This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
File:                     51bZpc6aysl4NgAR96fPxDAYHVM.cer (raw, json)
Hash identifier:          WpdnwS/lBEq4DVjs5ZxfwLmtxfobBZNrnLz9C3Q2w+g=
Subject key identifier:   E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5F79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:42:32 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 202.126.16.0/21
                          IP: 210.158.180.0/24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24441 (0x5f79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:42:32 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:ec:9f:ca:1f:ec:a7:cd:67:ed:b0:d3:fd:
                    68:c8:a8:6b:26:af:9a:77:8a:a7:55:a8:44:6e:0b:
                    a1:3c:f0:64:e8:e3:d9:6e:74:02:65:03:03:44:3e:
                    74:82:1e:4b:b0:1e:9b:e3:81:32:d7:70:35:f2:9d:
                    c5:5a:69:b7:fc:99:30:13:ad:c1:80:00:6d:e1:d0:
                    ed:09:d4:74:e5:67:15:16:2d:54:33:37:29:5e:ff:
                    9b:e0:90:78:2d:a7:3a:11:8d:25:cf:e4:43:4a:3c:
                    31:1c:eb:da:28:f8:a2:d5:ef:6f:38:cc:ae:da:b2:
                    11:a0:7f:3e:7f:e1:43:cf:4c:2b:a7:bd:67:6e:1b:
                    46:87:2d:a4:dc:35:44:68:6f:7c:69:a3:c3:73:c5:
                    01:82:bb:92:51:b5:07:ab:17:05:32:36:ec:29:9f:
                    5e:b9:e6:ff:57:93:8c:8d:a2:bd:4a:55:c4:01:73:
                    f8:27:76:7e:c5:9b:36:f0:82:84:d2:21:16:f8:04:
                    3d:e3:c2:6f:e8:87:be:17:26:fc:3a:29:44:60:2e:
                    6a:61:81:25:55:e2:b1:04:2a:e6:e3:f0:a4:60:66:
                    f0:88:e6:87:23:72:0b:81:ec:b3:3e:36:f7:ac:4d:
                    c4:24:7a:61:86:de:30:73:e3:23:73:86:ad:1c:b4:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.16.0/21
                  210.158.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:88:82:69:e0:4d:b5:d4:46:68:28:78:69:a7:5b:8f:8c:
         62:7b:93:d5:8c:a3:fe:6d:24:28:72:02:6c:b7:a2:eb:db:d2:
         79:bd:3d:1b:d3:2d:2c:ed:10:73:ec:d5:e7:84:8e:a1:ba:ca:
         1d:ba:2a:8f:64:17:a5:ee:4e:c1:72:b3:d4:c6:7e:a8:46:95:
         bc:53:f3:d0:99:54:14:0a:87:e6:f2:c6:cb:14:bd:d4:06:91:
         b0:12:a3:62:92:83:9f:c7:98:df:c1:84:4e:f8:b1:10:eb:f2:
         ad:8f:12:2d:c6:52:e2:dd:bb:61:e0:f3:24:ce:3b:8f:f9:81:
         07:82:34:e0:3c:2e:bb:61:f6:37:b0:66:1e:76:9c:70:90:62:
         fc:c7:ac:dd:f1:c4:bb:62:2c:4b:d0:77:45:eb:df:1a:18:a8:
         0a:89:a5:5f:e1:62:08:d1:c6:e0:8c:22:03:84:45:c9:a5:b7:
         31:3a:da:a9:d1:10:5d:c8:8b:0f:cc:28:d1:c1:32:e2:45:3f:
         a4:80:37:13:bc:c0:d5:ad:0d:e8:34:68:de:46:69:21:94:94:
         0c:f8:4e:c9:f0:9b:f0:d6:df:19:80:0b:fd:97:42:8c:01:d5:
         06:28:9f:c9:3e:be:18:8a:4a:ed:02:cb:ab:c4:e6:e0:bf:12:
         86:f5:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:00:47 2025 by rpki-client