This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
File: vbi4EKqFGPGejqHuFTlmJzas8Os.cer (raw, json)
Hash identifier: WdE3oAxAGpfxTs9gl7A1j34ky/5Yk0vAPV5CjRFtLtU=
Subject key identifier: BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5F6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Dec 2025 01:42:10 +0000
Certificate not after: Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources: IP: 103.170.124.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 08:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24426 (0x5f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 15 01:42:10 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:b4:fc:cf:df:3e:67:43:85:c6:a2:46:94:
71:e6:49:25:e9:23:b7:d5:20:2a:0d:65:c6:b0:3c:
bc:df:2f:70:58:cc:ba:1d:15:56:c9:03:de:62:44:
8a:8b:88:95:96:89:97:c5:93:cb:c9:a3:ef:ee:b8:
f3:46:c9:53:33:c7:59:dd:20:72:89:9b:da:e4:b6:
b0:c6:39:09:cd:79:34:08:1e:e4:a9:1e:a0:a5:41:
04:a9:20:66:cf:bc:7a:25:dc:d2:a7:d4:e1:fe:4a:
b7:e0:73:20:00:2c:2d:f2:4d:35:f5:de:3c:0c:83:
80:fc:23:73:54:b5:49:02:72:7c:ae:4c:b4:24:56:
8d:04:a7:b0:cf:07:c3:78:21:84:1c:83:b3:33:0e:
80:14:16:bc:6c:52:76:64:e9:48:e9:68:f4:d7:04:
66:4f:c5:40:45:6a:34:d5:17:29:b9:b8:a2:69:5b:
29:9f:f8:c6:58:c2:8a:7a:9f:95:4d:59:c2:76:c9:
75:7b:fe:10:0f:90:9f:67:00:2b:61:78:c7:ea:70:
05:c1:aa:c8:b6:40:06:fe:98:a0:fb:2b:a3:33:74:
90:97:f7:5a:c6:3c:8a:50:10:e9:45:7c:55:0d:1d:
95:be:e6:26:c6:09:97:69:c9:08:1c:c5:48:c2:de:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.124.0/23
Signature Algorithm: sha256WithRSAEncryption
79:3f:42:01:87:84:27:e2:76:de:43:06:70:71:3a:92:aa:63:
e8:54:e6:9e:0a:5e:cc:c5:b0:87:2d:8e:96:e5:85:b7:63:3e:
77:6c:30:e3:ed:f1:13:29:1c:df:34:bc:3c:28:b3:8d:3f:cb:
0a:a4:01:8f:74:4a:6f:9b:a2:6f:6b:1d:61:28:4a:e6:5a:13:
73:26:91:82:9b:c8:24:f1:fd:3a:03:d5:a1:52:92:65:05:e6:
4b:50:f7:96:b9:e3:2d:c3:42:d1:19:79:54:02:75:bc:30:d1:
db:03:c5:57:b2:62:8b:f3:57:2c:8e:70:44:fe:13:b0:6e:9d:
f4:da:40:7a:72:dc:d3:00:d5:2c:f8:3a:af:6d:0a:06:53:a6:
e1:ca:8c:ff:8f:8b:87:d4:bd:2b:b0:1c:fb:ee:d8:c4:04:bf:
8f:67:9b:69:78:ba:6b:65:0f:7d:87:8c:1f:f8:19:67:5e:21:
d9:b1:d1:b7:ff:c8:25:d8:bb:37:eb:0e:c3:b3:8f:09:d8:7a:
4e:25:8a:6f:ed:79:79:17:fe:fe:74:bb:1f:dc:07:24:85:24:
12:35:ac:c1:c6:11:f1:d5:29:1f:99:fd:24:11:80:c4:a2:e8:
d1:2a:0a:94:6a:b7:16:02:32:db:5e:d1:a8:66:44:23:0a:cd:
f1:e8:d4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:05:03 2025 by rpki-client