This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
File: 14hnjmTSkYTCPaqttZS_2briQFw.cer (raw, json)
Hash identifier: W5nBx10DVVbZ2qn1huwPn708NC4YnG1grxG68518zbM=
Subject key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5C48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Nov 2025 01:33:25 +0000
Certificate not after: Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources: IP: 61.125.160.0/20
IP: 61.213.240.0/20
IP: 202.25.192.0/20
IP: 210.166.32.0/19
IP: 210.236.0.0/19
IP: 210.253.32.0/19
IP: 211.1.128.0/19
IP: 211.12.224.0/19
IP: 219.118.32.0/20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23624 (0x5c48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:33:25 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:9f:cc:05:e8:d8:2b:c8:f3:4e:10:4e:cf:
89:f5:de:33:63:04:53:85:64:a8:0a:77:bf:12:f6:
de:b1:5f:a8:f5:bc:07:07:22:f9:f3:48:cb:ad:98:
b6:ec:82:df:f9:90:27:22:da:c0:90:44:f3:d1:a5:
e7:98:d5:87:19:aa:ab:d4:5d:cd:04:f9:f9:49:50:
3e:bf:0d:73:9d:b6:ac:c8:79:81:e8:23:a4:19:b4:
5b:be:70:c0:70:a3:fd:1a:37:aa:3d:31:7b:48:3b:
ef:6e:d6:83:68:0d:30:66:b1:a1:56:57:55:ed:e2:
a1:b9:a5:b6:fa:3c:4e:ea:be:fe:e4:9c:45:89:31:
ad:16:59:3f:9a:98:34:3e:d2:07:45:ab:e0:09:10:
8e:c3:e4:08:59:8a:01:8e:dc:1a:2f:39:85:87:7e:
ed:20:7c:27:1f:5a:4d:8c:ca:e5:28:13:90:99:82:
8f:43:cd:dc:f8:82:32:6d:2f:82:0d:c7:56:e7:c6:
35:a5:f4:1e:46:e5:db:b5:f4:9f:53:fe:6f:c6:4e:
bc:d9:40:d0:6b:92:c0:27:70:89:2f:9f:7a:03:fa:
5e:73:79:4f:95:fe:b8:af:74:13:93:bf:89:b5:2f:
63:8c:bd:1d:be:31:73:38:f2:7d:1b:01:d1:0e:33:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.125.160.0/20
61.213.240.0/20
202.25.192.0/20
210.166.32.0/19
210.236.0.0/19
210.253.32.0/19
211.1.128.0/19
211.12.224.0/19
219.118.32.0/20
Signature Algorithm: sha256WithRSAEncryption
59:9d:87:59:0a:12:32:13:4c:a6:61:3e:8d:e1:54:36:53:33:
0e:41:c9:92:dd:ce:59:a7:c7:54:e2:4a:f3:33:0f:08:a7:fb:
64:98:e8:2c:98:60:90:ba:72:35:2d:42:ea:f0:2a:75:d0:78:
d4:e8:0a:62:4e:43:f2:01:fd:ec:40:26:40:f9:03:67:79:af:
22:36:1d:1d:f8:aa:fb:3d:75:40:ad:be:90:23:56:d4:61:c9:
c8:d9:08:28:06:33:d0:15:fa:8c:61:fc:12:96:ac:93:9f:cf:
59:e2:30:41:cf:fd:eb:85:8f:8a:7f:c2:1e:f4:31:d5:7b:66:
e4:df:1c:84:ee:f6:9d:b0:65:f5:12:40:50:ce:ea:da:d7:eb:
bc:cf:16:36:2d:e1:21:af:33:0a:6b:a2:10:36:a0:79:a6:df:
c9:72:71:49:5c:6a:9b:b0:22:76:b6:24:04:5f:ac:f9:13:94:
d2:9c:66:31:40:2a:c5:4b:69:f4:cc:de:2c:b1:fa:f9:53:9b:
ac:7f:a3:1b:65:14:0a:b4:5d:d8:e5:b7:f8:98:be:9c:0c:4a:
df:1b:d1:9f:f4:b4:ad:f2:c2:9a:fe:bc:00:55:20:dc:6c:6e:
5f:6b:40:35:26:57:a7:cf:1b:2f:14:8a:2d:4e:49:8d:52:e0:
aa:b7:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:05:39 2025 by rpki-client