This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/-9Er0FKC_zgrSx2vC0YOhf5E_mU.cer
File: -9Er0FKC_zgrSx2vC0YOhf5E_mU.cer (raw, json)
Hash identifier: M/kikCYRGQaLNlbMewkuHXeJ5qyBhvf0o++lPANmcno=
Subject key identifier: FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial: 145D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Thu 15 Jan 2026 01:38:33 +0000
Certificate not after: Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources: IP: 192.50.220.0/24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5213 (0x145d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Validity
Not Before: Jan 15 01:38:33 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=FBD12BD05282FF382B4B1DAF0B460E85FE44FE65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:b9:d4:55:ef:e9:c4:2f:5f:1e:10:cc:44:
44:db:dc:41:0d:da:53:e6:6f:8e:0d:43:92:dc:0f:
b6:30:2f:7a:4b:81:1e:d5:a6:d8:7b:24:88:93:fc:
f7:28:fe:26:06:94:27:d8:c5:6b:e5:71:49:14:4b:
f6:45:13:ca:41:24:12:fd:85:45:e7:1a:c8:09:d9:
c8:f4:a3:0d:a7:ea:c4:3b:95:13:ea:a1:84:d7:53:
e5:6f:ce:20:5c:a2:79:01:25:47:53:3f:2c:1a:4b:
53:e4:a8:07:cf:3f:fd:57:5b:84:25:6f:25:48:94:
c2:33:2d:01:74:ce:55:45:ad:af:6f:bc:ff:1f:39:
35:2c:18:7c:84:9a:5e:54:0e:e2:9c:a0:b1:e4:f5:
00:58:c6:7b:34:03:0b:96:0d:8d:1b:5c:6d:bd:08:
62:4f:0d:b2:c9:99:b3:08:14:05:fb:64:32:2c:a5:
e1:0d:cc:fe:16:29:ca:13:98:c0:c7:25:16:a5:8e:
9f:d7:ee:93:55:0f:56:d0:b2:41:7a:b2:02:ed:7d:
84:2d:0d:59:d3:b4:89:85:6b:0f:06:4e:41:7e:d4:
5a:da:03:18:b2:08:3e:67:8f:75:96:59:92:47:31:
35:0b:b7:b9:56:a7:0a:84:e9:a7:b8:e4:69:db:3b:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:2B:D0:52:82:FF:38:2B:4B:1D:AF:0B:46:0E:85:FE:44:FE:65
X509v3 Authority Key Identifier:
keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2787/-9Er0FKC_zgrSx2vC0YOhf5E_mU.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.50.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:da:f6:0b:02:49:51:3e:80:e6:b9:5f:f5:4f:0b:23:15:b1:
af:56:33:24:59:d3:a6:ac:d4:7e:0f:fe:f9:5d:0e:69:5d:92:
57:9e:c8:a7:21:cd:66:b9:cf:ec:f1:56:eb:6e:4e:3c:f6:3b:
30:61:ad:38:e8:d2:f2:02:fc:1a:70:90:03:45:35:d4:76:44:
5d:32:77:c1:e4:02:17:f2:b9:cf:74:fd:1b:32:31:32:7f:c8:
00:d1:f9:b8:46:16:2f:5e:29:aa:27:bc:93:cf:e1:a6:4f:9e:
be:21:b8:81:01:e7:2f:92:45:7c:29:12:93:01:4e:78:d6:1c:
db:00:90:e7:49:fc:8e:e1:b0:9d:a9:a5:e7:76:11:df:08:64:
6b:98:a1:f4:96:65:62:29:84:ac:fa:2d:c4:ad:6a:18:81:e4:
23:17:72:fb:bc:2d:75:1c:2f:30:96:54:94:8c:d5:85:17:05:
91:29:1a:ef:d6:23:e1:31:6a:b0:45:1d:9e:40:e4:7f:88:c6:
30:be:fc:d8:70:a5:d4:23:8a:2f:45:62:86:27:79:9f:68:6c:
cb:d6:ec:e6:f6:43:5f:54:1a:a1:51:74:f0:ff:df:ea:2c:a7:
ff:fb:2b:35:f3:8c:ac:ae:1a:f0:54:e3:8a:5c:ff:ae:2d:d4:
14:c5:37:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFF0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG
MTE0OEU2NTM0REYyMB4XDTI2MDExNTAxMzgzM1oXDTI3MDExNTAxMzAwMlowMzEx
MC8GA1UEAxMoRkJEMTJCRDA1MjgyRkYzODJCNEIxREFGMEI0NjBFODVGRTQ0RkU2
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSKudRV7+nEL18eEMxE
RNvcQQ3aU+Zvjg1DktwPtjAvekuBHtWm2HskiJP89yj+JgaUJ9jFa+VxSRRL9kUT
ykEkEv2FRecayAnZyPSjDafqxDuVE+qhhNdT5W/OIFyieQElR1M/LBpLU+SoB88/
/VdbhCVvJUiUwjMtAXTOVUWtr2+8/x85NSwYfISaXlQO4pygseT1AFjGezQDC5YN
jRtcbb0IYk8NssmZswgUBftkMiyl4Q3M/hYpyhOYwMclFqWOn9fuk1UPVtCyQXqy
Au19hC0NWdO0iYVrDwZOQX7UWtoDGLIIPmePdZZZkkcxNQu3uVanCoTpp7jkads7
rh0CAwEAAaOCAokwggKFMB0GA1UdDgQWBBT70SvQUoL/OCtLHa8LRg6F/kT+ZTAf
BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC
OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD
ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw
gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMjc4Ny8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr
aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjc4Ny8tOUVy
MEZLQ196Z3JTeDJ2QzBZT2hmNUVfbVUubWZ0MEYGCCsGAQUFBzANhjpodHRwczov
L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDLcMA0GCSqGSIb3DQEB
CwUAA4IBAQAv2vYLAklRPoDmuV/1TwsjFbGvVjMkWdOmrNR+D/75XQ5pXZJXnsin
Ic1muc/s8Vbrbk489jswYa046NLyAvwacJADRTXUdkRdMnfB5AIX8rnPdP0bMjEy
f8gA0fm4RhYvXimqJ7yTz+GmT56+IbiBAecvkkV8KRKTAU541hzbAJDnSfyO4bCd
qaXndhHfCGRrmKH0lmViKYSs+i3ErWoYgeQjF3L7vC11HC8wllSUjNWFFwWRKRrv
1iPhMWqwRR2eQOR/iMYwvvzYcKXUI4ovRWKGJ3mfaGzL1uzm9kNfVBqhUXTw/9/q
LKf/+ys184ysrhrwVOOKXP+uLdQUxTc3
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:46:56 2026 by rpki-client