This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer File: h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer (raw, json) Hash identifier: HsSDpWnuio4jfb5pZllLQxiqHFXjgHv4ISx7RptDk8g= Subject key identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:38:42 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 133.3.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23797 (0x5cf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:38:42 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=87CD2FD59C6043CC830969581381D7A2807EF2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:4f:31:ae:59:98:c1:7b:6a:71:6f:9a:40: c7:02:de:fb:83:db:25:88:62:df:1b:eb:7b:c4:18: 55:11:2b:04:23:fc:6f:1a:4e:b0:cc:3e:a7:0c:6a: a2:54:f9:fb:d4:83:85:fc:3f:89:0e:88:55:16:5c: 85:78:55:10:a2:73:26:ad:88:4c:a1:69:2b:98:42: ed:c4:6f:2f:c2:1f:22:f3:ac:fa:7a:ca:c5:49:19: bb:17:fc:0a:99:1d:e0:14:79:42:f2:86:c1:04:1c: 0b:ad:6a:81:03:7a:7f:0f:16:2d:c3:38:9b:69:f3: 68:23:a3:5c:ff:43:87:a9:bd:25:32:01:99:ab:da: 7a:f9:68:91:6c:26:73:13:db:1a:91:c8:54:91:9f: 38:9a:3a:ed:56:01:4c:40:bb:0f:71:5c:91:f2:c2: ee:95:e3:ef:29:52:0d:73:06:e6:93:6d:ec:c9:c3: 0c:57:a6:67:73:9a:9c:8a:53:90:f5:a4:de:6d:c9: 16:c3:15:a5:c9:c0:db:ca:13:34:df:b1:29:ed:2e: c1:68:90:22:2b:73:fb:0d:83:ad:b4:a1:d2:15:ec: 97:f4:d2:60:25:9c:75:9e:61:1e:fb:57:48:93:e8: 61:0c:7f:a6:ba:99:54:a6:7b:82:e6:21:f8:f8:fb: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:4e:d7:73:c1:af:09:a8:6e:5f:1e:9a:f9:71:a1:98:b8:e8: c2:9e:39:56:64:60:e9:3c:24:3e:fd:c1:a9:af:36:af:0e:b0: ae:47:9b:91:bc:15:04:d0:7e:b8:bf:89:d5:04:f2:92:96:74: 02:58:92:51:39:1f:ad:c8:d1:9b:af:0e:be:ac:e2:2f:fa:41: 8f:25:2c:d8:6f:e0:4d:06:d3:5f:88:27:c1:f8:30:d7:09:ba: 6f:85:8d:a3:a7:47:b5:69:a4:c6:76:2b:bc:0f:5e:de:11:ee: 6c:e7:46:dc:03:2b:d9:d7:87:cc:04:e7:ac:dc:42:47:da:43: 78:3b:14:61:a8:01:e1:72:8e:f6:15:6d:20:f9:2b:21:63:03: a7:b9:0e:19:d1:06:43:19:8f:6c:a4:c9:f4:6c:4c:38:c7:33: 34:70:44:12:96:2f:b3:12:ea:d9:68:21:4b:0c:f1:b2:70:92: ec:cc:bd:92:84:54:f0:6c:61:e2:d7:c1:0a:92:5e:29:01:80: 95:8c:56:3d:2d:fa:e1:33:8c:5c:1e:8f:5e:44:9a:97:3f:47: c1:6b:9d:50:a5:5c:54:42:5c:31:5e:8a:64:ef:05:86:4c:ac: f5:92:48:a8:e4:33:b1:80:ce:de:35:82:a4:80:3c:b1:8e:ae: 65:d4:5c:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICXPUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxMzg0MloXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoODdDRDJGRDU5QzYwNDNDQzgzMDk2OTU4MTM4MUQ3QTI4MDdFRjJD NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgrTzGuWZjBe2pxb5pA xwLe+4PbJYhi3xvre8QYVRErBCP8bxpOsMw+pwxqolT5+9SDhfw/iQ6IVRZchXhV EKJzJq2ITKFpK5hC7cRvL8IfIvOs+nrKxUkZuxf8Cpkd4BR5QvKGwQQcC61qgQN6 fw8WLcM4m2nzaCOjXP9Dh6m9JTIBmavaevlokWwmcxPbGpHIVJGfOJo67VYBTEC7 D3FckfLC7pXj7ylSDXMG5pNt7MnDDFemZ3OanIpTkPWk3m3JFsMVpcnA28oTNN+x Ke0uwWiQIitz+w2DrbSh0hXsl/TSYCWcdZ5hHvtXSJPoYQx/prqZVKZ7guYh+Pj7 498CAwEAAaOCAogwggKEMB0GA1UdDgQWBBSHzS/VnGBDzIMJaVgTgdeigH7yxzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTk0OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTk0OS9oODB2 MVp4Z1E4eURDV2xZRTRIWG9vQi04c2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhQMwDQYJKoZIhvcNAQEL BQADggEBAHhO13PBrwmobl8emvlxoZi46MKeOVZkYOk8JD79wamvNq8OsK5Hm5G8 FQTQfri/idUE8pKWdAJYklE5H63I0ZuvDr6s4i/6QY8lLNhv4E0G01+IJ8H4MNcJ um+FjaOnR7VppMZ2K7wPXt4R7mznRtwDK9nXh8wE56zcQkfaQ3g7FGGoAeFyjvYV bSD5KyFjA6e5DhnRBkMZj2ykyfRsTDjHMzRwRBKWL7MS6tloIUsM8bJwkuzMvZKE VPBsYeLXwQqSXikBgJWMVj0t+uEzjFwej15Empc/R8FrnVClXFRCXDFeimTvBYZM rPWSSKjkM7GAzt41gqSAPLGOrmXUXF4= -----END CERTIFICATE-----Generated at Sat Nov 22 21:05:42 2025 by rpki-client