This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9hM65Yv3N_GdHXkc-luOk9VsfDk.cer File: 9hM65Yv3N_GdHXkc-luOk9VsfDk.cer (raw, json) Hash identifier: nIkUgjxuYT3LNBeJHA9k1HEqKdKeggqZ2NKumXbXoF4= Subject key identifier: F6:13:3A:E5:8B:F7:37:F1:9D:1D:79:1C:FA:5B:8E:93:D5:6C:7C:39 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5E27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/9hM65Yv3N_GdHXkc-luOk9VsfDk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:32:20 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 2401:a240::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24103 (0x5e27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:32:20 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=F6133AE58BF737F19D1D791CFA5B8E93D56C7C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:dd:0e:c9:0a:f3:16:29:a2:65:91:03:11: c2:e6:eb:6c:6d:2b:1b:9b:90:75:5e:17:a2:77:e2: 20:e1:c7:fe:7d:7e:96:33:f1:1a:7a:f0:ac:da:b3: b5:d2:04:6c:0d:3f:67:d6:b8:e9:75:07:da:38:c5: 29:1b:16:92:ea:4c:f8:83:50:2f:eb:5b:df:96:02: 9e:09:8a:15:19:2a:b8:49:ea:94:ee:b9:7f:c7:8b: e5:52:c0:1e:15:19:82:a7:8d:98:6b:63:32:68:4f: 5a:36:1a:94:16:7d:67:34:90:25:15:91:6b:38:8c: 61:16:a1:8d:44:68:c3:1d:18:ef:ed:fb:25:fb:ed: 9a:99:fb:f3:f9:c4:72:36:fd:4d:58:34:4c:7c:4a: 72:f0:9b:e3:6b:de:7f:5a:e7:f5:3a:b6:71:c9:cb: ac:0d:26:d8:2d:34:6b:8c:07:31:a3:c2:3d:09:05: 4b:0b:52:8d:0a:a8:bc:4d:30:93:d9:ed:bc:41:3e: 6c:f0:1f:c9:6c:dd:3e:0c:fa:7b:0c:d0:42:b4:d1: e2:01:08:31:c8:8c:68:06:03:99:74:bc:e8:4a:2f: e8:12:eb:56:62:68:9f:6f:78:51:f5:c4:df:56:b8: d2:ed:c8:ae:fa:b5:18:b4:8f:59:8a:62:33:da:2b: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:13:3A:E5:8B:F7:37:F1:9D:1D:79:1C:FA:5B:8E:93:D5:6C:7C:39 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30309/9hM65Yv3N_GdHXkc-luOk9VsfDk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:a240::/32 Signature Algorithm: sha256WithRSAEncryption 60:36:7d:b9:f2:fa:6f:1c:aa:37:51:e4:56:0f:89:06:46:5a: 60:28:44:30:4f:5c:23:e6:94:bd:dd:19:83:86:09:46:37:84: 43:e8:5f:3e:94:e7:43:23:eb:66:cc:7a:79:56:97:c9:73:30: 8c:ff:e9:3e:60:3a:1b:71:89:bb:2e:f2:76:1c:42:54:41:35: 12:53:96:08:2c:d5:1c:bf:c8:a1:3a:d8:af:3b:61:e6:43:6f: 10:0d:15:b9:a1:0c:d0:70:d8:59:02:84:24:b7:a9:15:63:e6: 21:8a:bb:db:57:a6:af:7a:e9:18:ee:bd:06:a9:24:7f:4d:e2: 1f:6b:d7:40:e0:cd:17:1e:9a:0c:5a:6c:e9:ae:9d:32:f3:12: cd:b5:0b:63:94:75:4d:9f:59:56:fa:40:f1:be:9e:30:15:75: 81:d5:a7:89:8b:d7:4d:cc:51:ee:27:de:bc:b8:3c:27:83:38: 69:bd:c5:73:a1:b1:6b:ef:82:d7:ff:0b:d2:f1:d5:b2:51:1d: 5c:92:c8:a7:2e:c2:40:54:dd:85:9e:24:a0:a2:d4:11:69:5c: 08:e4:fc:84:0b:5b:2a:30:51:42:94:01:5c:16:d8:30:2f:5c: cd:9e:b4:9a:f3:6c:38:a6:b2:f6:f3:87:71:3c:c3:08:9e:cd: 00:b0:37:c5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICXicwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzIyMFoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoRjYxMzNBRTU4QkY3MzdGMTlEMUQ3OTFDRkE1QjhFOTNENTZDN0Mz OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRf3Q7JCvMWKaJlkQMR wubrbG0rG5uQdV4XonfiIOHH/n1+ljPxGnrwrNqztdIEbA0/Z9a46XUH2jjFKRsW kupM+INQL+tb35YCngmKFRkquEnqlO65f8eL5VLAHhUZgqeNmGtjMmhPWjYalBZ9 ZzSQJRWRaziMYRahjURowx0Y7+37Jfvtmpn78/nEcjb9TVg0THxKcvCb42vef1rn 9Tq2ccnLrA0m2C00a4wHMaPCPQkFSwtSjQqovE0wk9ntvEE+bPAfyWzdPgz6ewzQ QrTR4gEIMciMaAYDmXS86Eov6BLrVmJon294UfXE31a40u3Irvq1GLSPWYpiM9or JY0CAwEAAaOCAowwggKIMB0GA1UdDgQWBBT2Ezrli/c38Z0deRz6W46T1Wx8OTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMDkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzA5Lzlo TTY1WXYzTl9HZEhYa2MtbHVPazlWc2ZEay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAaJAMA0GCSqGSIb3 DQEBCwUAA4IBAQBgNn258vpvHKo3UeRWD4kGRlpgKEQwT1wj5pS93RmDhglGN4RD 6F8+lOdDI+tmzHp5VpfJczCM/+k+YDobcYm7LvJ2HEJUQTUSU5YILNUcv8ihOtiv O2HmQ28QDRW5oQzQcNhZAoQkt6kVY+YhirvbV6aveukY7r0GqSR/TeIfa9dA4M0X HpoMWmzprp0y8xLNtQtjlHVNn1lW+kDxvp4wFXWB1aeJi9dNzFHuJ968uDwngzhp vcVzobFr74LX/wvS8dWyUR1cksinLsJAVN2FniSgotQRaVwI5PyEC1sqMFFClAFc FtgwL1zNnrSa82w4prL284dxPMMIns0AsDfF -----END CERTIFICATE-----Generated at Thu Jan 8 09:16:37 2026 by rpki-client