This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
File:                     4oKHAq-VJLLD1X4biwxkliVmlJw.cer (raw, json)
Hash identifier:          3KBVNnPXqJXYfTZRP9v2XhfF5hcyna+5zmYKk50ZJjQ=
Subject key identifier:   E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5C5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:34:02 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 2407:58c0::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23644 (0x5c5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:34:02 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:f9:3f:55:c9:c1:51:e3:78:cc:6b:2a:f6:
                    53:0a:24:1c:59:3f:17:10:18:32:ea:2b:24:8a:fd:
                    6b:ae:2c:ce:fb:8d:dc:74:1c:4d:6c:e3:39:72:0c:
                    ed:09:04:37:88:5c:92:0c:94:8e:73:aa:0f:2f:2d:
                    3a:3a:1f:eb:62:32:99:f4:a8:85:ca:bf:6a:80:01:
                    04:2c:80:1c:76:e6:71:7a:2f:4f:0b:17:4a:7c:fa:
                    04:f2:9a:9f:74:c1:63:15:4c:51:9c:25:13:cd:9c:
                    b4:8a:27:cf:4f:24:6d:18:cc:d3:1a:20:2e:92:43:
                    3f:f9:4a:3f:e7:d2:a9:75:14:9c:d2:d0:62:8f:23:
                    4e:ee:5d:df:29:d6:f8:18:b1:99:55:3f:f4:20:e2:
                    17:28:63:03:b2:d0:02:8f:b8:cb:18:0b:69:50:16:
                    3c:17:44:45:3b:c5:d8:80:c3:8c:ae:8e:cb:c5:86:
                    3f:94:59:5a:8b:cf:b9:bc:69:8b:23:77:39:98:72:
                    90:fd:28:de:be:cb:b8:68:5e:bd:54:7b:8d:69:98:
                    77:eb:14:6d:ca:86:40:97:bc:4e:3d:6f:bb:e8:1f:
                    0c:ca:45:30:88:5c:c3:d0:ee:f9:c7:f6:7d:c2:10:
                    d2:90:14:97:ff:00:fa:af:bb:dd:62:fc:a7:41:a5:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:4f:37:e2:1f:b7:cb:d6:4f:f3:be:09:7f:65:cc:52:9f:
         bc:cc:a7:77:6a:c4:57:dd:c3:81:a9:e5:58:6b:8f:91:ee:a6:
         a6:d7:b5:e3:d6:ac:e1:09:ac:5d:24:79:8b:4d:c9:cb:0d:92:
         88:de:30:f0:9b:63:ea:11:30:14:21:4d:51:5e:7a:97:c1:04:
         f6:ce:b3:be:30:2c:33:ec:e0:43:e7:f5:15:4c:3c:fe:79:48:
         c8:dd:a2:af:6f:da:42:f5:ed:ad:87:8e:8e:b5:64:b1:2f:5d:
         94:df:2e:dd:5d:e2:91:0a:b1:b7:76:28:08:f2:38:ce:41:2c:
         15:52:7a:07:8f:c3:0e:5b:dd:2c:99:36:02:eb:31:a2:a6:37:
         3f:11:2c:8e:ad:de:c1:6d:d7:33:ab:fa:d4:c1:5e:cd:c4:bf:
         b0:33:8d:44:01:6c:72:eb:1f:11:bf:90:a0:b5:3a:ce:0c:de:
         ec:fb:95:f3:fb:31:f5:05:26:44:73:d8:7d:48:1c:80:e7:43:
         50:03:d8:78:54:8b:77:ba:80:17:78:7b:b4:47:93:16:64:2d:
         5c:69:11:b1:38:c4:a1:2a:1c:6a:69:82:81:40:ca:81:7f:37:
         90:9d:ef:0e:c5:47:95:dd:b9:45:68:27:a4:36:69:b0:b7:65:
         2b:91:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----