This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/apWCSYAD-L9tk8FR84y0iWpLLVw.cer
File: apWCSYAD-L9tk8FR84y0iWpLLVw.cer (raw, json)
Hash identifier: 5dhrtDalsPee8QGpz/Egkyw5wNUVgNoPxfsxxl6AoAg=
Subject key identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5BE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Nov 2025 01:30:23 +0000
Certificate not after: Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources: IP: 202.253.252.0/23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23529 (0x5be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:30:23 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=6A9582498003F8BF6D93C151F38CB4896A4B2D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:18:b3:bf:9b:21:ed:7e:d1:13:6b:dd:5b:
69:7d:30:a7:a7:c1:ac:84:da:9d:60:9b:76:fc:5d:
c5:14:ad:ed:66:f2:43:42:34:cb:bf:c2:98:51:89:
81:2b:c0:cf:88:f9:ef:c8:86:8d:1e:4c:16:45:d9:
ec:28:dd:66:19:ea:d0:f9:19:d9:57:db:95:7a:a1:
8a:b1:8f:fc:93:4b:b4:ff:56:7a:85:69:34:e1:05:
c9:d9:a8:21:09:d5:e0:5a:78:9f:05:3f:0e:aa:65:
95:28:de:2c:5c:d0:f7:4c:53:2a:f1:49:76:12:63:
ae:a4:17:46:bd:bc:f0:9b:51:7f:31:51:20:c3:b7:
16:d7:da:07:b2:67:60:f2:d5:78:fb:c3:0c:05:8f:
99:9c:c3:b7:28:14:94:63:ed:18:2c:ed:28:9b:6f:
4c:14:81:43:f9:f2:34:a3:65:54:01:61:2e:ae:f7:
56:c4:46:b9:46:99:5a:63:6a:27:4c:9f:62:97:c5:
56:ab:4b:cb:a5:69:eb:3d:e4:0d:f9:c2:6e:32:a0:
fd:5d:b8:4f:58:ab:11:0e:99:f9:b6:f7:91:21:50:
a2:f7:fa:7a:91:2a:d2:0f:3b:12:c8:09:56:d4:ec:
7a:3f:b2:90:3f:20:c6:9b:86:24:ad:8b:53:9e:37:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.253.252.0/23
Signature Algorithm: sha256WithRSAEncryption
31:5f:3f:e9:c6:c9:5d:fe:77:d9:8d:0f:43:94:fc:12:02:46:
cd:21:e1:7a:33:1e:3b:b4:c5:b7:57:89:1e:f6:88:72:b4:c6:
2a:2f:39:1a:12:9a:e4:b2:26:08:e7:26:b0:bf:83:22:33:3f:
f3:18:e7:c1:e5:06:5c:b1:2c:0c:c4:bd:cf:a5:ec:48:cc:c0:
23:4a:1e:4d:83:25:43:0f:04:c2:c2:8f:84:4b:a5:13:9f:c8:
10:59:d4:3d:0c:38:63:1b:22:06:b0:e0:b7:0d:de:b6:a1:de:
cb:e9:e0:88:1b:4e:87:33:71:e0:06:12:8c:1a:e8:92:a0:bd:
1f:47:ad:26:86:99:26:3f:99:e4:7e:48:6f:2a:e1:1e:db:d1:
69:33:20:5c:b5:67:c7:de:82:7e:c1:6e:c1:95:ef:1c:8f:9c:
ed:bd:dc:db:af:22:d6:a3:cc:78:bb:29:89:9f:e1:51:6d:92:
28:09:6d:3a:84:f7:7a:fd:03:37:58:bf:d8:4b:c2:01:a8:69:
73:6e:19:38:b3:38:8a:e2:01:4a:5c:52:cc:be:30:7f:d8:4c:
e6:1d:5b:be:ca:11:7b:84:fb:f0:56:1d:57:20:72:11:01:4b:
74:f4:fc:64:a5:9f:d6:a9:76:07:15:f1:e9:73:c4:83:e8:7e:
ae:ae:2d:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICW+kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTExNTAxMzAyM1oXDTI2MTExNTAxMzAwMlowMzEx
MC8GA1UEAxMoNkE5NTgyNDk4MDAzRjhCRjZEOTNDMTUxRjM4Q0I0ODk2QTRCMkQ1
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6KGLO/myHtftETa91b
aX0wp6fBrITanWCbdvxdxRSt7WbyQ0I0y7/CmFGJgSvAz4j578iGjR5MFkXZ7Cjd
Zhnq0PkZ2VfblXqhirGP/JNLtP9WeoVpNOEFydmoIQnV4Fp4nwU/DqpllSjeLFzQ
90xTKvFJdhJjrqQXRr288JtRfzFRIMO3FtfaB7JnYPLVePvDDAWPmZzDtygUlGPt
GCztKJtvTBSBQ/nyNKNlVAFhLq73VsRGuUaZWmNqJ0yfYpfFVqtLy6Vp6z3kDfnC
bjKg/V24T1irEQ6Z+bb3kSFQovf6epEq0g87EsgJVtTsej+ykD8gxpuGJK2LU543
Ut8CAwEAAaOCAokwggKFMB0GA1UdDgQWBBRqlYJJgAP4v22TwVHzjLSJakstXDAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw
gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr
aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi9hcFdD
U1lBRC1MOXRrOEZSODR5MGlXcExMVncubWZ0MEYGCCsGAQUFBzANhjpodHRwczov
L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByv38MA0GCSqGSIb3DQEB
CwUAA4IBAQAxXz/pxsld/nfZjQ9DlPwSAkbNIeF6Mx47tMW3V4ke9ohytMYqLzka
EprksiYI5yawv4MiMz/zGOfB5QZcsSwMxL3PpexIzMAjSh5NgyVDDwTCwo+ES6UT
n8gQWdQ9DDhjGyIGsOC3Dd62od7L6eCIG06HM3HgBhKMGuiSoL0fR60mhpkmP5nk
fkhvKuEe29FpMyBctWfH3oJ+wW7Ble8cj5ztvdzbryLWo8x4uymJn+FRbZIoCW06
hPd6/QM3WL/YS8IBqGlzbhk4sziK4gFKXFLMvjB/2EzmHVu+yhF7hPvwVh1XIHIR
AUt09PxkpZ/WqXYHFfHpc8SD6H6uri1J
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:06:24 2025 by rpki-client