This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer File: KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer (raw, json) Hash identifier: VQWRt+Vuj3BuLncqxoARTnqdtmkZwYdP77kIAz8kuHY= Subject key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5F0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Dec 2025 01:39:18 +0000 Certificate not after: Tue 15 Dec 2026 01:30:02 +0000 Subordinate resources: IP: 27.112.124.0/22 IP: 49.239.64.0/18 IP: 58.138.0.0 -- 58.138.191.255 IP: 61.211.96.0/19 IP: 101.128.128.0/17 IP: 103.2.57.0 -- 103.2.59.255 IP: 113.197.128.0/17 IP: 116.118.192.0/20 IP: 118.151.0.0 -- 118.151.191.255 IP: 119.10.192.0/18 IP: 121.102.0.0/16 IP: 121.200.200.0/21 IP: 124.41.0.0 -- 124.41.191.255 IP: 124.147.64.0/18 IP: 125.30.0.0/16 IP: 133.110.0.0/16 IP: 133.137.0.0/16 IP: 133.142.0.0/16 IP: 133.159.0.0/16 IP: 133.218.0.0/16 IP: 133.236.0.0/16 IP: 133.238.8.0 -- 133.238.255.255 IP: 150.31.0.0/16 IP: 163.49.0.0/16 IP: 163.131.0.0/16 IP: 163.140.0.0/16 IP: 163.218.0.0/16 IP: 202.16.104.0/21 IP: 202.32.0.0/16 IP: 202.48.108.0/23 IP: 202.141.192.0/20 IP: 202.214.0.0/16 IP: 202.221.0.0/16 IP: 202.224.128.0/18 IP: 202.232.0.0/16 IP: 202.238.128.0/17 IP: 202.245.133.0/24 IP: 202.247.136.0/21 IP: 202.247.160.0/19 IP: 202.253.115.0/24 IP: 203.180.0.0/16 IP: 210.128.0.0/16 IP: 210.130.0.0/16 IP: 210.133.192.0/18 IP: 210.138.0.0/16 IP: 210.142.128.0/19 IP: 210.148.0.0/15 IP: 210.173.0.0/19 IP: 211.14.32.0/19 IP: 218.42.160.0/19 IP: 218.228.96.0/19 IP: 219.105.0.0/19 IP: 219.111.0.0/17 IP: 219.119.0.0/16 IP: 219.121.160.0/19 IP: 219.126.128.0/17 IP: 220.100.0.0/16 IP: 220.156.0.0 -- 220.156.159.255 IP: 220.208.192.0/19 IP: 220.210.128.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 01:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24334 (0x5f0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Dec 15 01:39:18 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:87:9f:aa:a3:5a:09:42:a3:66:6a:a3:4d: 40:96:73:80:f2:96:56:78:fc:9f:31:04:7a:71:66: f3:71:2e:24:a5:f0:35:60:a6:75:f2:e5:5f:73:ba: 88:97:fb:d1:d1:fa:c5:b9:18:cf:2d:68:51:7d:72: a5:f4:42:11:fe:58:96:54:28:d6:a6:c1:49:2b:28: 05:8d:ff:47:d8:40:da:b2:84:2d:5e:02:bb:40:ab: 8a:35:c1:32:86:21:c2:94:11:53:75:8d:9e:df:ea: 6a:ab:80:3c:4f:a2:39:e1:25:73:1b:9d:20:5a:82: bf:1e:0d:ed:0c:7a:88:c4:b0:fc:bd:1f:80:4a:a0: e4:2f:a2:fe:60:84:f2:b9:94:b8:8e:e5:b9:70:0c: ec:7e:41:64:2f:e8:6a:93:ec:ae:37:3f:58:19:5e: 48:a4:b5:95:9b:a8:e9:32:91:70:e7:60:61:32:c7: d2:6e:62:60:11:5e:54:6d:3d:ce:5b:7d:f1:d1:05: 61:e2:80:8d:e3:eb:5d:c4:b2:76:e8:e7:fd:20:e0: 15:fa:6c:9d:ae:06:3f:32:83:fc:c0:ce:24:32:e1: 8e:9f:97:d7:a9:ee:b5:83:d6:ad:5b:1a:eb:30:ec: 07:12:9f:81:ec:16:fb:cc:a0:5d:67:ce:cc:9a:9a: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.112.124.0/22 49.239.64.0/18 58.138.0.0-58.138.191.255 61.211.96.0/19 101.128.128.0/17 103.2.57.0-103.2.59.255 113.197.128.0/17 116.118.192.0/20 118.151.0.0-118.151.191.255 119.10.192.0/18 121.102.0.0/16 121.200.200.0/21 124.41.0.0-124.41.191.255 124.147.64.0/18 125.30.0.0/16 133.110.0.0/16 133.137.0.0/16 133.142.0.0/16 133.159.0.0/16 133.218.0.0/16 133.236.0.0/16 133.238.8.0-133.238.255.255 150.31.0.0/16 163.49.0.0/16 163.131.0.0/16 163.140.0.0/16 163.218.0.0/16 202.16.104.0/21 202.32.0.0/16 202.48.108.0/23 202.141.192.0/20 202.214.0.0/16 202.221.0.0/16 202.224.128.0/18 202.232.0.0/16 202.238.128.0/17 202.245.133.0/24 202.247.136.0/21 202.247.160.0/19 202.253.115.0/24 203.180.0.0/16 210.128.0.0/16 210.130.0.0/16 210.133.192.0/18 210.138.0.0/16 210.142.128.0/19 210.148.0.0/15 210.173.0.0/19 211.14.32.0/19 218.42.160.0/19 218.228.96.0/19 219.105.0.0/19 219.111.0.0/17 219.119.0.0/16 219.121.160.0/19 219.126.128.0/17 220.100.0.0/16 220.156.0.0-220.156.159.255 220.208.192.0/19 220.210.128.0/18 Signature Algorithm: sha256WithRSAEncryption 5c:f7:de:71:7c:c9:00:3f:56:48:04:ed:56:94:5c:8e:25:16: 61:27:b7:7d:05:5b:d8:18:ae:5b:83:d6:ba:52:f4:ed:86:92: b7:10:48:19:71:ca:bf:22:47:97:d9:2e:81:bc:6a:78:9e:a3: 66:a7:93:91:10:ac:87:0d:c4:8a:bd:4e:14:cc:72:e9:c5:e4: 19:33:be:1f:d1:cb:19:75:3f:60:8b:a0:c5:bb:8c:29:47:60: f5:ad:97:50:da:3c:e9:f0:fe:c2:09:83:18:6b:7c:4e:4b:06: 77:7e:c9:2b:d9:d4:4b:46:b1:42:10:3d:87:8b:b8:14:ed:46: 1b:9d:77:3a:97:ac:31:99:34:04:45:75:c0:29:a5:d7:a4:2b: cb:e5:f9:8c:39:06:9e:c1:85:51:f1:3c:ab:fe:bb:f6:c6:fc: 55:3f:0e:7c:b7:9c:b1:c4:71:33:e6:67:d9:34:c7:4d:76:ec: 14:64:bc:64:41:dc:0f:0b:77:8c:bd:ae:d8:74:4a:29:e1:dd: 91:da:95:e8:c2:58:d5:a2:ca:ac:a8:91:1f:5a:2f:ec:08:9e: 77:40:67:82:5e:5c:86:2b:e5:14:78:e3:60:83:cf:7c:46:4a: b5:ca:92:e8:77:53:43:64:f0:c4:9d:10:cd:99:53:48:fb:77: b2:7a:d7:41 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgICXw4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzkxOFoXDTI2MTIxNTAxMzAwMlowMzEx MC8GA1UEAxMoMjk4M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJG OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKzXh5+qo1oJQqNmaqNN QJZzgPKWVnj8nzEEenFm83EuJKXwNWCmdfLlX3O6iJf70dH6xbkYzy1oUX1ypfRC Ef5YllQo1qbBSSsoBY3/R9hA2rKELV4Cu0CrijXBMoYhwpQRU3WNnt/qaquAPE+i OeElcxudIFqCvx4N7Qx6iMSw/L0fgEqg5C+i/mCE8rmUuI7luXAM7H5BZC/oapPs rjc/WBleSKS1lZuo6TKRcOdgYTLH0m5iYBFeVG09zlt98dEFYeKAjePrXcSydujn /SDgFfpsna4GPzKD/MDOJDLhjp+X16nutYPWrVsa6zDsBxKfgewW+8ygXWfOzJqa UkECAwEAAaOCBAEwggP9MB0GA1UdDgQWBBQpg8/V+Mr6AGjS66Je0PcBJEsS+TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH7BggrBgEFBQcBCwSB7jCB 6zBABggrBgEFBQcwBYY0cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC82LzBfBggrBgEFBQcwCoZTcnN5bmM6Ly9ycGtpLXJl cG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC82L0tZUFAxZmpLLWdC bzB1dWlYdEQzQVNSTEV2ay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwggGc BggrBgEFBQcBBwEB/wSCAYswggGHMIIBgwQCAAEwggF7AwQCG3B8AwQGMe9AMAsD AwE6igMEBjqKgAMEBT3TYAMEB2WAgDAMAwQAZwI5AwQCZwI4AwQHccWAAwQEdHbA MAsDAwB2lwMEBnaXgAMEBncKwAMDAHlmAwQDecjIMAsDAwB8KQMEBnwpgAMEBnyT QAMDAH0eAwMAhW4DAwCFiQMDAIWOAwMAhZ8DAwCF2gMDAIXsMAsDBAOF7ggDAwCF 7gMDAJYfAwMAozEDAwCjgwMDAKOMAwMAo9oDBAPKEGgDAwDKIAMEAcowbAMEBMqN wAMDAMrWAwMAyt0DBAbK4IADAwDK6AMEB8rugAMEAMr1hQMEA8r3iAMEBcr3oAME AMr9cwMDAMu0AwMA0oADAwDSggMEBtKFwAMDANKKAwQF0o6AAwMB0pQDBAXSrQAD BAXTDiADBAXaKqADBAXa5GADBAXbaQADBAfbbwADAwDbdwMEBdt5oAMEB9t+gAMD ANxkMAsDAwLcnAMEBdycgAMEBdzQwAMEBtzSgDANBgkqhkiG9w0BAQsFAAOCAQEA XPfecXzJAD9WSATtVpRcjiUWYSe3fQVb2BiuW4PWulL07YaStxBIGXHKvyJHl9ku gbxqeJ6jZqeTkRCshw3Eir1OFMxy6cXkGTO+H9HLGXU/YIugxbuMKUdg9a2XUNo8 6fD+wgmDGGt8TksGd37JK9nUS0axQhA9h4u4FO1GG513OpesMZk0BEV1wCml16Qr y+X5jDkGnsGFUfE8q/679sb8VT8OfLecscRxM+Zn2TTHTXbsFGS8ZEHcDwt3jL2u 2HRKKeHdkdqV6MJY1aLKrKiRH1ov7Aied0Bngl5chivlFHjjYIPPfEZKtcqS6HdT Q2TwxJ0QzZlTSPt3snrXQQ== -----END CERTIFICATE-----Generated at Tue Dec 16 03:41:58 2025 by rpki-client