This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer File: Zd5S5kvkPjKKpp86stNH-IM-xjc.cer (raw, json) Hash identifier: WniX+FxrLcLG3pqTUuNvhll94RWCKbSRrFypIyvY/fk= Subject key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5D31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:40:35 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 27.122.64.0 -- 27.122.111.255 IP: 116.89.192.0/19 IP: 117.18.88.0/21 IP: 119.148.192.0/18 IP: 119.224.160.0/19 IP: 123.255.128.0/18 IP: 124.108.192.0/18 IP: 180.188.208.0/20 IP: 180.189.128.0/21 IP: 183.181.192.0/18 IP: 202.165.112.0/21 IP: 202.222.112.0/20 IP: 202.224.64.0/19 IP: 203.148.96.0/19 IP: 210.141.32.0/19 IP: 210.199.96.0/19 IP: 210.237.0.0/19 IP: 218.216.144.0/20 IP: 218.223.96.0/19 IP: 219.121.192.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23857 (0x5d31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:40:35 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:42:98:15:a8:33:49:5c:4a:28:a2:0d:3a: a8:77:04:52:22:06:c2:80:84:00:18:d5:15:af:f0: e0:97:bc:79:cc:54:f0:3d:32:f2:f4:01:05:98:c9: 35:f8:59:3c:e6:97:b2:66:d5:2d:00:3f:eb:71:a1: 82:c9:5d:a7:97:20:2a:20:3e:bc:5e:9e:fc:ff:26: c1:fc:bf:42:ba:71:4f:a8:27:fc:3b:f5:06:4e:77: 04:2e:1f:89:12:5a:08:b7:26:ca:8d:20:26:bd:78: d9:a3:d7:f8:f9:7a:13:e4:5f:9f:6e:5e:79:4b:74: 35:5f:68:22:f8:71:75:08:22:d3:f0:a8:cc:92:73: 96:6d:73:f4:ab:d8:a6:5d:97:06:40:36:74:11:3a: fd:e3:da:ba:fc:03:88:6c:af:fd:b2:45:a6:37:d1: cd:cb:a3:8e:cc:16:f8:6a:32:f6:5b:05:62:a0:ed: 8c:b0:71:19:c5:2f:46:cd:c0:52:64:06:fb:5f:ed: 2c:ed:9e:17:ad:6c:b6:d6:c5:9a:65:4c:df:0b:11: 79:b1:7d:d3:c2:25:39:5e:5b:80:e7:0e:5d:e1:f2: ca:28:1b:1d:3e:d0:af:a7:e6:3d:4b:1a:6b:51:31: c3:5f:f5:8d:c7:e8:16:60:b8:9c:d2:f4:f4:a5:ee: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.122.64.0-27.122.111.255 116.89.192.0/19 117.18.88.0/21 119.148.192.0/18 119.224.160.0/19 123.255.128.0/18 124.108.192.0/18 180.188.208.0/20 180.189.128.0/21 183.181.192.0/18 202.165.112.0/21 202.222.112.0/20 202.224.64.0/19 203.148.96.0/19 210.141.32.0/19 210.199.96.0/19 210.237.0.0/19 218.216.144.0/20 218.223.96.0/19 219.121.192.0/20 Signature Algorithm: sha256WithRSAEncryption 12:93:c3:58:36:b4:af:ec:96:df:5a:85:51:23:86:d0:53:2a: 99:ab:fb:61:9c:91:8d:c2:4e:a8:ef:31:bd:d1:04:49:33:2b: c9:0b:12:96:b0:ef:13:32:f7:9f:be:40:fc:7c:85:eb:ae:3a: 70:79:47:b7:18:d7:5b:5f:1a:d8:d5:26:21:c3:de:d6:95:c8: e3:a8:61:10:67:d0:eb:d6:32:b8:b8:aa:d9:a6:68:01:9a:ca: dc:5a:ca:ce:c6:6a:f6:8e:42:14:f6:29:4a:6f:7a:74:e7:2b: 4a:60:c3:dd:0f:2f:99:c0:c9:a0:64:86:94:90:7e:35:ed:d1: e4:9f:31:48:9e:96:73:35:3d:ce:b4:a7:33:3e:37:ae:f5:3a: 4c:ce:4e:40:37:1c:f9:9e:56:fb:66:3e:c2:27:5d:25:7d:7f: a5:6c:c2:55:c5:bd:09:bf:87:16:4f:34:bb:74:b4:e6:2a:7d: 59:53:c3:bf:4c:68:23:33:87:be:5d:4a:aa:dd:b4:30:9d:be: a5:7d:bd:0c:2f:82:9d:2f:60:e9:60:7c:9f:51:d2:7a:7d:6d: d8:27:f3:bf:13:f8:3a:31:1b:6d:52:8a:03:32:23:96:fd:ad: 7f:a5:e0:76:b3:b5:a2:a5:55:d4:57:51:50:0b:07:f5:51:41: f9:2d:9e:bd -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgICXTEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxNDAzNVoXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoNjVERTUyRTY0QkU0M0UzMjhBQTY5RjNBQjJEMzQ3Rjg4MzNFQzYz NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKelQpgVqDNJXEooog06 qHcEUiIGwoCEABjVFa/w4Je8ecxU8D0y8vQBBZjJNfhZPOaXsmbVLQA/63Ghgsld p5cgKiA+vF6e/P8mwfy/QrpxT6gn/Dv1Bk53BC4fiRJaCLcmyo0gJr142aPX+Pl6 E+Rfn25eeUt0NV9oIvhxdQgi0/CozJJzlm1z9KvYpl2XBkA2dBE6/ePauvwDiGyv /bJFpjfRzcujjswW+Goy9lsFYqDtjLBxGcUvRs3AUmQG+1/tLO2eF61sttbFmmVM 3wsRebF908IlOV5bgOcOXeHyyigbHT7Qr6fmPUsaa1Exw1/1jcfoFmC4nNL09KXu IakCAwEAAaOCAwMwggL/MB0GA1UdDgQWBBRl3lLmS+Q+Moqmnzqy00f4gz7GNzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC82OC8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNjgvWmQ1UzVrdmtQ aktLcHA4NnN0TkgtSU0teGpjLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDCB nQYIKwYBBQUHAQcBAf8EgY0wgYowgYcEAgABMIGAMAwDBAYbekADBAQbemADBAV0 WcADBAN1ElgDBAZ3lMADBAV34KADBAZ7/4ADBAZ8bMADBAS0vNADBAO0vYADBAa3 tcADBAPKpXADBATK3nADBAXK4EADBAXLlGADBAXSjSADBAXSx2ADBAXS7QADBATa 2JADBAXa32ADBATbecAwDQYJKoZIhvcNAQELBQADggEBABKTw1g2tK/slt9ahVEj htBTKpmr+2GckY3CTqjvMb3RBEkzK8kLEpaw7xMy95++QPx8heuuOnB5R7cY11tf GtjVJiHD3taVyOOoYRBn0OvWMri4qtmmaAGaytxays7GavaOQhT2KUpvenTnK0pg w90PL5nAyaBkhpSQfjXt0eSfMUielnM1Pc60pzM+N671OkzOTkA3HPmeVvtmPsIn XSV9f6VswlXFvQm/hxZPNLt0tOYqfVlTw79MaCMzh75dSqrdtDCdvqV9vQwvgp0v YOlgfJ9R0np9bdgn878T+DoxG21SigMyI5b9rX+l4HaztaKlVdRXUVALB/VRQfkt nr0= -----END CERTIFICATE-----Generated at Sat Nov 22 21:05:10 2025 by rpki-client