This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
File:                     CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer (raw, json)
Hash identifier:          PWpsShd7yZXDn1/Z9YasH9hHn7Z7IKSAqgjNWRiuoCE=
Subject key identifier:   09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5D08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:39:17 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 36.2.0.0/19
                          IP: 36.2.160.0 -- 36.2.223.255
                          IP: 39.110.0.0/15
                          IP: 58.87.128.0/17
                          IP: 59.146.0.0/15
                          IP: 61.120.160.0/19
                          IP: 61.211.0.0/18
                          IP: 103.2.48.0/22
                          IP: 103.241.124.0/22
                          IP: 110.66.0.0/15
                          IP: 110.232.152.0/21
                          IP: 111.216.0.0/15
                          IP: 115.162.0.0/15
                          IP: 116.67.128.0/17
                          IP: 116.82.0.0/16
                          IP: 116.91.32.0/19
                          IP: 116.91.160.0/19
                          IP: 118.236.0.0 -- 118.238.127.255
                          IP: 118.238.192.0/18
                          IP: 118.240.0.0/15
                          IP: 120.74.0.0/15
                          IP: 121.2.0.0/15
                          IP: 121.101.64.0/18
                          IP: 121.103.0.0/16
                          IP: 122.223.224.0/19
                          IP: 123.198.0.0/16
                          IP: 124.219.128.0/17
                          IP: 126.209.128.0/18
                          IP: 133.114.0.0/16
                          IP: 133.165.128.0/18
                          IP: 150.147.0.0/16
                          IP: 150.246.0.0/16
                          IP: 150.249.0.0/16
                          IP: 182.168.0.0/14
                          IP: 198.144.160.0/20
                          IP: 202.213.192.0/18
                          IP: 202.223.64.0/18
                          IP: 202.226.20.0/22
                          IP: 202.238.64.0/18
                          IP: 210.132.128.0/17
                          IP: 210.139.128.0/17
                          IP: 210.156.160.0/20
                          IP: 210.174.0.0/18
                          IP: 210.250.64.0/18
                          IP: 211.2.0.0/18
                          IP: 211.10.32.0/19
                          IP: 211.128.32.0/19
                          IP: 218.41.0.0/16
                          IP: 218.110.0.0/16
                          IP: 218.221.0.0/16
                          IP: 219.98.0.0/16
                          IP: 219.104.0.0/16
                          IP: 219.111.128.0/18
                          IP: 220.211.0.0/16
                          IP: 223.132.0.0/14
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23816 (0x5d08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:39:17 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:e2:28:60:11:7b:3e:9a:45:f4:a5:2b:7a:
                    71:95:9b:ce:0f:67:39:ca:83:42:8e:bf:0e:d7:65:
                    82:b0:77:11:6f:72:b1:44:dd:9a:0b:69:a2:7d:ee:
                    39:38:1a:1e:0e:ee:30:f3:7b:82:fc:ca:01:61:d4:
                    3f:1e:5e:42:e2:cc:fc:d0:12:2f:b0:79:3e:66:1e:
                    4c:fc:71:9b:f8:1b:47:5f:f4:e0:33:ba:dc:09:ce:
                    37:c9:bd:6e:ab:bd:93:1a:cc:d8:c0:fa:2e:3b:43:
                    d1:30:c8:29:a3:c4:ec:70:27:39:75:62:08:6a:bb:
                    7b:a7:2c:64:4f:15:43:bd:be:84:d3:d1:ce:26:f5:
                    9c:58:13:38:74:26:e1:22:83:df:c7:8c:18:cb:7a:
                    a8:e7:3e:6d:20:b8:36:2d:91:3d:75:d3:50:a5:cc:
                    ca:56:ca:d8:b4:0d:d5:88:22:94:84:ec:c9:d2:ef:
                    e7:ca:c2:7b:df:fb:74:cc:42:5a:f6:9b:a9:5f:6b:
                    21:2f:67:90:97:c6:df:97:8c:9f:50:c3:e0:40:88:
                    a6:97:a1:9d:53:8a:0b:f0:78:77:20:1e:c2:62:55:
                    14:3d:83:21:f1:eb:97:95:59:6d:c4:13:e1:32:2b:
                    5e:26:c2:90:2f:03:6d:cf:94:75:28:d9:ea:14:43:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.2.0.0/19
                  36.2.160.0-36.2.223.255
                  39.110.0.0/15
                  58.87.128.0/17
                  59.146.0.0/15
                  61.120.160.0/19
                  61.211.0.0/18
                  103.2.48.0/22
                  103.241.124.0/22
                  110.66.0.0/15
                  110.232.152.0/21
                  111.216.0.0/15
                  115.162.0.0/15
                  116.67.128.0/17
                  116.82.0.0/16
                  116.91.32.0/19
                  116.91.160.0/19
                  118.236.0.0-118.238.127.255
                  118.238.192.0/18
                  118.240.0.0/15
                  120.74.0.0/15
                  121.2.0.0/15
                  121.101.64.0/18
                  121.103.0.0/16
                  122.223.224.0/19
                  123.198.0.0/16
                  124.219.128.0/17
                  126.209.128.0/18
                  133.114.0.0/16
                  133.165.128.0/18
                  150.147.0.0/16
                  150.246.0.0/16
                  150.249.0.0/16
                  182.168.0.0/14
                  198.144.160.0/20
                  202.213.192.0/18
                  202.223.64.0/18
                  202.226.20.0/22
                  202.238.64.0/18
                  210.132.128.0/17
                  210.139.128.0/17
                  210.156.160.0/20
                  210.174.0.0/18
                  210.250.64.0/18
                  211.2.0.0/18
                  211.10.32.0/19
                  211.128.32.0/19
                  218.41.0.0/16
                  218.110.0.0/16
                  218.221.0.0/16
                  219.98.0.0/16
                  219.104.0.0/16
                  219.111.128.0/18
                  220.211.0.0/16
                  223.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:ca:7c:4b:c1:85:c7:d6:e8:da:ed:c5:ab:54:11:a0:32:
         62:66:ec:8f:0a:53:80:7a:71:b2:c4:55:04:52:2c:da:16:4f:
         b9:66:77:62:cd:d8:2e:16:c6:c5:19:41:cb:9b:d7:19:8d:69:
         e4:e4:92:92:a7:21:6e:8c:d9:1f:7e:d3:85:f4:3b:31:fc:35:
         d6:e6:a9:09:69:8c:c9:ad:d4:dc:b0:ea:94:95:9d:98:f7:7d:
         55:f1:72:f5:01:71:fb:06:97:ce:c8:b9:60:ad:da:d5:5d:9e:
         20:ac:55:e9:12:16:f8:0f:49:38:b1:52:d6:aa:72:17:69:02:
         b3:a0:66:14:97:64:4e:41:5a:36:70:a8:df:32:75:a7:a8:bc:
         eb:0e:92:29:84:ca:35:20:0b:72:8b:92:19:da:f8:db:8b:45:
         1a:21:8c:d9:8b:9b:f7:26:7b:10:c7:ba:cf:22:b6:df:7e:e8:
         a2:d3:2f:61:46:ca:0a:0a:f0:b0:c5:83:75:ea:3f:b3:70:f8:
         d5:85:1b:9c:a6:b1:5b:5d:42:9a:7b:c0:b1:4c:d4:6d:44:e5:
         3a:81:b5:0a:c9:19:b6:10:bc:0f:7c:44:c3:06:3b:f9:c7:b6:
         57:53:18:be:65:04:65:c1:46:41:be:58:4a:8c:e6:a3:5f:ed:
         cb:6e:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:05:30 2025 by rpki-client