This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer
File:                     5lXIJpEyXsj0QlvApmsaYiMjHXE.cer (raw, json)
Hash identifier:          czN3utAGHKJreh0kxX2O15tLsRjbtVUDkpqOIRV4wl0=
Subject key identifier:   E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5C5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:34:03 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 203.76.164.0/22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23645 (0x5c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:34:03 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=E655C82691325EC8F4425BC0A66B1A6223231D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:62:50:52:c5:6a:2c:d4:7e:0a:a2:36:a4:
                    a0:2d:d7:08:87:7e:4b:73:42:ce:d5:3a:a4:8a:55:
                    61:34:18:7b:62:dc:43:13:b4:53:db:24:f2:78:91:
                    d7:a7:cf:85:cf:5c:40:b5:d6:b2:b9:ca:ef:d6:45:
                    a6:d1:94:cf:3f:f2:4f:7c:2f:7e:7c:c6:dc:a7:9f:
                    ef:5c:5d:d1:5f:f9:a1:80:74:b4:ec:2e:bb:a9:ab:
                    bd:a4:fa:1a:c9:31:76:9e:15:f0:8c:9f:ae:25:b8:
                    3c:2d:f1:ea:e6:07:5f:70:51:16:9d:4b:d3:36:c6:
                    65:eb:3d:00:04:02:bb:ba:2d:83:a0:1a:58:f9:b0:
                    ca:cd:5e:0d:7f:8f:60:72:fa:22:f9:d5:a0:e7:56:
                    b1:d6:d5:0f:74:bd:03:85:37:b2:15:7d:e6:c2:8d:
                    a4:29:07:74:2a:b3:26:04:ea:b2:07:38:12:5a:aa:
                    29:e7:62:e5:84:54:e3:ec:70:c4:34:df:58:00:42:
                    fa:91:cd:fb:69:01:53:69:68:cb:1d:4a:f1:fa:42:
                    e7:f3:ad:b1:a3:c3:c0:b9:56:78:3a:0b:da:63:33:
                    e7:f0:71:e1:f9:a2:f5:70:92:49:c2:2b:c1:e6:09:
                    e6:0d:0c:7b:8c:fc:f2:38:cb:e4:5f:97:5d:b7:1d:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.76.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:27:56:f3:16:b3:e6:f8:ce:2d:1d:14:91:96:d6:ba:ba:
         50:88:18:12:0a:8a:19:5b:eb:47:d1:68:a3:88:84:fc:03:ff:
         59:92:22:44:80:6a:4d:ea:4a:94:de:f4:a7:48:02:3b:d7:b7:
         46:df:1a:20:c3:f1:84:4e:dd:a0:eb:82:e4:e2:7a:08:98:77:
         32:b2:c1:db:10:23:3c:51:4c:b8:ca:1d:14:a1:e6:29:9f:38:
         02:5e:d0:e0:aa:bc:06:6f:63:17:b0:e5:30:d7:89:25:17:09:
         40:56:cc:86:63:af:a1:90:54:7f:2d:67:c7:a3:47:fe:b9:ae:
         6f:e0:f6:11:41:8e:36:dc:eb:68:13:0b:f2:3d:ae:d1:db:36:
         1f:ba:eb:c5:d1:55:0b:0c:f3:0e:59:3d:39:b5:3e:55:1b:a6:
         4e:3a:51:d2:e6:db:f7:e4:f5:e3:3a:9a:90:cc:59:08:ba:fd:
         ab:af:bc:c8:c4:c1:e8:24:00:0b:7c:b8:d3:8a:8c:1d:10:fd:
         d0:4b:86:d9:9c:39:0e:21:6e:0b:8b:7b:84:5d:82:ec:73:81:
         7a:03:3a:38:e4:48:2f:b2:63:6d:be:a0:d2:0f:73:30:cb:69:
         b5:29:7e:22:e1:cd:26:b2:57:26:ba:5b:ea:70:77:98:ee:7b:
         1b:48:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:06:22 2025 by rpki-client