This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
File:                     8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer (raw, json)
Hash identifier:          3u8H/qyEVD/fUY6gfqNK8Z/2ENAA8YHM6Ya2ai9ulC0=
Subject key identifier:   F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5C7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:35:00 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 2001:df0:2440::/48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23679 (0x5c7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:35:00 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:ce:ea:35:77:07:d0:20:25:24:6a:bc:17:
                    26:4b:4b:94:78:f6:9a:94:3a:1e:08:6d:62:89:6e:
                    dc:c2:65:24:d6:c9:d6:68:3d:e2:49:3a:b3:88:a3:
                    3b:f3:97:bc:4c:c8:06:63:ad:6c:86:48:66:51:23:
                    f2:ab:f9:d1:cc:0d:72:54:6d:5d:ed:b8:bc:05:89:
                    78:9b:72:97:bb:01:be:4c:fa:cc:2a:e3:f5:39:19:
                    b8:5d:54:10:68:a7:23:b5:7e:c3:34:c3:6f:01:c3:
                    d1:3b:ff:87:99:f9:7c:15:4b:b6:c4:8b:46:b9:db:
                    7b:cd:24:1c:fd:ee:1d:e0:6f:c3:84:6f:33:73:f2:
                    1c:e6:a0:00:8f:b5:ea:7e:2a:07:32:e1:4c:d8:cf:
                    8f:59:6e:5e:34:ab:82:db:14:ee:38:3f:7d:49:1b:
                    20:f2:a9:09:0a:f0:3f:0f:ba:8b:0f:84:7b:fc:7e:
                    9f:6e:02:5f:71:f9:62:ed:de:8c:75:16:fb:96:eb:
                    ab:cf:de:7d:d3:f2:d9:70:2e:cb:2e:d6:e7:6d:38:
                    03:85:71:aa:63:7b:0e:26:00:1d:b0:c8:2f:e9:83:
                    3a:6b:09:29:3d:62:41:9f:26:61:9b:74:1e:a1:12:
                    4d:7c:cc:45:00:69:a3:7a:1e:41:72:4e:05:a9:68:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2440::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:6e:3d:9d:ce:2a:4f:cc:af:a0:57:9d:4b:99:81:2c:67:
         b6:0d:a5:99:3e:26:ca:1f:93:12:52:b0:a5:70:2b:ff:c7:22:
         68:ac:78:69:b9:1f:3e:8b:fa:ec:7c:ca:eb:d0:3a:f6:97:83:
         9a:bb:1c:92:39:77:7e:0e:d4:3e:27:0e:2b:bf:e6:a9:b8:60:
         cd:9d:bb:7b:7a:df:9e:9c:dc:a3:b3:0d:da:35:7a:bd:21:db:
         79:04:d0:a6:dc:3e:83:b4:da:96:48:52:e2:d5:7c:98:b9:f1:
         ff:bf:de:3a:9a:78:5e:85:6c:1c:14:ca:31:ec:d1:75:f4:ad:
         01:bc:df:64:ad:5a:bc:ef:0f:53:86:6a:5a:c7:e9:56:9b:a0:
         7f:e8:6e:9c:99:3e:b6:57:73:a5:8b:6e:ec:89:bf:d0:fd:bf:
         67:fd:52:80:aa:b2:ba:42:9f:b1:1f:e9:2f:d6:97:66:ca:c4:
         c2:de:97:8c:4b:fa:d9:6d:7d:c0:a6:06:69:e5:cc:41:f9:49:
         40:2a:66:ea:1a:6d:41:89:b9:6a:b8:39:94:14:c8:69:99:09:
         82:cd:5d:b4:be:2b:17:12:4d:7e:f8:73:62:e2:61:50:2a:41:
         84:12:50:40:4a:c3:ed:53:c6:6c:32:65:7c:a9:73:9a:3a:23:
         ce:bd:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----