This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer
File:                     e5r2GKThvUClCRs5VuFc2ir2ydI.cer (raw, json)
Hash identifier:          LoDPqFUOAtfpb9d5+lBQGHQC5sPclI3Zj1Qv3veoVI0=
Subject key identifier:   7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5C07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:31:16 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 2402:3160::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23559 (0x5c07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:31:16 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=7B9AF618A4E1BD40A5091B3956E15CDA2AF6C9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:c2:a6:d0:77:09:ec:da:7f:2d:a2:02:0a:
                    31:57:cd:e7:a1:f7:38:5a:e6:f9:0e:2f:6b:a2:d2:
                    17:71:fe:77:a4:03:81:3e:9f:1a:c8:07:ea:36:e3:
                    db:3e:90:dc:22:94:da:fc:a5:76:85:b2:57:ee:1b:
                    1c:16:37:63:23:cb:e2:ca:df:9d:41:88:2a:d2:db:
                    de:25:4b:3d:7a:3d:02:66:0d:ef:ea:41:c3:38:ae:
                    17:03:c5:7a:15:c2:2f:36:2c:6a:c6:26:98:23:3e:
                    09:75:df:bb:5d:92:7c:ec:97:3b:73:24:dd:f8:43:
                    1c:96:f4:4e:ea:84:cc:3e:43:32:1b:15:c5:ef:04:
                    eb:81:a9:c0:13:72:7c:6f:34:a2:15:c4:4a:6d:1a:
                    1f:70:ba:10:89:31:c6:21:10:74:68:32:57:79:7b:
                    d4:83:02:03:68:9e:0b:50:4e:3a:bd:1b:90:64:67:
                    51:27:89:1c:03:7b:11:8f:ad:fb:6c:33:f7:de:d2:
                    17:ac:5f:27:63:95:7d:a5:1b:71:df:b8:ed:c1:d1:
                    e6:5e:37:d6:3a:49:a2:b8:cc:a8:59:c4:50:e4:5b:
                    e6:c2:a8:1d:d3:12:c4:79:99:ab:0e:76:8f:49:74:
                    de:5e:2c:8b:52:96:65:3d:4c:d0:5e:e8:17:c7:54:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3160::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:4a:1e:0b:11:85:fa:91:ab:80:f5:6d:1b:5c:2c:db:1e:1c:
         89:8e:8b:51:38:9a:3b:5a:68:6b:a4:af:76:cf:1e:51:0c:23:
         73:09:52:d5:6d:29:40:df:27:e1:2c:ba:51:d5:63:ff:89:91:
         d9:2a:dd:56:ed:3d:00:77:18:39:fc:4b:31:79:83:79:9e:f0:
         a8:37:b1:b8:2b:57:b7:6b:13:ec:d2:3f:5c:00:2c:0f:59:56:
         24:13:2e:18:56:47:54:99:b6:18:62:57:a2:a4:92:e6:11:f0:
         96:52:8f:44:44:cf:08:10:b0:7e:69:61:e4:16:01:e8:aa:d9:
         ea:a8:dd:78:38:b7:10:75:f0:5f:c9:0b:bf:8f:37:69:28:17:
         e9:40:e6:08:14:2a:62:96:d8:69:2d:53:2d:d5:23:e8:af:07:
         79:5e:87:87:21:55:b9:8a:89:8f:d1:ed:65:01:80:b7:d9:f8:
         af:a8:b9:02:ac:29:67:dd:a4:d4:2e:53:c5:78:27:10:35:3d:
         8f:c8:da:bf:6c:4b:04:01:70:c0:84:85:20:b6:76:4a:5f:a8:
         f5:df:53:b3:49:fb:9c:02:a8:23:c0:3c:dc:72:d7:e1:1c:85:
         65:d1:dd:2c:c6:77:d4:22:76:08:8a:0c:f7:21:56:b9:0b:38:
         84:0e:49:81
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICXAcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC
NTIwREFBQzdEQThGMB4XDTI1MTExNTAxMzExNloXDTI2MTExNTAxMzAwMlowMzEx
MC8GA1UEAxMoN0I5QUY2MThBNEUxQkQ0MEE1MDkxQjM5NTZFMTVDREEyQUY2QzlE
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANNDwqbQdwns2n8togIK
MVfN56H3OFrm+Q4va6LSF3H+d6QDgT6fGsgH6jbj2z6Q3CKU2vyldoWyV+4bHBY3
YyPL4srfnUGIKtLb3iVLPXo9AmYN7+pBwziuFwPFehXCLzYsasYmmCM+CXXfu12S
fOyXO3Mk3fhDHJb0TuqEzD5DMhsVxe8E64GpwBNyfG80ohXESm0aH3C6EIkxxiEQ
dGgyV3l71IMCA2ieC1BOOr0bkGRnUSeJHAN7EY+t+2wz997SF6xfJ2OVfaUbcd+4
7cHR5l431jpJorjMqFnEUORb5sKoHdMSxHmZqw52j0l03l4si1KWZT1M0F7oF8dU
Jo0CAwEAAaOCAowwggKIMB0GA1UdDgQWBBR7mvYYpOG9QKUJGzlW4VzaKvbJ0jAf
BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0
b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa
dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j
Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0
NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G
A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw
gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9hcC9BOTFBNzM4MTAwMDAvMzA0NDkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw
a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDQ5L2U1
cjJHS1RodlVDbENSczVWdUZjMmlyMnlkSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz
Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv
bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAjFgMA0GCSqGSIb3
DQEBCwUAA4IBAQBeSh4LEYX6kauA9W0bXCzbHhyJjotROJo7WmhrpK92zx5RDCNz
CVLVbSlA3yfhLLpR1WP/iZHZKt1W7T0Adxg5/EsxeYN5nvCoN7G4K1e3axPs0j9c
ACwPWVYkEy4YVkdUmbYYYleipJLmEfCWUo9ERM8IELB+aWHkFgHoqtnqqN14OLcQ
dfBfyQu/jzdpKBfpQOYIFCpilthpLVMt1SPorwd5XoeHIVW5iomP0e1lAYC32fiv
qLkCrCln3aTULlPFeCcQNT2PyNq/bEsEAXDAhIUgtnZKX6j131OzSfucAqgjwDzc
ctfhHIVl0d0sxnfUInYIigz3IVa5CziEDkmB
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:06:02 2025 by rpki-client