This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer File: ic9cKvpbV2V3NRxBmQGNRM3C1to.cer (raw, json) Hash identifier: CrKOB8szI8bjadHIPs6afc8295am8X3CGCKBV29AR1Q= Subject key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:35:36 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 119.63.112.0/20 IP: 153.125.0.0/17 IP: 182.255.64.0/20 IP: 202.53.112.0/20 IP: 202.129.176.0/21 IP: 202.216.128.0/19 IP: 202.224.112.0/20 IP: 203.141.112.0/20 IP: 210.1.144.0/20 IP: 219.101.96.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23699 (0x5c93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:35:36 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:50:d1:dc:ec:2e:37:aa:77:67:a6:1c:49: f2:59:3b:e5:2e:47:23:18:d4:ad:75:85:6f:31:2c: 4a:88:e4:88:21:a2:4e:d1:95:8c:6c:70:3c:7d:8d: 3b:2c:44:40:28:56:59:59:84:82:d8:fb:54:a0:2c: 10:00:b9:ee:5e:07:d6:98:5b:de:85:5e:49:8c:cb: ea:eb:b8:b9:7a:ad:6c:0a:1e:bc:4b:eb:fc:f8:4e: 21:d9:65:08:be:13:73:3b:35:71:90:bf:0d:3b:d2: 51:e7:73:fc:2c:80:08:66:a5:6d:f1:11:99:57:a7: 83:87:06:d0:89:16:e7:f1:29:13:20:0c:6f:ef:9d: 1c:36:be:7a:33:1b:b2:19:43:c7:03:f0:9a:23:79: e0:20:76:b5:bb:9e:23:47:39:f1:72:43:2d:50:2e: d3:5c:d7:a2:10:23:e5:eb:57:83:db:35:6e:e2:79: 4c:bf:56:cc:ae:f9:1f:51:bf:47:5d:a1:fa:ee:fc: c6:36:aa:0b:20:52:56:ea:59:1c:93:b3:23:76:b1: d9:93:a0:eb:1d:17:f1:98:7b:58:95:ac:54:a9:db: 3d:f6:cd:3e:af:14:48:0c:81:44:43:5a:26:ac:1d: c2:50:da:1e:a1:7f:82:97:ae:57:eb:1a:a5:31:4c: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.63.112.0/20 153.125.0.0/17 182.255.64.0/20 202.53.112.0/20 202.129.176.0/21 202.216.128.0/19 202.224.112.0/20 203.141.112.0/20 210.1.144.0/20 219.101.96.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:80:2d:72:7f:60:6f:68:a1:f6:65:6f:53:c3:68:ad:1b:90: 62:a4:01:d8:1a:bf:c2:34:8b:10:16:bc:5c:8f:08:11:27:49: 35:53:b7:d7:1d:78:b4:d5:4a:5c:1d:27:e9:2c:f6:80:c5:12: a6:f9:d3:f7:60:3d:79:94:3e:2e:f0:f2:c8:dd:3b:9e:12:54: 46:7f:44:45:f3:3d:8a:4a:e2:60:97:e7:ac:ae:68:99:26:fe: d9:0c:26:33:3d:68:ef:76:6f:4c:9c:ec:88:9a:f9:fd:db:53: 91:6b:e3:de:05:75:97:e1:96:40:35:88:0d:16:d6:0b:21:89: 6c:38:18:e3:f0:db:14:dc:ff:cf:04:5d:81:57:c7:f1:cd:5d: fa:f9:90:1c:a6:5a:0e:83:f2:21:24:29:a2:23:14:b2:32:53: f5:b7:5c:81:16:58:ef:b5:f7:41:e0:c2:47:55:79:76:94:fe: 3d:8c:f2:32:2b:db:b4:4f:f4:68:a7:22:1b:3e:c6:44:ec:a9: e8:60:23:ba:28:72:40:16:b4:e5:53:cd:6e:54:4b:84:7b:d8: 9e:b0:30:6c:1a:d8:48:e4:c2:0d:fa:25:c6:29:37:7c:b2:ba: d8:8e:aa:67:1d:aa:2e:37:ae:46:41:06:5c:f3:5b:98:a2:b2: b3:ec:5d:6b -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICXJMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxMzUzNloXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoODlDRjVDMkFGQTVCNTc2NTc3MzUxQzQxOTkwMThENDRDREMyRDZE QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALiDUNHc7C43qndnphxJ 8lk75S5HIxjUrXWFbzEsSojkiCGiTtGVjGxwPH2NOyxEQChWWVmEgtj7VKAsEAC5 7l4H1phb3oVeSYzL6uu4uXqtbAoevEvr/PhOIdllCL4Tczs1cZC/DTvSUedz/CyA CGalbfERmVeng4cG0IkW5/EpEyAMb++dHDa+ejMbshlDxwPwmiN54CB2tbueI0c5 8XJDLVAu01zXohAj5etXg9s1buJ5TL9WzK75H1G/R12h+u78xjaqCyBSVupZHJOz I3ax2ZOg6x0X8Zh7WJWsVKnbPfbNPq8USAyBRENaJqwdwlDaHqF/gpeuV+sapTFM hlMCAwEAAaOCArwwggK4MB0GA1UdDgQWBBSJz1wq+ltXZXc1HEGZAY1EzcLW2jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8zNzMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM3My9pYzljS3Zw YlYyVjNOUnhCbVFHTlJNM0MxdG8ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEdz9wAwQHmX0AAwQEtv9AAwQE yjVwAwQDyoGwAwQFytiAAwQEyuBwAwQEy41wAwQE0gGQAwQE22VgMA0GCSqGSIb3 DQEBCwUAA4IBAQB6gC1yf2BvaKH2ZW9Tw2itG5BipAHYGr/CNIsQFrxcjwgRJ0k1 U7fXHXi01UpcHSfpLPaAxRKm+dP3YD15lD4u8PLI3TueElRGf0RF8z2KSuJgl+es rmiZJv7ZDCYzPWjvdm9MnOyImvn921ORa+PeBXWX4ZZANYgNFtYLIYlsOBjj8NsU 3P/PBF2BV8fxzV36+ZAcploOg/IhJCmiIxSyMlP1t1yBFljvtfdB4MJHVXl2lP49 jPIyK9u0T/RopyIbPsZE7KnoYCO6KHJAFrTlU81uVEuEe9iesDBsGthI5MIN+iXG KTd8srrYjqpnHaouN65GQQZc81uYorKz7F1r -----END CERTIFICATE-----Generated at Sat Nov 22 21:05:35 2025 by rpki-client