This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer File: M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer (raw, json) Hash identifier: 5DleqB0DbQf0E+3Z0x6lgK1yCtxFwwknCjahwARNz1w= Subject key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:44:38 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 103.142.12.0/23 IP: 133.247.112.0/20 IP: 202.233.68.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23998 (0x5dbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:44:38 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=33D2C2C8816F30E6B58262B93C717C85513505C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:1d:34:ac:99:fa:0f:7c:f4:c0:39:e0:e8: 95:e8:08:f1:95:37:a9:57:1a:81:c1:53:36:b7:0d: 69:47:7b:cf:59:6c:a0:60:40:84:e0:57:53:a3:bd: 4a:48:eb:12:fc:21:bc:ee:64:de:77:16:ce:1a:96: 69:dd:6c:06:9f:92:40:78:2f:c7:1b:4d:40:f9:a2: 2c:97:a9:4d:a2:b8:57:af:e4:a7:e4:ee:8a:f8:ee: 92:cc:fd:1b:43:65:85:66:b9:d8:70:75:5d:f6:11: ed:b6:ae:ee:de:54:0f:b0:a5:1e:ce:b2:20:17:f9: 13:b8:89:a9:09:d0:f8:40:a7:cb:85:e5:81:17:02: c1:34:99:dd:b2:da:d3:08:89:22:2d:78:b9:8e:2d: c9:03:1f:7b:21:ef:ef:18:bb:fc:13:74:3c:83:32: eb:32:4b:32:9c:c2:de:17:6e:cd:5f:0e:a1:6d:ae: 40:82:46:76:45:38:e0:b3:2b:9f:a7:4e:cd:fe:f3: a3:72:83:0c:f0:55:6c:f0:02:f2:d6:0f:3f:94:00: 99:48:b0:1e:62:0d:78:30:e3:c5:25:22:2b:2e:47: f7:8a:7c:64:03:47:b5:45:d7:0e:76:02:21:fd:da: f3:f0:e4:b5:d1:0a:3f:12:ed:34:a4:e7:fa:25:0a: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.12.0/23 133.247.112.0/20 202.233.68.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:40:e9:7e:13:b9:80:40:36:54:e3:77:f1:72:cf:8b:b7:14: 8f:5b:2b:ae:8a:f7:d4:52:34:9c:1d:d2:d9:57:7f:5a:16:02: da:cb:4d:b8:c8:67:69:40:bf:c5:da:0c:db:97:a9:eb:75:52: 2b:b8:03:d1:1b:a3:af:56:f6:11:17:4b:5d:52:73:fe:1f:d3: da:7d:58:0c:8b:9a:49:f3:f4:46:c6:14:9f:f5:f7:d6:e1:b3: 9a:e9:c9:7c:99:f9:bd:3d:d1:91:23:65:a2:93:b4:3c:92:be: b9:46:fb:2e:ec:0f:e2:bd:1a:c1:36:f1:9f:1e:e4:17:df:a7: 98:bc:0d:bd:72:2a:43:bb:2a:2c:ce:8c:e3:97:a9:26:cc:69: c0:9d:9d:75:8f:80:8d:9e:d8:0b:be:c2:d1:a5:80:93:51:1c: 96:ef:ba:e6:c7:29:60:1c:ee:5f:cf:ad:aa:35:6a:57:68:17: fa:3d:bd:66:45:d0:6a:a9:eb:b9:51:0d:1d:6f:33:97:09:96: 61:14:0c:23:68:4c:b7:95:bd:93:4f:55:98:93:3c:71:93:c0: e7:38:34:2d:c0:62:91:89:15:9d:b1:66:2c:37:b3:a6:ca:c9: 0d:53:7f:07:2b:58:45:3e:ca:a6:b4:80:cf:ba:d1:30:da:36: d4:4c:d7:2c -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICXb4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxNDQzOFoXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoMzNEMkMyQzg4MTZGMzBFNkI1ODI2MkI5M0M3MTdDODU1MTM1MDVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeZHTSsmfoPfPTAOeDo legI8ZU3qVcagcFTNrcNaUd7z1lsoGBAhOBXU6O9SkjrEvwhvO5k3ncWzhqWad1s Bp+SQHgvxxtNQPmiLJepTaK4V6/kp+Tuivjuksz9G0NlhWa52HB1XfYR7bau7t5U D7ClHs6yIBf5E7iJqQnQ+ECny4XlgRcCwTSZ3bLa0wiJIi14uY4tyQMfeyHv7xi7 /BN0PIMy6zJLMpzC3hduzV8OoW2uQIJGdkU44LMrn6dOzf7zo3KDDPBVbPAC8tYP P5QAmUiwHmINeDDjxSUiKy5H94p8ZANHtUXXDnYCIf3a8/DktdEKPxLtNKTn+iUK rr0CAwEAAaOCApcwggKTMB0GA1UdDgQWBBQz0sLIgW8w5rWCYrk8cXyFUTUFxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTAyL005 TEN5SUZ2TU9hMWdtSzVQSEY4aFZFMUJjVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFnjgwDBASF93ADBALK 6UQwDQYJKoZIhvcNAQELBQADggEBAE5A6X4TuYBANlTjd/Fyz4u3FI9bK66K99RS NJwd0tlXf1oWAtrLTbjIZ2lAv8XaDNuXqet1Uiu4A9Ebo69W9hEXS11Sc/4f09p9 WAyLmknz9EbGFJ/199bhs5rpyXyZ+b090ZEjZaKTtDySvrlG+y7sD+K9GsE28Z8e 5Bffp5i8Db1yKkO7KizOjOOXqSbMacCdnXWPgI2e2Au+wtGlgJNRHJbvuubHKWAc 7l/Prao1aldoF/o9vWZF0Gqp67lRDR1vM5cJlmEUDCNoTLeVvZNPVZiTPHGTwOc4 NC3AYpGJFZ2xZiw3s6bKyQ1TfwcrWEU+yqa0gM+60TDaNtRM1yw= -----END CERTIFICATE-----Generated at Sat Nov 22 21:05:09 2025 by rpki-client