This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
File:                     BQQBx4i1abPUQAQXMOKKmR9AGNI.cer (raw, json)
Hash identifier:          uHIAlTW1xs0pbKjtsZZM8RepBtEzMV2fob3nHpr/sVY=
Subject key identifier:   05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5CC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:36:54 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 103.211.72.0/22
                          IP: 124.240.224.0/19
                          IP: 180.94.240.0/20
                          IP: 202.163.160.0/19
                          IP: 202.226.104.0/23
                          IP: 202.238.0.0/20
                          IP: 210.79.192.0/20
                          IP: 220.208.128.0/18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23747 (0x5cc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:36:54 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=050401C788B569B3D440041730E28A991F4018D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:51:d2:86:3a:b3:a0:ae:d6:5b:31:a2:fd:
                    0b:c8:25:4e:5c:73:1c:e3:ce:17:1e:aa:11:33:54:
                    dc:02:47:99:e0:73:d9:69:9c:d3:06:73:47:c4:40:
                    12:94:b7:1f:21:66:92:1d:e4:dc:fc:37:c2:aa:d8:
                    11:09:fd:71:4d:b2:22:b9:08:a7:77:a9:6e:70:37:
                    eb:3d:94:83:39:09:06:75:13:1c:0c:76:31:c6:71:
                    9e:ea:28:0a:a0:29:86:8c:eb:cc:9b:85:dc:90:d6:
                    39:9c:33:0c:bd:95:de:d4:7d:ff:f8:a6:e8:56:51:
                    7a:7e:94:d9:95:9d:85:c7:f1:0c:10:e7:20:46:34:
                    8b:ff:20:ee:5d:20:88:e6:55:25:48:97:af:95:ef:
                    a2:5b:3a:6d:1b:e4:6f:c2:38:83:cf:d1:47:4a:5f:
                    cc:09:c5:37:9a:de:fd:5e:0b:45:c9:81:31:44:a7:
                    3b:86:e7:bf:ae:6b:d6:c8:d1:08:c3:30:c4:03:c0:
                    5e:8e:c5:ee:fa:a7:08:8a:f2:a2:04:23:e5:d6:04:
                    23:78:2c:fb:8e:e9:2f:d3:48:10:f1:e7:dd:ab:32:
                    57:82:dd:6c:68:11:a7:0f:fe:b3:2d:e5:06:c8:35:
                    24:66:49:c0:fa:19:39:0c:ac:62:d3:82:bf:30:94:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.72.0/22
                  124.240.224.0/19
                  180.94.240.0/20
                  202.163.160.0/19
                  202.226.104.0/23
                  202.238.0.0/20
                  210.79.192.0/20
                  220.208.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:df:11:94:b8:6b:83:f8:c9:5b:c5:b4:77:88:51:f2:43:
         e4:38:9d:2a:bc:be:e9:28:dd:d7:4d:c0:3b:b4:23:20:f3:d3:
         83:9e:79:da:93:1a:24:05:62:e1:d8:5c:7a:6c:19:9a:36:62:
         08:d8:b4:fd:71:ed:da:68:23:ea:69:e3:df:70:3f:0e:f6:50:
         e8:03:79:07:7e:ff:2e:15:52:7b:57:51:11:12:a0:4f:95:d2:
         7f:98:35:2e:8e:a6:8c:4b:8d:42:57:2f:a9:0c:fa:77:30:5d:
         30:51:5a:93:80:2a:4f:1b:e7:db:28:a8:88:6a:38:7f:80:a6:
         6a:e6:e1:46:ab:86:99:93:58:d6:c3:51:0b:73:dc:d9:d4:6f:
         24:5e:db:3d:b8:b9:80:3e:fa:aa:0b:cf:bc:0b:87:0a:c0:4e:
         46:19:c1:c8:6d:31:ac:86:1c:47:83:dc:97:be:f5:72:88:3a:
         76:0c:8e:eb:dc:b5:cc:12:48:4a:e5:a9:34:c8:12:e3:d9:a7:
         41:01:5a:30:c5:84:60:6d:8d:cd:fb:bc:32:1b:8c:ce:ea:1e:
         f8:8b:3f:0f:d5:2d:d2:e4:e6:31:16:a5:89:1d:25:4b:fb:74:
         2a:63:2c:71:c9:6b:6c:b7:71:51:59:9b:cf:60:b7:77:34:bc:
         7d:cc:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:06:19 2025 by rpki-client