This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer File: rUdB8DSfvBWnCOKKLOMHkGysXeA.cer (raw, json) Hash identifier: mEPrDPTlmMqwuNhS71GmcfNJGnXXyccIOWO0FBb4wpg= Subject key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5F64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:42:00 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 14.1.8.0/21 IP: 61.114.96.0/20 IP: 61.206.208.0/20 IP: 103.29.48.0/22 IP: 111.91.240.0/20 IP: 114.134.96.0/20 IP: 114.134.128.0/19 IP: 126.52.0.0/20 IP: 180.214.224.0/21 IP: 202.169.64.0/19 IP: 202.228.240.0/20 IP: 203.129.96.0/20 IP: 203.170.32.0/20 IP: 203.215.56.0/22 IP: 203.217.156.0/22 IP: 218.216.0.0/20 IP: 219.100.0.0/22 IP: 219.109.64.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 13:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24420 (0x5f64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:42:00 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:44:ad:f7:17:ef:12:d4:3b:31:67:5b:20: 9e:f8:fd:16:a0:f7:8d:f9:d0:07:f1:87:7b:a3:3c: 62:e3:35:4f:20:38:a0:dd:0a:71:e8:d2:2a:02:48: 32:27:29:d2:2e:81:4c:a8:a5:d3:55:1d:a4:85:d6: 63:49:49:98:48:fc:33:2d:a8:18:e1:c3:03:48:af: 6f:43:6d:23:28:b9:d7:60:ad:e6:d4:58:4c:18:76: 91:5a:3f:f9:c2:11:ef:90:68:02:49:d8:2c:85:af: 8f:49:03:0f:4e:d2:d9:34:a1:38:85:f7:98:57:98: 51:a2:91:c3:68:4d:ca:06:b8:d1:f6:e3:95:fe:7d: e5:0b:e3:04:16:ed:25:bf:7e:e2:66:9f:b5:ca:2d: 93:6f:d9:c1:b2:5e:d0:fd:f2:40:af:86:a8:fe:67: 5b:b7:68:85:2b:87:e9:05:f6:5d:7e:a5:95:7f:cf: b8:16:ce:7c:ee:26:a7:b1:de:cb:16:56:ac:2c:3c: 44:66:96:74:47:4e:bc:eb:88:04:6c:49:c0:ee:25: 79:d2:08:9e:91:9d:fe:f8:2d:4b:c6:ae:92:91:3c: 94:0e:ed:2f:b3:3f:3b:cc:5b:c1:93:4d:18:ab:40: 27:a4:4e:c0:72:1d:d6:fd:ab:4a:e2:4f:77:43:fc: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.1.8.0/21 61.114.96.0/20 61.206.208.0/20 103.29.48.0/22 111.91.240.0/20 114.134.96.0/20 114.134.128.0/19 126.52.0.0/20 180.214.224.0/21 202.169.64.0/19 202.228.240.0/20 203.129.96.0/20 203.170.32.0/20 203.215.56.0/22 203.217.156.0/22 218.216.0.0/20 219.100.0.0/22 219.109.64.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:be:a8:25:0f:00:91:7c:2f:1c:b6:b8:6a:20:d7:82:f0:b9: 7f:1e:42:5a:5c:a9:27:22:46:e8:c6:3a:4b:8f:2f:14:5e:7a: 7f:84:8e:da:71:ea:e8:65:94:2d:fe:bf:b6:a6:d0:d2:32:ba: 8d:b5:7f:f4:d8:fb:b3:89:32:48:29:23:0c:12:7d:72:10:14: f1:ef:96:41:9c:75:0b:02:f7:c0:4a:b1:89:7f:60:f0:d9:cf: 46:08:36:09:1b:33:b1:5e:2d:81:8a:38:80:ea:f5:b5:7e:06: bb:aa:b0:49:46:0c:f5:7b:46:6f:95:0a:39:8c:bd:ee:d0:30: d4:de:67:32:f0:b6:82:43:aa:11:94:f2:3d:d3:6f:61:c2:0a: f8:5b:d8:3b:a4:6c:9c:42:ed:31:61:ee:d2:1a:cd:4d:3a:8e: 57:cb:ca:80:aa:78:a8:56:e3:74:79:1b:37:13:eb:2b:67:70: 19:b9:a2:6f:e7:d7:c0:5c:db:2d:bf:6e:87:a8:dc:92:10:7e: 7c:39:cc:58:c0:6c:a9:d7:aa:03:e4:45:68:2f:46:5d:81:5b: 15:27:d9:01:72:6b:32:d7:bb:21:09:6b:df:ec:07:4b:27:7c: 21:c7:ec:83:7f:1f:98:05:66:7d:35:88:2a:e6:40:75:f7:99: 04:62:ee:a6 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgICX2QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxNDIwMFoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoQUQ0NzQxRjAzNDlGQkMxNUE3MDhFMjhBMkNFMzA3OTA2Q0FDNURF MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANM2RK33F+8S1DsxZ1sg nvj9FqD3jfnQB/GHe6M8YuM1TyA4oN0KcejSKgJIMicp0i6BTKil01UdpIXWY0lJ mEj8My2oGOHDA0ivb0NtIyi512Ct5tRYTBh2kVo/+cIR75BoAknYLIWvj0kDD07S 2TShOIX3mFeYUaKRw2hNyga40fbjlf595QvjBBbtJb9+4maftcotk2/ZwbJe0P3y QK+GqP5nW7dohSuH6QX2XX6llX/PuBbOfO4mp7HeyxZWrCw8RGaWdEdOvOuIBGxJ wO4ledIInpGd/vgtS8aukpE8lA7tL7M/O8xbwZNNGKtAJ6ROwHId1v2rSuJPd0P8 6acCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBStR0HwNJ+8FacI4oos4weQbKxd4DAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC80NTQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzQ1NC9yVWRCOERT ZnZCV25DT0tLTE9NSGtHeXNYZUEubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAw4BCAMEBD1yYAMEBD3O0AME AmcdMAMEBG9b8AMEBHKGYAMEBXKGgAMEBH40AAMEA7TW4AMEBcqpQAMEBMrk8AME BMuBYAMEBMuqIAMEAsvXOAMEAsvZnAMEBNrYAAMEAttkAAMEBNttQDANBgkqhkiG 9w0BAQsFAAOCAQEADb6oJQ8AkXwvHLa4aiDXgvC5fx5CWlypJyJG6MY6S48vFF56 f4SO2nHq6GWULf6/tqbQ0jK6jbV/9Nj7s4kySCkjDBJ9chAU8e+WQZx1CwL3wEqx iX9g8NnPRgg2CRszsV4tgYo4gOr1tX4Gu6qwSUYM9XtGb5UKOYy97tAw1N5nMvC2 gkOqEZTyPdNvYcIK+FvYO6RsnELtMWHu0hrNTTqOV8vKgKp4qFbjdHkbNxPrK2dw Gbmib+fXwFzbLb9uh6jckhB+fDnMWMBsqdeqA+RFaC9GXYFbFSfZAXJrMte7IQlr 3+wHSyd8Icfsg38fmAVmfTWIKuZAdfeZBGLupg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:24 2025 by rpki-client