This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer
File:                     3XdSz0_hsOFDbUVwDzI44lUWbRw.cer (raw, json)
Hash identifier:          EgIdhvRDsdtfcb48LDpRnfLgHdrkdEXoDo4D4Krx1lk=
Subject key identifier:   DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C
Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2
Certificate issuer:       /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
Certificate serial:       146C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Thu 15 Jan 2026 01:40:17 +0000
Certificate not after:    Fri 15 Jan 2027 01:30:02 +0000
Subordinate resources:    IP: 64.63.64.0/18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5228 (0x146c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2
        Validity
            Not Before: Jan 15 01:40:17 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:dc:31:3d:62:79:26:0e:a2:4c:69:ee:75:
                    2f:9b:b5:b0:66:79:96:bc:0c:c1:8e:5d:af:c0:88:
                    d2:b5:86:84:bb:97:5d:f0:45:2c:34:2d:01:fa:d3:
                    36:d1:69:a5:0a:0e:9d:49:37:a1:00:8f:47:0a:1e:
                    d6:13:0b:a6:fd:f0:81:20:d8:4e:45:8a:ec:f4:e2:
                    88:cf:dd:14:55:e8:a5:90:74:96:34:e8:88:27:86:
                    90:0e:d5:17:da:cd:42:19:15:4e:16:3c:83:50:3f:
                    ce:fa:7e:36:55:ab:05:bc:18:5a:6a:9c:e8:af:44:
                    27:08:1d:69:09:4b:68:3d:5d:57:53:1b:14:1a:7d:
                    b4:3e:d0:fe:b5:bc:68:d4:a0:6f:de:ac:c7:22:36:
                    67:3b:f0:2a:0e:1c:d4:c6:25:03:7e:56:05:6d:ca:
                    f6:e1:60:64:a5:b1:a4:1e:3f:71:3c:05:5d:e5:3b:
                    10:68:a4:2a:09:fe:93:43:ab:26:de:40:ec:b7:0a:
                    40:42:ed:01:87:be:f7:5e:fa:37:ba:f7:7f:d7:cc:
                    38:b1:8d:6a:64:3e:83:54:a2:96:44:e7:a1:45:3b:
                    35:3e:8a:50:f5:c8:5d:85:e9:be:c6:fa:ba:2b:92:
                    de:6b:94:74:d8:a4:8e:3d:40:b7:2b:da:12:e1:3e:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C
            X509v3 Authority Key Identifier:
                keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:09:10:86:07:de:ff:b3:06:f0:62:f0:3e:c6:94:2b:aa:47:
         1f:7d:b1:4e:11:8b:61:a7:27:45:20:a4:c3:88:ae:b2:85:df:
         f7:72:0a:95:1e:eb:05:5a:e4:b2:55:09:a4:b8:22:92:39:eb:
         df:bb:ad:e9:eb:e3:37:45:fe:a9:59:bc:75:fb:c7:d5:b3:cf:
         1f:92:a3:88:1e:0c:02:57:65:e3:e6:d0:40:12:ee:0c:30:f6:
         ac:90:42:d4:51:f4:ec:6d:31:f7:16:2a:f4:4b:86:62:39:fa:
         94:06:4a:02:a6:b8:65:0b:61:0e:04:91:a9:91:33:3a:96:67:
         70:67:f1:20:60:c6:d3:15:cf:cd:a5:d6:3b:5e:78:7e:1c:51:
         5e:e7:65:e5:ff:0f:a9:c9:00:25:72:3c:8e:12:d9:8b:f5:85:
         8f:da:f8:b6:48:bb:b6:68:2e:8d:97:64:28:3b:7f:26:a1:3e:
         ae:24:6b:97:71:04:e3:a2:3e:93:6b:74:9b:5a:ce:51:5d:e9:
         65:4f:6f:2b:09:b3:c5:ab:68:62:ed:8d:96:58:87:6e:cf:12:
         fb:e2:73:aa:bf:b7:c8:de:99:9a:6c:69:e4:23:ea:c2:9a:91:
         4b:54:5c:d5:66:ca:de:f5:f8:63:89:f5:68:21:1a:a2:3c:bf:
         ed:a4:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----