This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer
File: Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer (raw, json)
Hash identifier: j8Kx8f3gDxZFnW9PcB2wU5JL8+L1SdNQX0+ppZ8hN6E=
Subject key identifier: 51:EE:6A:CD:5E:71:2F:D9:B0:35:FB:A2:BD:BA:52:0E:9F:CA:4E:C1
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5E2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Mon 15 Dec 2025 01:32:26 +0000
Certificate not after: Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources: IP: 2400:f460::/32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Jan 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24106 (0x5e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 15 01:32:26 2025 GMT
Not After : Dec 15 01:30:02 2026 GMT
Subject: CN=51EE6ACD5E712FD9B035FBA2BDBA520E9FCA4EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:fa:9b:02:f8:c3:fb:68:05:16:aa:e7:4c:
00:e2:5e:62:be:0e:d9:0d:58:3f:4e:00:7f:59:5b:
8f:27:17:ed:cf:4e:8e:e4:5a:05:4d:b8:d7:c8:a4:
cd:b7:9b:74:c5:cb:33:39:29:41:67:1a:3e:35:d5:
1a:44:19:be:72:11:78:38:5a:aa:fc:a5:0a:7e:3a:
b1:c3:d2:01:1d:e1:2d:50:e0:e9:54:40:47:88:44:
6b:2e:36:58:87:47:c6:eb:8c:8a:dd:71:87:2b:d0:
f1:49:01:8a:a0:34:b5:42:c5:bf:cb:12:78:18:96:
3f:4b:c0:51:88:cc:1f:e2:f2:14:41:05:0a:ff:3b:
b5:3f:4b:55:05:3d:0d:3f:bc:eb:bd:49:ee:2e:93:
bd:31:19:be:b3:9b:99:0a:a5:16:8c:25:63:5a:2e:
03:cf:b8:c0:8b:82:ee:da:75:a6:d7:ff:12:bd:b5:
66:2b:a5:de:fc:8c:10:7d:bc:66:de:d9:f8:f1:94:
88:84:07:87:28:e8:91:86:b8:8f:0a:b6:ed:e0:36:
c5:f9:e2:f2:ae:1b:cc:fc:1c:73:ab:96:34:66:38:
03:1e:d8:6c:ef:a5:25:d7:bb:aa:71:fc:55:1c:f7:
18:b8:c9:c9:90:c6:f3:a3:23:eb:ae:16:d3:fa:89:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EE:6A:CD:5E:71:2F:D9:B0:35:FB:A2:BD:BA:52:0E:9F:CA:4E:C1
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:f460::/32
Signature Algorithm: sha256WithRSAEncryption
31:e2:44:c5:16:43:2a:82:00:61:4d:71:52:db:5f:9a:62:db:
53:8f:27:1b:7c:2d:62:76:a8:f1:59:65:a5:fb:a2:25:02:ac:
af:7f:28:9f:56:3f:13:e9:bb:16:db:10:1c:1d:a9:8b:57:c8:
bf:68:a2:a9:1d:e4:79:eb:f3:f5:f5:22:cf:42:be:fa:f6:ab:
ac:04:8b:fd:12:6c:82:2c:3f:92:af:02:3d:87:0d:71:e7:6f:
7e:4b:9b:41:60:44:e1:78:f7:9e:7f:7e:17:81:59:1b:54:93:
06:16:07:5a:68:7f:c8:e4:5c:b0:c3:e9:a5:e9:99:6a:06:5e:
a9:68:ff:a4:af:2b:a2:b7:68:5c:09:f8:10:f2:d9:f5:73:0d:
d9:da:04:4b:af:84:85:a5:3c:34:97:a2:7a:98:57:a3:e4:ab:
25:9e:e6:e6:e0:f8:18:4a:a3:bb:6b:e7:6c:95:cb:21:2d:48:
f2:0f:22:fe:9f:60:aa:84:b2:5a:a9:e9:c6:1c:19:86:da:0d:
3c:1c:94:61:65:d8:ec:b1:ce:dd:1e:00:61:89:23:ad:a8:66:
f5:df:02:d1:eb:b5:a2:0a:72:ff:e2:cc:d6:28:80:08:26:73:
7b:f9:42:d5:03:58:06:60:86:9a:12:b7:1c:81:fb:d3:18:64:
2e:70:90:f0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICXiowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTIxNTAxMzIyNloXDTI2MTIxNTAxMzAwMlowMzEx
MC8GA1UEAxMoNTFFRTZBQ0Q1RTcxMkZEOUIwMzVGQkEyQkRCQTUyMEU5RkNBNEVD
MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNb+psC+MP7aAUWqudM
AOJeYr4O2Q1YP04Af1lbjycX7c9OjuRaBU2418ikzbebdMXLMzkpQWcaPjXVGkQZ
vnIReDhaqvylCn46scPSAR3hLVDg6VRAR4hEay42WIdHxuuMit1xhyvQ8UkBiqA0
tULFv8sSeBiWP0vAUYjMH+LyFEEFCv87tT9LVQU9DT+8671J7i6TvTEZvrObmQql
FowlY1ouA8+4wIuC7tp1ptf/Er21Ziul3vyMEH28Zt7Z+PGUiIQHhyjokYa4jwq2
7eA2xfni8q4bzPwcc6uWNGY4Ax7YbO+lJde7qnH8VRz3GLjJyZDG86Mj664W0/qJ
Nw0CAwEAAaOCAowwggKIMB0GA1UdDgQWBBRR7mrNXnEv2bA1+6K9ulIOn8pOwTAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzA0MTgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDE4L1Vl
NXF6VjV4TDltd05mdWl2YnBTRHBfS1RzRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAPRgMA0GCSqGSIb3
DQEBCwUAA4IBAQAx4kTFFkMqggBhTXFS21+aYttTjycbfC1idqjxWWWl+6IlAqyv
fyifVj8T6bsW2xAcHamLV8i/aKKpHeR56/P19SLPQr769qusBIv9EmyCLD+SrwI9
hw1x529+S5tBYEThePeef34XgVkbVJMGFgdaaH/I5Fyww+ml6ZlqBl6paP+kryui
t2hcCfgQ8tn1cw3Z2gRLr4SFpTw0l6J6mFej5Kslnubm4PgYSqO7a+dslcshLUjy
DyL+n2CqhLJaqenGHBmG2g08HJRhZdjssc7dHgBhiSOtqGb13wLR67WiCnL/4szW
KIAIJnN7+ULVA1gGYIaaErccgfvTGGQucJDw
-----END CERTIFICATE-----
Generated at Thu Jan 8 09:18:06 2026 by rpki-client