This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer File: XQVbLarEiHjMmxEnopzxFmaSCiM.cer (raw, json) Hash identifier: AZcuJpTXV3WZXo3vQh9a6xaP8Gy2x0nWQwxHpKO0pRg= Subject key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:39:42 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 103.24.168.0/22 IP: 103.235.124.0/22 IP: 124.47.64.0/18 IP: 202.52.16.0/20 IP: 202.91.48.0/20 IP: 202.122.224.0/19 IP: 202.171.112.0/20 IP: 203.76.64.0/19 IP: 203.140.240.0/20 IP: 203.179.0.0/20 IP: 203.191.208.0/20 IP: 211.2.184.0/21 IP: 211.125.96.0/19 IP: 219.100.64.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23828 (0x5d14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:39:42 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:fa:25:d4:c5:79:7d:36:d0:3b:cd:72:47: bc:73:aa:d7:c2:28:8e:bf:86:cc:02:5d:0b:41:33: 1c:2a:b7:c7:77:af:34:5b:28:49:a4:d2:70:e3:7f: bf:f8:25:91:2d:e9:12:dc:fe:bc:3c:15:61:3e:db: b3:3a:f7:d7:c1:12:72:79:c9:bb:e6:4f:c5:36:7f: da:43:54:5e:24:e2:10:9d:14:cb:d8:eb:dc:12:eb: de:6e:5d:a4:4b:1f:a7:bd:57:31:9f:c1:4d:4b:b3: 6a:d0:0a:b6:ce:d8:80:31:51:62:99:b0:23:29:37: cc:50:4b:fe:e6:ba:4b:be:53:44:0e:c6:7c:2f:55: e2:4f:a4:40:ac:84:b1:b2:73:a8:da:7c:e5:04:69: 3c:e4:05:7e:b4:41:e9:8c:37:41:e6:c1:13:41:14: 3a:a0:e0:58:c0:c5:e4:6c:76:aa:ac:9f:81:60:c5: a8:b0:f1:4e:ef:27:b8:c9:0a:26:ee:a5:50:60:71: 99:2c:08:5d:1e:e9:d9:76:be:00:0c:48:68:d8:7d: 6d:6e:86:c7:b3:7b:1f:5c:a3:93:f4:b9:a7:b4:d4: 6d:7b:40:9f:21:11:fe:89:51:97:13:6f:f1:29:ed: 7f:0d:e2:a3:18:e0:33:ec:01:f0:ab:b1:d1:fe:35: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.168.0/22 103.235.124.0/22 124.47.64.0/18 202.52.16.0/20 202.91.48.0/20 202.122.224.0/19 202.171.112.0/20 203.76.64.0/19 203.140.240.0/20 203.179.0.0/20 203.191.208.0/20 211.2.184.0/21 211.125.96.0/19 219.100.64.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:cf:61:3a:b3:22:5b:96:9c:02:b7:c0:6b:99:66:98:5c:8e: 82:2c:51:c4:1b:e5:52:f1:23:d5:31:39:3b:3b:47:17:a3:bd: 90:c6:89:cc:a4:2a:b7:f3:11:dc:62:02:55:d6:7b:55:98:9d: 4c:df:58:9d:75:13:f5:15:18:bc:5a:0b:81:eb:97:3f:24:a7: 32:a9:5d:5b:25:8c:a2:62:aa:10:06:92:87:7a:cb:21:ea:7a: fc:75:36:12:d4:b1:b8:90:71:87:05:bd:c8:97:cb:fa:ae:41: 7d:55:c4:0f:02:28:ab:d4:4b:1b:83:2f:55:31:82:b7:0e:a3: 37:76:35:2a:c5:dd:b6:7a:75:eb:90:48:36:fb:1b:71:08:70: d2:e0:b3:a9:cd:b5:d2:f0:73:04:d8:60:18:31:8a:0c:97:40: 90:fb:4c:6f:2c:94:e6:d2:51:68:bb:10:ff:a0:f3:e5:69:41: f2:ef:33:6d:1f:ca:e4:66:4e:4d:52:f0:5e:27:52:9e:b5:c9: f0:be:1f:9f:e7:aa:2e:24:32:3d:68:f1:87:e4:6a:00:2d:e0: 29:f1:2e:8d:bd:f2:cb:a6:47:3b:61:39:45:f1:20:17:a7:2b: b2:7f:93:40:05:f0:5c:6b:be:a5:83:7f:eb:39:db:03:a9:27: 97:f0:b3:46 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgICXRQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxMzk0MloXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoNUQwNTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEy MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL9+iXUxXl9NtA7zXJH vHOq18Iojr+GzAJdC0EzHCq3x3evNFsoSaTScON/v/glkS3pEtz+vDwVYT7bszr3 18EScnnJu+ZPxTZ/2kNUXiTiEJ0Uy9jr3BLr3m5dpEsfp71XMZ/BTUuzatAKts7Y gDFRYpmwIyk3zFBL/ua6S75TRA7GfC9V4k+kQKyEsbJzqNp85QRpPOQFfrRB6Yw3 QebBE0EUOqDgWMDF5Gx2qqyfgWDFqLDxTu8nuMkKJu6lUGBxmSwIXR7p2Xa+AAxI aNh9bW6Gx7N7H1yjk/S5p7TUbXtAnyER/olRlxNv8Sntfw3ioxjgM+wB8Kux0f41 E9kCAwEAAaOCAtQwggLQMB0GA1UdDgQWBBRdBVstqsSIeMybESeinPEWZpIKIzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8zOTMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM5My9YUVZiTGFy RWlIak1teEVub3B6eEZtYVNDaU0ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCZxioAwQCZ+t8AwQGfC9AAwQE yjQQAwQEylswAwQFynrgAwQEyqtwAwQFy0xAAwQEy4zwAwQEy7MAAwQEy7/QAwQD 0wK4AwQF031gAwQC22RAMA0GCSqGSIb3DQEBCwUAA4IBAQCdz2E6syJblpwCt8Br mWaYXI6CLFHEG+VS8SPVMTk7O0cXo72QxonMpCq38xHcYgJV1ntVmJ1M31iddRP1 FRi8WguB65c/JKcyqV1bJYyiYqoQBpKHessh6nr8dTYS1LG4kHGHBb3Il8v6rkF9 VcQPAiir1Esbgy9VMYK3DqM3djUqxd22enXrkEg2+xtxCHDS4LOpzbXS8HME2GAY MYoMl0CQ+0xvLJTm0lFouxD/oPPlaUHy7zNtH8rkZk5NUvBeJ1Ketcnwvh+f56ou JDI9aPGH5GoALeAp8S6NvfLLpkc7YTlF8SAXpyuyf5NABfBca76lg3/rOdsDqSeX 8LNG -----END CERTIFICATE-----Generated at Sat Nov 22 21:05:41 2025 by rpki-client