This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer
File:                     hTvMypswbARZZY4oio0_3nUbT2s.cer (raw, json)
Hash identifier:          QYYkqtww8wiwOSyvP4f9FkNiP/jlWc5wcTuR+G4GEGA=
Subject key identifier:   85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E
Certificate issuer:       /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
Certificate serial:       0281
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:41:56 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 194.91.0.0/16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 15:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E
        Validity
            Not Before: Nov 15 01:41:56 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=853BCCCA9B306C0459658E288A8D3FDE751B4F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:ed:cf:c8:53:34:1f:03:ff:11:67:8c:13:
                    71:8b:1c:7f:60:a9:8f:1f:1b:f0:d6:d4:75:c2:23:
                    77:86:a1:fd:ed:d7:bd:eb:17:5a:0c:0b:3d:96:26:
                    27:d7:55:21:f3:23:fe:8b:99:30:ac:f4:33:7a:53:
                    e8:6d:ea:32:3b:9b:f1:ff:7a:75:63:40:d1:af:23:
                    6a:0c:0f:79:58:81:7a:28:dc:91:1b:86:55:58:08:
                    c0:e5:34:32:b7:d4:c7:16:f3:c2:8d:3b:6e:6f:74:
                    53:cb:27:58:c6:47:e5:39:c5:c7:ba:14:84:8b:d3:
                    cd:31:2d:c6:ff:e4:c8:c0:3a:1d:0d:99:d7:09:55:
                    fe:6f:51:20:be:a7:c9:73:fb:9d:99:d1:85:00:14:
                    3e:71:29:f8:dd:6e:6f:64:d1:c6:d8:c4:c9:da:12:
                    0e:c9:70:02:65:8e:6f:82:f8:09:5a:9b:01:8a:21:
                    50:25:69:6e:dd:c9:a2:b5:f5:d9:fe:ae:6e:34:e6:
                    b1:59:55:27:ae:01:62:91:f1:36:f7:35:fe:3d:33:
                    b4:28:e8:d9:11:8d:b6:04:c1:a0:4e:f2:11:c6:6f:
                    f5:6a:1d:05:8b:4e:2b:ea:23:d1:c9:d8:eb:9b:aa:
                    d6:96:94:c4:a8:3d:91:9a:29:15:de:51:02:d4:77:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
            X509v3 Authority Key Identifier:
                keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ca:72:ff:38:91:5f:2b:2f:e2:13:44:04:5c:3e:da:4f:7d:d2:
         35:1a:83:93:48:44:38:76:52:c5:9b:a0:46:9f:c3:4b:1b:13:
         83:18:a6:6d:e5:ae:3a:80:5d:1b:37:1a:fb:c3:8a:f7:48:3d:
         1f:ac:27:1a:58:30:04:b0:42:7b:65:32:23:99:91:2a:b6:54:
         39:cd:58:6d:5c:e8:fb:07:aa:6a:4a:35:0d:e0:b0:f7:e9:c9:
         d4:1d:8d:01:bf:f0:49:2f:b7:91:06:cc:ff:b7:d1:92:82:ee:
         ae:07:b1:45:a0:92:e8:9a:97:b5:28:2a:47:4b:d9:55:b7:8a:
         79:ed:41:fc:19:d9:76:ca:cf:ce:c9:53:74:c8:de:d8:6a:cf:
         01:2e:75:b2:79:d9:be:14:7c:0e:49:54:97:cc:c0:c9:0b:87:
         20:a6:d3:a5:ff:94:e6:b9:37:2d:b0:27:d1:fc:6f:e8:c0:2b:
         07:7c:f4:34:74:1c:69:f1:d1:f5:f4:1e:b8:9d:7c:9b:ec:9d:
         08:8e:a4:8b:e3:08:9b:ea:91:d1:13:81:63:b7:6d:02:7e:4b:
         3a:bc:11:dd:eb:7e:99:29:c3:09:99:ce:3b:5c:1c:6a:b7:ea:
         83:fb:fa:81:5e:6d:ad:1b:9a:15:95:40:f4:aa:7a:23:0e:50:
         4a:02:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:50:13 2025 by rpki-client