This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer
File:                     Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer (raw, json)
Hash identifier:          j8Kx8f3gDxZFnW9PcB2wU5JL8+L1SdNQX0+ppZ8hN6E=
Subject key identifier:   51:EE:6A:CD:5E:71:2F:D9:B0:35:FB:A2:BD:BA:52:0E:9F:CA:4E:C1
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5E2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Dec 2025 01:32:26 +0000
Certificate not after:    Tue 15 Dec 2026 01:30:02 +0000
Subordinate resources:    IP: 2400:f460::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24106 (0x5e2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Dec 15 01:32:26 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=51EE6ACD5E712FD9B035FBA2BDBA520E9FCA4EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:fa:9b:02:f8:c3:fb:68:05:16:aa:e7:4c:
                    00:e2:5e:62:be:0e:d9:0d:58:3f:4e:00:7f:59:5b:
                    8f:27:17:ed:cf:4e:8e:e4:5a:05:4d:b8:d7:c8:a4:
                    cd:b7:9b:74:c5:cb:33:39:29:41:67:1a:3e:35:d5:
                    1a:44:19:be:72:11:78:38:5a:aa:fc:a5:0a:7e:3a:
                    b1:c3:d2:01:1d:e1:2d:50:e0:e9:54:40:47:88:44:
                    6b:2e:36:58:87:47:c6:eb:8c:8a:dd:71:87:2b:d0:
                    f1:49:01:8a:a0:34:b5:42:c5:bf:cb:12:78:18:96:
                    3f:4b:c0:51:88:cc:1f:e2:f2:14:41:05:0a:ff:3b:
                    b5:3f:4b:55:05:3d:0d:3f:bc:eb:bd:49:ee:2e:93:
                    bd:31:19:be:b3:9b:99:0a:a5:16:8c:25:63:5a:2e:
                    03:cf:b8:c0:8b:82:ee:da:75:a6:d7:ff:12:bd:b5:
                    66:2b:a5:de:fc:8c:10:7d:bc:66:de:d9:f8:f1:94:
                    88:84:07:87:28:e8:91:86:b8:8f:0a:b6:ed:e0:36:
                    c5:f9:e2:f2:ae:1b:cc:fc:1c:73:ab:96:34:66:38:
                    03:1e:d8:6c:ef:a5:25:d7:bb:aa:71:fc:55:1c:f7:
                    18:b8:c9:c9:90:c6:f3:a3:23:eb:ae:16:d3:fa:89:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:6A:CD:5E:71:2F:D9:B0:35:FB:A2:BD:BA:52:0E:9F:CA:4E:C1
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f460::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:44:c5:16:43:2a:82:00:61:4d:71:52:db:5f:9a:62:db:
         53:8f:27:1b:7c:2d:62:76:a8:f1:59:65:a5:fb:a2:25:02:ac:
         af:7f:28:9f:56:3f:13:e9:bb:16:db:10:1c:1d:a9:8b:57:c8:
         bf:68:a2:a9:1d:e4:79:eb:f3:f5:f5:22:cf:42:be:fa:f6:ab:
         ac:04:8b:fd:12:6c:82:2c:3f:92:af:02:3d:87:0d:71:e7:6f:
         7e:4b:9b:41:60:44:e1:78:f7:9e:7f:7e:17:81:59:1b:54:93:
         06:16:07:5a:68:7f:c8:e4:5c:b0:c3:e9:a5:e9:99:6a:06:5e:
         a9:68:ff:a4:af:2b:a2:b7:68:5c:09:f8:10:f2:d9:f5:73:0d:
         d9:da:04:4b:af:84:85:a5:3c:34:97:a2:7a:98:57:a3:e4:ab:
         25:9e:e6:e6:e0:f8:18:4a:a3:bb:6b:e7:6c:95:cb:21:2d:48:
         f2:0f:22:fe:9f:60:aa:84:b2:5a:a9:e9:c6:1c:19:86:da:0d:
         3c:1c:94:61:65:d8:ec:b1:ce:dd:1e:00:61:89:23:ad:a8:66:
         f5:df:02:d1:eb:b5:a2:0a:72:ff:e2:cc:d6:28:80:08:26:73:
         7b:f9:42:d5:03:58:06:60:86:9a:12:b7:1c:81:fb:d3:18:64:
         2e:70:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:18:06 2026 by rpki-client