This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/7wlNVGLcAEccjOINbuSrHcJ3sb8.cer File: 7wlNVGLcAEccjOINbuSrHcJ3sb8.cer (raw, json) Hash identifier: 6Qt/IkDAzoXzyPqQAqb7F9dqZ3pUJIV5gmJRlKG4kAI= Subject key identifier: EF:09:4D:54:62:DC:00:47:1C:8C:E2:0D:6E:E4:AB:1D:C2:77:B1:BF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5D9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/7wlNVGLcAEccjOINbuSrHcJ3sb8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:43:37 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 2402:3260::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23967 (0x5d9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:43:37 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=EF094D5462DC00471C8CE20D6EE4AB1DC277B1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:52:c6:0e:ec:c5:b7:3a:ae:9d:66:a8:cc: dd:1b:d1:62:c4:60:ce:f6:ca:7d:5c:af:ee:47:69: 11:62:a3:f5:e3:47:74:07:5d:cf:63:dc:57:45:72: 0b:ab:b6:e7:66:0b:92:3a:a1:55:2e:62:d3:e6:3e: 57:ad:0c:0d:29:c2:09:ba:9a:35:29:47:4e:54:d9: 20:b4:37:d7:cb:bb:ee:3c:66:33:2a:e6:ca:43:c2: 7d:36:72:57:d9:cb:81:73:21:8f:2e:1b:c6:4c:b0: 43:98:98:85:a0:5e:5b:46:00:59:ec:e7:08:3b:0f: ae:6b:00:79:da:10:a7:c6:d8:56:9e:be:86:33:7c: e9:b9:ab:1a:70:5c:71:52:34:11:2c:e8:ed:b2:b5: aa:dc:7a:b8:30:a8:b7:8e:14:bb:4e:89:d7:90:73: 4b:2e:c4:3b:62:af:f2:c9:b9:57:c9:48:5e:64:2f: 7b:76:fd:fa:e1:4e:57:b9:4e:9b:e0:44:fc:f8:06: 9b:48:1c:85:f4:2d:71:35:1d:de:16:01:36:ce:b2: 5e:3a:9d:56:1c:ac:b4:a7:b6:5d:fd:ec:3a:02:fb: 77:be:8c:3b:15:56:4a:d3:63:bb:ce:4d:63:c0:e3: 02:b2:f5:32:e3:52:5f:5f:53:8e:d8:be:54:e6:e7: 07:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:09:4D:54:62:DC:00:47:1C:8C:E2:0D:6E:E4:AB:1D:C2:77:B1:BF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30451/7wlNVGLcAEccjOINbuSrHcJ3sb8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3260::/32 Signature Algorithm: sha256WithRSAEncryption 58:e3:34:56:fd:4a:2c:e7:8e:51:df:1a:c5:f2:75:f3:47:ed: 62:98:83:e0:c0:b7:28:92:f6:12:c8:40:a0:17:64:ac:d0:3b: 28:f3:c5:66:56:28:c2:94:94:ef:58:43:48:06:23:60:90:ae: 7d:ac:22:00:25:2a:04:19:74:b7:c8:81:97:80:45:23:c8:ce: e7:3a:06:7c:b5:e3:86:f0:30:d7:68:a2:96:48:6b:43:44:c6: eb:9d:59:45:f2:f3:9b:98:dd:fa:90:e6:b6:6d:ff:22:04:7b: ca:61:ad:4b:45:f5:43:30:4e:eb:1b:e8:14:9e:14:09:1d:a0: bf:2d:de:72:4b:23:7e:a0:58:c6:99:f7:c9:b9:f8:ca:2f:d7: f2:26:01:7d:ee:da:1a:98:a7:92:1a:ce:f9:76:64:35:da:e9: a4:9e:42:a5:86:20:0d:97:58:12:bf:e9:f3:3a:0f:5f:19:7a: d4:5f:44:17:2e:50:de:a2:0a:04:78:63:0b:21:36:d0:23:c9: e5:c5:8c:d6:c9:8f:6c:f1:38:3f:1b:6a:47:86:1a:ee:1d:f3: dc:c8:f7:02:7a:75:62:5a:92:a1:12:c2:b9:17:09:29:63:e9: 51:6c:c1:99:34:52:a0:a9:3c:6e:de:2f:1a:f1:af:c8:66:64: 82:aa:bb:0d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICXZ8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxNDMzN1oXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoRUYwOTRENTQ2MkRDMDA0NzFDOENFMjBENkVFNEFCMURDMjc3QjFC RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMj3UsYO7MW3Oq6dZqjM 3RvRYsRgzvbKfVyv7kdpEWKj9eNHdAddz2PcV0VyC6u252YLkjqhVS5i0+Y+V60M DSnCCbqaNSlHTlTZILQ318u77jxmMyrmykPCfTZyV9nLgXMhjy4bxkywQ5iYhaBe W0YAWeznCDsPrmsAedoQp8bYVp6+hjN86bmrGnBccVI0ESzo7bK1qtx6uDCot44U u06J15BzSy7EO2Kv8sm5V8lIXmQve3b9+uFOV7lOm+BE/PgGm0gchfQtcTUd3hYB Ns6yXjqdVhystKe2Xf3sOgL7d76MOxVWStNju85NY8DjArL1MuNSX19Tjti+VObn B98CAwEAAaOCAowwggKIMB0GA1UdDgQWBBTvCU1UYtwARxyM4g1u5KsdwnexvzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NTEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDUxLzd3 bE5WR0xjQUVjY2pPSU5idVNySGNKM3NiOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAjJgMA0GCSqGSIb3 DQEBCwUAA4IBAQBY4zRW/Uos545R3xrF8nXzR+1imIPgwLcokvYSyECgF2Ss0Dso 88VmVijClJTvWENIBiNgkK59rCIAJSoEGXS3yIGXgEUjyM7nOgZ8teOG8DDXaKKW SGtDRMbrnVlF8vObmN36kOa2bf8iBHvKYa1LRfVDME7rG+gUnhQJHaC/Ld5ySyN+ oFjGmffJufjKL9fyJgF97toamKeSGs75dmQ12umknkKlhiANl1gSv+nzOg9fGXrU X0QXLlDeogoEeGMLITbQI8nlxYzWyY9s8Tg/G2pHhhruHfPcyPcCenViWpKhEsK5 FwkpY+lRbMGZNFKgqTxu3i8a8a/IZmSCqrsN -----END CERTIFICATE-----Generated at Sat Nov 22 21:06:02 2025 by rpki-client