This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
File: WWOeon3tRg88m0MhbvxRlV9iick.cer (raw, json)
Hash identifier: eTuvjnNrQ9nRPZG916E2zb4UVrWeuzL1Gd2GYqkd70E=
Subject key identifier: 59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5D6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Nov 2025 01:42:13 +0000
Certificate not after: Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources: IP: 202.240.84.0/23
IP: 210.172.192.0/19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23915 (0x5d6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:42:13 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=59639EA27DED460F3C9B43216EFC51955F6289C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:7a:90:9c:2f:2b:d1:34:13:73:54:c4:16:
1f:c5:d6:a1:36:9a:5d:7e:2c:6b:a6:7e:8e:7e:c5:
48:5d:2e:67:b0:fb:64:fa:a6:2f:83:95:8f:3c:3a:
75:d1:e7:19:54:83:41:2a:fb:ea:bf:7b:a5:b0:04:
0d:63:fd:a9:47:41:ec:39:85:11:87:28:08:32:e8:
ae:25:e2:99:66:21:5a:00:f9:1f:df:0c:11:98:65:
4c:69:b2:a3:93:00:4e:e3:98:9b:0d:cd:82:ac:0e:
b2:54:38:25:c7:d5:b9:8c:67:7d:5a:df:94:70:de:
fe:c8:6d:30:ed:b2:ef:59:5c:c1:39:6f:6e:5c:fe:
ab:33:f4:43:fc:a9:fb:65:c6:8c:5b:16:b4:1e:90:
4a:85:2a:ce:0f:f2:30:94:5d:a2:59:12:ea:b5:f1:
07:87:35:86:96:c4:81:a1:88:38:e2:db:5e:7f:0b:
86:47:15:50:d3:0a:a2:c1:8b:5b:c3:25:91:bb:1b:
62:f8:d7:48:08:19:3f:d3:d2:a5:01:08:62:74:43:
f0:e4:73:b8:33:a1:16:72:8e:db:f7:03:a6:cf:c4:
e8:bc:23:ce:2a:e7:89:58:a0:e0:bb:ec:f1:67:57:
36:92:58:41:c6:06:bc:40:0d:65:d1:b4:28:56:6d:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.240.84.0/23
210.172.192.0/19
Signature Algorithm: sha256WithRSAEncryption
29:e5:8e:1c:a4:ea:88:b0:8b:4a:07:73:6a:2b:7a:43:93:ec:
73:d9:cb:c3:33:5f:b0:50:6e:e5:b2:a5:23:ed:6c:3e:5a:4e:
86:23:4d:ad:44:26:e5:aa:ef:1f:69:c2:c1:a3:51:70:26:12:
31:0e:e6:79:71:3f:fb:46:49:90:ed:7b:07:8c:08:87:04:ce:
1a:41:be:72:98:b1:c2:0a:60:50:3f:43:81:03:2b:57:fd:f4:
00:cf:66:bf:f4:f5:58:f3:45:fb:60:90:74:00:57:69:2b:cd:
1b:a2:cf:6b:ae:d8:b9:17:69:69:59:4b:60:59:6b:76:1a:10:
84:48:e7:53:b2:12:62:a7:ba:de:20:b1:0a:32:59:0c:55:31:
68:a3:e9:9e:a0:0d:ec:07:d0:1a:b7:3a:0a:12:d1:f7:19:37:
5e:cc:f7:27:13:94:33:e6:fa:14:a3:8d:90:3f:c1:4b:35:6b:
fc:ec:9e:36:76:cf:32:bf:5f:7f:4f:cb:09:9d:f5:24:44:67:
7b:c5:93:0e:ed:ee:bb:4e:a7:19:bd:2c:96:57:4f:d8:ea:04:
d4:dc:9e:24:d6:b1:1e:ed:3b:36:e8:54:af:b3:7b:00:c5:22:
f4:a7:96:90:03:ab:ae:d9:27:89:f8:16:87:81:53:a2:5a:fd:
83:a3:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:05:05 2025 by rpki-client