This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9a0af9SZUc0bHUgqgvKKlae1Th4.cer
File:                     9a0af9SZUc0bHUgqgvKKlae1Th4.cer (raw, json)
Hash identifier:          gMSWShKAkXuDNOiuDqGI4HjvmACJmmS1G+d8U8HD63k=
Subject key identifier:   F5:AD:1A:7F:D4:99:51:CD:1B:1D:48:2A:82:F2:8A:95:A7:B5:4E:1E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5BEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/9a0af9SZUc0bHUgqgvKKlae1Th4.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:30:24 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 202.235.0.0/21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23530 (0x5bea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:30:24 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=F5AD1A7FD49951CD1B1D482A82F28A95A7B54E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:37:29:57:e0:02:4f:88:5a:40:c3:53:9d:
                    67:3d:9a:d8:a0:d7:53:1c:bf:ce:86:1a:26:08:9a:
                    b6:99:fd:21:04:2c:3c:cf:f1:e1:5e:1b:13:3b:71:
                    ea:c2:38:d1:4d:99:af:cf:f0:26:4f:f4:23:32:18:
                    a0:43:1e:48:56:d7:4a:7c:e1:cc:4e:bb:c5:fb:ce:
                    da:cc:1c:d8:cd:c0:7a:af:54:96:71:2b:21:0e:60:
                    54:16:03:2b:3a:a7:c4:b9:36:42:26:74:f0:ac:43:
                    77:d7:ad:b0:3f:54:3b:4e:7b:a1:3f:7e:13:9e:4b:
                    98:24:55:d7:40:c7:c5:d9:44:75:d3:f2:14:b3:27:
                    18:cd:3a:85:83:f5:cd:2f:28:2e:02:ac:93:92:4b:
                    2c:7c:71:1b:d4:0a:4e:ea:e6:87:4e:8d:48:cc:d2:
                    50:7b:08:2a:12:12:cd:7c:23:ff:d5:45:7f:96:92:
                    38:4c:85:20:4c:34:0f:37:ac:1f:80:00:28:bc:0c:
                    02:ac:9d:1b:46:55:b6:e3:2d:e4:5b:15:11:c7:03:
                    99:63:4e:4f:f9:41:1a:a4:fd:91:d0:c9:4d:c7:d7:
                    2e:54:1b:88:a0:7f:58:bc:a9:9d:dc:78:2a:ae:a3:
                    e5:1a:71:01:3f:cd:e5:af:c9:65:2d:30:54:dc:e8:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AD:1A:7F:D4:99:51:CD:1B:1D:48:2A:82:F2:8A:95:A7:B5:4E:1E
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20006/9a0af9SZUc0bHUgqgvKKlae1Th4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.235.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:ca:bf:74:65:67:fc:f0:f1:05:2f:9e:65:d9:fe:44:fa:da:
         35:8a:80:5e:1e:c2:58:a3:95:68:6f:a1:ec:70:e0:84:40:c2:
         73:c1:63:fb:47:01:d1:3c:90:1a:d3:bd:43:39:2b:55:87:93:
         f0:ad:7f:3d:df:ec:12:52:96:b7:bd:4e:69:3e:a5:76:dd:38:
         b6:26:68:34:e5:ec:2c:35:0e:d7:56:d4:c2:04:33:6a:e2:14:
         dd:9e:9f:8a:73:2b:b5:a2:59:85:f8:46:a6:2c:54:ad:cc:1c:
         6c:44:40:27:10:10:3e:67:22:d2:c4:eb:56:26:53:09:12:90:
         62:c1:f7:09:1f:97:a1:e8:03:24:44:9a:78:c1:5b:36:b8:e3:
         fc:fb:38:c6:f8:b0:cb:e9:be:ba:a7:fe:9c:4a:2b:fa:48:d5:
         62:d7:2a:f1:9d:6f:cb:fb:88:3e:2b:8f:b3:a2:90:05:c0:c7:
         ae:4e:e0:06:d2:30:c1:ac:04:0d:84:cc:b5:ff:52:e4:29:2c:
         8c:f1:4b:a2:03:60:47:f9:7f:c0:ef:ab:d7:d1:b1:b6:dd:99:
         9a:31:dd:ea:1e:53:56:20:e1:63:7f:66:d2:4c:05:bf:a9:2b:
         90:f1:b2:aa:ab:4f:3e:80:9d:07:d4:35:8a:3e:cd:d3:f2:dd:
         13:3e:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:06:25 2025 by rpki-client