This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/EAxCBmyIKZtIqWr91LWva1mdsfo.cer
File:                     EAxCBmyIKZtIqWr91LWva1mdsfo.cer (raw, json)
Hash identifier:          +9ZtCUrq8uJShisZrUS2JzehAzOhq7U8p85C6EDv/H0=
Subject key identifier:   10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5D2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/EAxCBmyIKZtIqWr91LWva1mdsfo.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:40:30 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 2400:8320::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23853 (0x5d2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:40:30 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=100C42066C88299B48A96AFDD4B5AF6B599DB1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:e8:d7:3e:65:a4:57:59:1b:e8:f1:1e:1f:
                    07:60:23:8e:6c:95:06:fc:3b:6d:51:17:5b:ec:9d:
                    a7:78:70:8a:3b:ea:86:f5:dc:ab:97:58:db:a7:d5:
                    b5:77:ce:29:e5:7f:ba:ed:75:0a:c1:f9:4f:fb:41:
                    15:8c:6e:1b:d1:7d:33:69:81:5a:af:9d:55:3f:5d:
                    e7:fc:59:a7:4c:81:1e:40:fa:ce:75:c0:4f:06:4e:
                    ce:52:46:85:0c:dd:a5:6b:2f:77:92:02:4d:fd:13:
                    08:1b:9e:6e:3e:f5:61:6c:b7:5d:aa:c4:97:2e:3e:
                    41:7c:16:d7:30:0a:54:0f:53:da:1f:85:03:27:72:
                    ae:c6:86:43:c5:9c:97:b1:1a:ba:b5:32:08:fb:7c:
                    49:56:6b:24:52:92:61:66:93:b2:3d:36:c1:26:99:
                    0e:01:a5:bc:3b:49:e2:67:5c:ff:a8:fa:76:5f:1f:
                    ed:05:de:f1:92:ee:ce:ad:91:ac:5d:dc:04:df:23:
                    fe:39:41:f8:bc:42:8e:1b:35:aa:a6:fa:5d:e7:8e:
                    8b:a9:6d:a7:69:76:a9:f3:9a:91:e4:41:a7:dc:c3:
                    56:48:da:ee:01:67:f6:07:df:94:3a:ac:69:61:e4:
                    8d:aa:33:62:4c:28:65:98:3d:98:3d:e8:ab:0c:a9:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/EAxCBmyIKZtIqWr91LWva1mdsfo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8320::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:61:e9:ca:f9:13:66:b6:db:44:40:88:fc:cc:05:6f:42:
         b9:1c:26:8e:86:c3:c8:f7:73:22:2e:d9:86:87:90:b3:a7:eb:
         58:68:9f:57:82:d9:29:cc:2f:f5:88:69:08:37:77:14:7a:b5:
         a9:9f:af:8d:b1:e7:ef:fa:66:cc:dc:b6:16:b4:4b:45:c9:b5:
         bf:87:9c:5f:c1:01:23:33:c2:26:e4:f7:90:06:e2:2a:e6:da:
         80:84:92:78:75:ff:00:ec:b1:14:7e:0f:27:10:67:2a:d1:3e:
         db:19:3c:ba:0e:e0:6b:b3:20:1f:5f:7d:ff:a7:ac:48:75:0d:
         c7:31:82:21:f1:ff:87:1a:23:b8:de:11:f7:18:67:2c:5d:12:
         1f:a3:71:b0:bd:31:ab:e9:c1:99:33:b2:7b:6e:da:dc:28:29:
         72:a9:a5:fe:43:8a:0a:7f:2e:be:b0:3c:a4:ee:d1:89:99:ce:
         49:4b:54:74:7b:ed:cf:f4:ae:01:3d:32:0e:f0:d6:8f:ed:06:
         f8:d9:98:7c:a7:e2:80:ca:01:9e:79:de:c2:3d:00:9c:7b:57:
         6b:71:2d:0b:45:62:6b:51:9f:80:bd:36:a3:56:20:2f:89:ba:
         b7:09:11:af:66:55:c0:0f:8f:54:d2:30:ec:4b:5f:ab:7d:17:
         e6:62:85:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----