202.13.62.0-202.13.79.255 202.210.56.0/22 202.243.188.0/22 203.178.8.0/24 203.178.17.0/24 203.179.64.0/20 210.134.208.0/20 211.1.0.0/19 211.120.240.0/21 218.231.16.0/20 219.101.112.0/20 220.213.240.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:b2:26:ee:0a:52:d4:6e:2f:91:81:45:39:e8:2d:e5:5d:02: 00:c8:d7:1e:2b:09:37:18:da:7e:46:18:99:89:19:f2:07:8b: 50:de:ac:02:7b:d1:ed:3b:eb:d6:d2:fc:87:67:07:06:9f:0c: 48:ee:02:7e:1f:be:c6:c1:ff:7f:7b:31:e0:0a:8e:79:84:b0: 8b:fb:15:7b:be:bf:89:4a:3a:f5:14:17:bd:95:c5:83:40:e9: 68:15:70:81:dc:a7:91:0a:cd:fa:03:74:0b:e3:e2:6c:74:9a: c3:15:13:59:a9:10:2a:9d:77:39:cd:ea:91:75:66:ef:fb:f7: f5:dc:4b:82:c0:2a:30:f5:68:f8:33:66:e8:8a:b9:1a:75:9f: d2:9f:c4:a6:87:82:f7:cc:db:44:95:75:3e:74:b2:c5:d8:dc: aa:4f:8e:e9:f9:40:e9:57:8e:bf:d1:53:22:9e:01:7a:7d:c5: 74:6e:aa:a2:62:f8:61:61:3b:a5:97:dc:8e:83:1d:6d:79:77: a0:85:c7:42:83:c4:12:ce:e9:db:8a:ca:c4:87:8d:2a:17:23: 37:26:ad:48:e5:6d:30:e2:83:95:da:26:b0:f4:14:25:07:30: 72:01:09:4b:25:7e:b9:f7:71:35:1f:e1:68:20:9c:41:1b:51: 40:a8:41:be -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgICXwcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzkwM1oXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoQTkzNUQ1QUQzM0RDNjMwQzQ2MTE5ODcxNDBGNUU0NjhCNzA4MUQx MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMr81Y1f7rnIwXPao1Oq 7HXUe/hxNj5I4xntPorjLMdiCC0D3JGJzp6OiYQT0OBtiFO9NTqLFlpegMnR/XYj 9qB80qlrEinHDbL3a4BWQft6UmPiuqgKDrVgHDF72mYpA4kJZnjgOLZh3bXNqSh7 wnaeK5pVD83bgg/AL9HlDU3nI73yEVDLuzwj1nqR4zjkIT/s53as9LguD3tcHmN9 G84elUlqMS/rfn9rcnro2rW2UlQHaa2J9LmKZ5qh8mi9dIQ91V8TITIS3M1rOsTL bUzY6C9x3bYBBJyfU+NKr7Rh5ZPuTpGzi2tDWvCxv/2zb7F5sqwstWO+DBYT3ruA b9cCAwEAAaOCAvUwggLxMB0GA1UdDgQWBBSpNdWtM9xjDEYRmHFA9eRotwgdETAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvOTk5Ny8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOTk5Ny9xVFhW clRQY1l3eEdFWmh4UVBYa2FMY0lIUkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMIGKBggrBgEFBQcBBwEB/wR7MHkwdwQCAAEwcQMEAj16EAMEAmfSbAMDAIVw AwMAhekDAwCWKQMEBMoB0DAMAwQByg0+AwQEyg1AAwQCytI4AwQCyvO8AwQAy7II AwQAy7IRAwQEy7NAAwQE0obQAwQF0wEAAwQD03jwAwQE2ucQAwQE22VwAwQE3NXw MA0GCSqGSIb3DQEBCwUAA4IBAQAKsibuClLUbi+RgUU56C3lXQIAyNceKwk3GNp+ RhiZiRnyB4tQ3qwCe9HtO+vW0vyHZwcGnwxI7gJ+H77Gwf9/ezHgCo55hLCL+xV7 vr+JSjr1FBe9lcWDQOloFXCB3KeRCs36A3QL4+JsdJrDFRNZqRAqnXc5zeqRdWbv +/f13EuCwCow9Wj4M2boirkadZ/Sn8Smh4L3zNtElXU+dLLF2NyqT47p+UDpV46/ 0VMingF6fcV0bqqiYvhhYTull9yOgx1teXeghcdCg8QSzunbisrEh40qFyM3Jq1I 5W0w4oOV2iaw9BQlBzByAQlLJX6593E1H+FoIJxBG1FAqEG+ -----END CERTIFICATE-----Generated at Mon Dec 22 11:04:25 2025 by rpki-client