This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer
File: 9TUOV--VEgExsjcey8pZcd4RmvM.cer (raw, json)
Hash identifier: DvmZVKunlI2RdWZ799nEgdlS/7Eubk6kwEB/JRCd1FY=
Subject key identifier: F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5C9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Nov 2025 01:35:53 +0000
Certificate not after: Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources: IP: 2400:c8a0::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23710 (0x5c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:35:53 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=F5350E57EF95120131B2371ECBCA5971DE119AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:31:bd:8c:66:85:59:b3:5b:7b:65:05:33:
16:04:e5:6a:3a:29:f2:61:fe:0b:25:dc:4f:42:b2:
66:6c:29:53:f5:52:40:b7:5f:10:f4:00:c2:8b:37:
7d:41:23:02:e0:fe:79:67:dd:c6:89:f6:5f:95:75:
bc:e7:49:71:de:15:3e:18:a6:0d:79:33:ae:7e:ce:
72:22:71:81:f5:e9:08:05:a5:04:b0:09:69:31:ea:
8f:95:30:ea:de:2e:71:67:91:e0:1f:74:24:a7:55:
bd:21:76:28:b2:c2:1e:5f:6e:c6:ac:af:6c:9b:5b:
d4:d7:d4:6c:c3:ea:4a:70:e7:11:22:1f:a9:47:00:
08:ee:74:5b:c6:26:bb:5d:00:df:ec:df:12:30:10:
8f:c4:d8:37:b4:4a:0c:ec:20:67:7d:89:a9:6a:2c:
64:b8:b4:b7:bc:19:eb:df:e3:86:b5:eb:cc:31:4d:
b0:aa:30:a3:a0:a5:12:e1:1a:25:fd:13:30:6f:af:
23:f1:c0:e8:3e:d3:ce:a5:6f:21:3e:e4:bf:8f:3e:
61:a3:66:d0:af:ed:62:fd:09:33:d3:2a:d0:00:30:
27:a4:12:f2:d4:cc:9d:91:cf:9b:fb:10:6b:20:72:
05:39:de:3a:59:00:91:9e:56:65:05:31:c1:cd:a9:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:c8a0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:d7:7f:8e:9c:5b:5a:ec:e1:b7:ce:01:76:2b:90:ed:27:b1:
e8:3c:d7:8c:62:22:50:49:22:09:dd:83:3e:94:5c:c2:d2:e3:
26:20:f7:dc:60:3c:6b:f9:58:67:75:6a:17:8a:55:c5:11:ad:
cb:8c:f6:d7:be:53:47:4c:1e:cc:5f:32:9b:4d:ce:98:73:72:
14:d1:59:14:f7:3e:ad:4b:7b:32:b8:be:34:44:5b:61:ee:0c:
bd:77:d7:3a:8a:04:da:a4:b9:d7:89:fc:8e:c4:c6:61:b5:c9:
59:fd:6f:09:13:eb:f5:15:75:35:2d:8c:dd:d5:af:3c:5e:bd:
05:56:40:1b:f7:7c:cd:79:2b:56:a4:93:69:e0:3b:fe:09:91:
16:59:2f:e1:f5:ff:92:2c:31:ff:0f:dc:96:20:b8:0e:af:48:
77:23:68:eb:ab:10:51:0d:5a:c6:6c:6e:fc:43:f2:a2:52:1c:
81:ec:05:e9:de:a0:9b:9b:43:64:cd:99:5e:c0:86:1e:f9:63:
2d:a9:3c:08:66:43:06:eb:88:6c:f2:64:40:3c:57:d3:b7:43:
ce:7a:df:52:c3:b2:c3:46:b6:bf:8f:53:e3:20:af:17:d7:dc:
2c:7d:24:3c:e7:66:46:4b:83:2b:f2:bc:04:37:07:91:25:b0:
d7:06:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:05:32 2025 by rpki-client