This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer File: UA7zWLy-FKNYyk7uQbTpDckj6dI.cer (raw, json) Hash identifier: IF8D70NW/z2lLYoHZqKgp6sVTdM7HZ8w8t/QZBBbSWs= Subject key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:33:38 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 27.113.192.0/19 IP: 61.125.144.0/20 IP: 61.198.48.0/20 IP: 61.206.192.0/20 IP: 110.44.64.0/19 IP: 112.136.0.0/17 IP: 113.20.192.0/18 IP: 117.18.128.0/18 IP: 122.152.32.0/20 IP: 124.40.64.0 -- 124.40.111.255 IP: 124.110.160.0/19 IP: 150.91.128.0/20 IP: 182.22.128.0/17 IP: 202.59.176.0/20 IP: 202.60.160.0/19 IP: 202.91.208.0/20 IP: 202.137.32.0/19 IP: 203.133.128.0/19 IP: 210.236.160.0/19 IP: 218.45.144.0/20 IP: 218.216.160.0/20 IP: 218.228.0.0/20 IP: 219.103.64.0/20 IP: 219.109.240.0/20 IP: 219.113.112.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23631 (0x5c4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:33:38 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:17:f7:60:8a:56:91:49:e8:c1:b6:58:ad: 71:17:24:3d:d4:a3:54:4b:f2:be:95:db:a7:11:31: 74:25:56:d1:53:52:84:d8:f2:75:c2:e0:10:19:f4: 67:37:0c:98:69:a9:73:22:9b:d1:dd:8c:10:d0:80: fb:cd:7a:22:17:b3:bd:fb:b9:eb:fc:ff:c1:78:ec: cf:c8:ed:61:7f:75:18:a4:7b:3b:22:ed:f8:04:c6: 94:60:33:41:04:a0:a9:25:03:ec:24:49:f0:4c:e5: f8:83:37:b2:2b:ac:0a:c7:80:62:12:13:38:2d:2e: 59:90:69:56:42:db:44:04:1a:5c:43:2b:2d:d8:dc: 5e:bc:1d:85:2e:93:d3:3f:a9:21:d4:15:62:d1:33: 32:29:27:f3:d4:d4:d2:70:97:44:1b:c9:58:ea:7a: 2c:f7:f3:b3:4f:d2:3d:ff:05:eb:5d:a8:3f:3a:7b: da:4d:ae:a1:c9:d3:ad:a6:01:8d:9d:9c:ae:0f:e3: d1:41:cc:1a:d0:0f:b8:91:34:5e:0e:05:db:db:2a: b3:dc:6f:b2:cc:82:5f:9e:2f:e9:c1:bb:d4:d1:97: 1c:a7:6c:31:d4:66:64:eb:af:e8:38:a9:e4:c5:51: 97:1e:83:15:29:a4:59:15:15:4c:3d:c7:23:fe:4f: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.113.192.0/19 61.125.144.0/20 61.198.48.0/20 61.206.192.0/20 110.44.64.0/19 112.136.0.0/17 113.20.192.0/18 117.18.128.0/18 122.152.32.0/20 124.40.64.0-124.40.111.255 124.110.160.0/19 150.91.128.0/20 182.22.128.0/17 202.59.176.0/20 202.60.160.0/19 202.91.208.0/20 202.137.32.0/19 203.133.128.0/19 210.236.160.0/19 218.45.144.0/20 218.216.160.0/20 218.228.0.0/20 219.103.64.0/20 219.109.240.0/20 219.113.112.0/20 Signature Algorithm: sha256WithRSAEncryption 69:0f:d5:83:a3:9a:3b:b3:f1:ed:5c:2e:4b:7d:25:88:8d:de: 55:2f:76:cc:80:bf:32:32:dd:40:fd:5c:ed:4d:32:91:ce:36: 9c:1c:41:b3:b5:4a:a3:97:71:85:48:e5:0b:e8:a2:a7:ea:f3: 75:99:72:57:6b:b7:d0:61:fe:7d:3c:f2:13:51:1c:99:50:cc: 9d:36:f3:57:b7:74:9c:32:a8:e2:20:39:e8:ee:24:33:90:3c: 87:de:80:7b:e8:6f:10:4f:c0:b4:00:22:52:81:27:59:6a:9e: a0:87:7d:53:f9:41:a9:7c:87:06:01:a8:11:d8:f3:19:f6:c9: de:13:3b:19:e4:93:6f:50:af:88:f8:d7:70:18:37:1b:73:1e: ca:0b:cd:98:5e:1d:d6:e6:86:94:30:2c:be:8f:2f:8c:97:98: 8c:cc:7a:29:7c:95:f8:8c:a2:c7:62:8e:03:47:b1:14:c1:2c: 6d:6a:64:ee:14:1d:22:da:25:b6:03:ca:72:ad:f5:4a:56:31: 95:4c:2c:65:09:35:a0:a4:e5:df:f2:03:6f:b4:af:e9:9b:8c: 26:53:54:97:65:4d:c6:12:c4:96:ae:c2:d4:ea:5c:73:35:42: 83:5f:33:58:9e:8c:52:54:c7:fe:3b:23:05:9d:e1:51:59:94: b5:c2:6a:b0 -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgICXE8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxMzMzOFoXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoNTAwRUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlE MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtiF/dgilaRSejBtlit cRckPdSjVEvyvpXbpxExdCVW0VNShNjydcLgEBn0ZzcMmGmpcyKb0d2MENCA+816 Ihezvfu56/z/wXjsz8jtYX91GKR7OyLt+ATGlGAzQQSgqSUD7CRJ8Ezl+IM3sius CseAYhITOC0uWZBpVkLbRAQaXEMrLdjcXrwdhS6T0z+pIdQVYtEzMikn89TU0nCX RBvJWOp6LPfzs0/SPf8F612oPzp72k2uocnTraYBjZ2crg/j0UHMGtAPuJE0Xg4F 29sqs9xvssyCX54v6cG71NGXHKdsMdRmZOuv6Dip5MVRlx6DFSmkWRUVTD3HI/5P DlMCAwEAAaOCAyMwggMfMB0GA1UdDgQWBBRQDvNYvL4Uo1jKTu5BtOkNySPp0jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8yMzQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIzNC9VQTd6V0x5 LUZLTll5azd1UWJUcERja2o2ZEkubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAUbccADBAQ9fZADBAQ9 xjADBAQ9zsADBAVuLEADBAdwiAADBAZxFMADBAZ1EoADBAR6mCAwDAMEBnwoQAME BHwoYAMEBXxuoAMEBJZbgAMEB7YWgAMEBMo7sAMEBco8oAMEBMpb0AMEBcqJIAME BcuFgAMEBdLsoAMEBNotkAMEBNrYoAMEBNrkAAMEBNtnQAMEBNtt8AMEBNtxcDAN BgkqhkiG9w0BAQsFAAOCAQEAaQ/Vg6OaO7Px7VwuS30liI3eVS92zIC/MjLdQP1c 7U0ykc42nBxBs7VKo5dxhUjlC+iip+rzdZlyV2u30GH+fTzyE1EcmVDMnTbzV7d0 nDKo4iA56O4kM5A8h96Ae+hvEE/AtAAiUoEnWWqeoId9U/lBqXyHBgGoEdjzGfbJ 3hM7GeSTb1CviPjXcBg3G3MeygvNmF4d1uaGlDAsvo8vjJeYjMx6KXyV+Iyix2KO A0exFMEsbWpk7hQdItoltgPKcq31SlYxlUwsZQk1oKTl3/IDb7Sv6ZuMJlNUl2VN xhLElq7C1OpcczVCg18zWJ6MUlTH/jsjBZ3hUVmUtcJqsA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:06:24 2025 by rpki-client