This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
File: uWlkp84KWPSuNnP0fXodQlvkoH0.cer (raw, json)
Hash identifier: l0y2Ke9SKq9BUdAi81li2HDBh3D+ne5aBuK2xBROJRk=
Subject key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5EC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Dec 2025 01:36:57 +0000
Certificate not after: Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources: IP: 27.34.128.0 -- 27.34.167.255
IP: 103.197.12.0/22
IP: 110.50.192.0/19
IP: 115.146.0.0/18
IP: 117.20.96.0/20
IP: 118.82.64.0/18
IP: 122.200.192.0/18
IP: 150.60.0.0/16
IP: 180.222.72.0 -- 180.222.95.255
IP: 180.235.224.0/19
IP: 202.74.16.0/20
IP: 202.133.112.0/20
IP: 202.164.224.0/19
IP: 211.9.192.0/19
IP: 219.100.168.0/22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24263 (0x5ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 15 01:36:57 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:cc:a7:4a:5e:e6:d3:9c:85:1b:35:eb:52:
f9:c9:b9:2d:c9:44:cf:ab:95:2f:2b:aa:e7:d9:0c:
ef:f6:f6:a0:5f:72:44:5c:78:a8:57:60:7f:14:3e:
81:5d:5b:6d:fe:d6:54:8a:38:25:39:0b:9b:b0:a8:
58:1e:c0:8b:74:7e:ab:3b:1f:24:70:c1:9f:80:c0:
21:28:e6:3b:75:50:b3:26:63:5b:81:00:df:d6:ab:
74:79:6d:d7:9e:a7:4b:99:a0:21:e5:14:d2:6c:72:
93:f8:db:60:7b:db:96:27:bf:75:4a:5e:66:47:91:
90:e2:11:d2:79:53:57:91:c2:24:53:96:1e:ce:8b:
5d:c6:c6:ed:b4:9d:55:48:3a:ce:97:5e:61:21:b4:
fd:b0:0e:f5:f0:17:20:7e:44:dc:5b:74:d5:23:bf:
2a:5c:0b:8b:80:10:cf:2c:37:0e:37:21:59:50:ee:
ab:29:6b:d7:16:ec:69:9e:bf:a5:96:25:73:d4:fd:
c8:6d:8f:5d:94:af:78:1f:c2:aa:fe:38:e4:09:c3:
af:b0:f5:1a:ec:10:45:53:2d:eb:87:5b:e2:56:cd:
bd:fe:2c:4b:35:27:9f:de:97:36:8f:71:43:9a:9a:
cd:c7:f6:bc:31:41:89:c3:0a:a0:56:6b:d2:a2:ec:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.34.128.0-27.34.167.255
103.197.12.0/22
110.50.192.0/19
115.146.0.0/18
117.20.96.0/20
118.82.64.0/18
122.200.192.0/18
150.60.0.0/16
180.222.72.0-180.222.95.255
180.235.224.0/19
202.74.16.0/20
202.133.112.0/20
202.164.224.0/19
211.9.192.0/19
219.100.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:e0:b0:87:67:86:34:5b:0b:5b:e2:4d:60:eb:3e:a7:76:64:
34:d2:6f:86:2a:20:a4:0f:90:cb:e3:68:c5:62:2b:f3:87:ac:
44:e3:0e:3b:c4:ec:ce:6d:2f:18:e0:75:35:11:91:16:4c:22:
84:0e:8a:61:45:9f:6b:37:21:f7:50:68:e6:21:e6:00:41:cb:
33:5b:9b:b3:5d:c3:2e:90:b6:bf:e0:d7:f7:05:f5:3e:99:10:
63:c6:29:56:85:c7:94:67:30:dd:19:df:2e:ed:66:3d:64:f8:
6a:0e:6c:e8:07:85:88:90:9b:4b:83:a1:6b:38:8c:a0:8f:12:
6e:65:37:e6:1e:b1:82:b6:bd:41:37:15:e6:67:6d:43:a9:09:
e5:53:a7:47:ac:c6:20:db:3e:11:19:b5:73:95:3b:2f:80:72:
82:58:65:19:0c:00:28:5c:8a:76:75:a4:23:5f:b2:2a:b8:1d:
fb:3c:40:3a:40:ae:f2:c6:c2:96:87:a2:33:c3:12:f9:3a:34:
c9:e3:e9:ab:ed:6c:b2:e5:a5:fa:d9:0e:3c:8b:23:d0:cc:a5:
87:3a:72:4e:c8:75:95:34:3f:2f:c2:3a:8c:e7:5d:5f:a8:78:
23:57:6e:e3:f6:1e:a5:21:8b:c5:23:93:d5:a6:ba:d0:12:da:
e2:2f:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:02:40 2025 by rpki-client