This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer
File: hTvMypswbARZZY4oio0_3nUbT2s.cer (raw, json)
Hash identifier: QYYkqtww8wiwOSyvP4f9FkNiP/jlWc5wcTuR+G4GEGA=
Subject key identifier: 85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Nov 2025 01:41:56 +0000
Certificate not after: Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources: IP: 194.91.0.0/16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 15:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Validity
Not Before: Nov 15 01:41:56 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=853BCCCA9B306C0459658E288A8D3FDE751B4F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:ed:cf:c8:53:34:1f:03:ff:11:67:8c:13:
71:8b:1c:7f:60:a9:8f:1f:1b:f0:d6:d4:75:c2:23:
77:86:a1:fd:ed:d7:bd:eb:17:5a:0c:0b:3d:96:26:
27:d7:55:21:f3:23:fe:8b:99:30:ac:f4:33:7a:53:
e8:6d:ea:32:3b:9b:f1:ff:7a:75:63:40:d1:af:23:
6a:0c:0f:79:58:81:7a:28:dc:91:1b:86:55:58:08:
c0:e5:34:32:b7:d4:c7:16:f3:c2:8d:3b:6e:6f:74:
53:cb:27:58:c6:47:e5:39:c5:c7:ba:14:84:8b:d3:
cd:31:2d:c6:ff:e4:c8:c0:3a:1d:0d:99:d7:09:55:
fe:6f:51:20:be:a7:c9:73:fb:9d:99:d1:85:00:14:
3e:71:29:f8:dd:6e:6f:64:d1:c6:d8:c4:c9:da:12:
0e:c9:70:02:65:8e:6f:82:f8:09:5a:9b:01:8a:21:
50:25:69:6e:dd:c9:a2:b5:f5:d9:fe:ae:6e:34:e6:
b1:59:55:27:ae:01:62:91:f1:36:f7:35:fe:3d:33:
b4:28:e8:d9:11:8d:b6:04:c1:a0:4e:f2:11:c6:6f:
f5:6a:1d:05:8b:4e:2b:ea:23:d1:c9:d8:eb:9b:aa:
d6:96:94:c4:a8:3d:91:9a:29:15:de:51:02:d4:77:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
X509v3 Authority Key Identifier:
keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
194.91.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:72:ff:38:91:5f:2b:2f:e2:13:44:04:5c:3e:da:4f:7d:d2:
35:1a:83:93:48:44:38:76:52:c5:9b:a0:46:9f:c3:4b:1b:13:
83:18:a6:6d:e5:ae:3a:80:5d:1b:37:1a:fb:c3:8a:f7:48:3d:
1f:ac:27:1a:58:30:04:b0:42:7b:65:32:23:99:91:2a:b6:54:
39:cd:58:6d:5c:e8:fb:07:aa:6a:4a:35:0d:e0:b0:f7:e9:c9:
d4:1d:8d:01:bf:f0:49:2f:b7:91:06:cc:ff:b7:d1:92:82:ee:
ae:07:b1:45:a0:92:e8:9a:97:b5:28:2a:47:4b:d9:55:b7:8a:
79:ed:41:fc:19:d9:76:ca:cf:ce:c9:53:74:c8:de:d8:6a:cf:
01:2e:75:b2:79:d9:be:14:7c:0e:49:54:97:cc:c0:c9:0b:87:
20:a6:d3:a5:ff:94:e6:b9:37:2d:b0:27:d1:fc:6f:e8:c0:2b:
07:7c:f4:34:74:1c:69:f1:d1:f5:f4:1e:b8:9d:7c:9b:ec:9d:
08:8e:a4:8b:e3:08:9b:ea:91:d1:13:81:63:b7:6d:02:7e:4b:
3a:bc:11:dd:eb:7e:99:29:c3:09:99:ce:3b:5c:1c:6a:b7:ea:
83:fb:fa:81:5e:6d:ad:1b:9a:15:95:40:f4:aa:7a:23:0e:50:
4a:02:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:50:13 2025 by rpki-client