This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
File:                     -u9X_xRNJQlORg4P04yAN5M07W0.cer (raw, json)
Hash identifier:          6WT75Kbq1ByJ3LQyabPpG9m7g438cNmFJwcIHlda+ZY=
Subject key identifier:   FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5DA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:43:54 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 61.245.112.0/21
                          IP: 103.198.212.0/22
                          IP: 182.50.164.0/22
                          IP: 202.88.192.0/21
                          IP: 202.127.80.0/20
                          IP: 219.100.184.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23974 (0x5da6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:43:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:e8:fa:53:fe:c6:63:ff:c6:1e:a5:a7:3c:
                    5b:bd:dc:77:ee:10:75:e4:a9:1a:35:2b:83:5a:b7:
                    2a:60:39:d3:07:ed:e8:56:e9:b2:34:51:53:da:5a:
                    54:39:2a:05:0d:8d:05:9d:14:4b:d6:0a:51:d1:43:
                    78:4e:c2:bd:8b:13:c9:f7:17:9d:ec:79:18:73:14:
                    16:38:a0:c7:86:5f:99:16:85:56:93:4c:55:6b:67:
                    5e:cb:77:85:44:95:ca:1b:5d:51:43:ff:e7:3a:e6:
                    ab:0f:95:09:cc:bb:73:e7:e2:c8:a2:69:75:2e:5b:
                    68:60:77:e9:f8:5b:7a:f7:08:50:c1:b1:d6:46:b3:
                    e3:b6:db:93:5a:0a:99:2a:a7:9f:fd:eb:ee:b5:57:
                    ec:12:db:74:2f:3e:79:d8:73:30:46:b5:48:1a:23:
                    c5:34:ed:76:39:00:c9:25:10:fe:3c:17:a9:03:ce:
                    1f:48:f8:fa:6e:56:9a:07:45:8a:fe:44:9b:8f:28:
                    77:a7:ca:60:d1:09:81:85:3f:e0:bd:0a:4e:cf:36:
                    0f:b7:4d:6a:6f:d4:9e:ed:26:6d:60:93:c7:98:04:
                    84:4f:08:70:dd:a5:23:2d:80:67:26:e7:d8:b1:d4:
                    23:02:35:36:67:aa:33:5c:13:57:8b:59:02:ac:e8:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.112.0/21
                  103.198.212.0/22
                  182.50.164.0/22
                  202.88.192.0/21
                  202.127.80.0/20
                  219.100.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:38:a0:a3:9b:f5:d8:06:d4:94:ca:e0:00:8c:47:fc:19:
         56:33:60:5c:8e:33:4f:c1:11:13:a6:6a:26:9a:30:bd:d0:ce:
         8a:f9:bd:26:c2:f1:52:aa:4e:78:bd:1c:9b:37:e9:d6:fa:02:
         0f:3d:05:61:1b:b4:b9:8d:bb:09:09:83:39:84:3a:37:40:61:
         6b:52:82:06:c7:7c:4d:b2:a7:63:5f:2e:56:a6:6d:6d:a5:16:
         d0:32:00:24:aa:05:92:cc:79:ae:48:a9:ed:57:8d:5a:14:55:
         a3:ee:9c:5c:08:8f:71:6e:20:3a:49:24:23:33:4d:f1:e0:6c:
         0c:c7:fd:03:28:2a:f2:38:75:14:ae:85:ad:e0:97:01:63:14:
         82:f1:48:57:ba:e2:13:a3:55:de:db:29:75:2a:17:26:3a:95:
         0e:41:00:20:e8:05:43:6a:2a:cf:1d:a3:19:a2:aa:b5:90:39:
         93:d2:ed:15:23:e5:8e:3f:d6:0b:93:28:fd:87:ec:61:a5:58:
         c9:ca:5f:48:29:21:c6:45:56:7f:f1:87:9f:ee:8e:98:ae:5e:
         2e:82:1c:60:55:ad:40:a6:b0:a1:ba:e6:69:7a:f8:1a:2e:f3:
         ae:d8:60:c6:62:39:f3:ea:30:f1:3b:43:41:75:d1:1e:55:b7:
         8a:73:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:05:31 2025 by rpki-client