This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.cer File: kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.cer (raw, json) Hash identifier: 6UegZLxE+fM+/qxMF2Xq9FtcOe5Y3tlKx2RJgzeG92Q= Subject key identifier: 90:05:EF:0B:3D:BE:FD:95:6A:31:66:34:67:95:CD:B5:3D:5D:9B:62 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5D85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Nov 2025 01:42:53 +0000 Certificate not after: Sun 15 Nov 2026 01:30:02 +0000 Subordinate resources: IP: 110.172.48.0/22 IP: 210.167.64.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23941 (0x5d85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:42:53 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=9005EF0B3DBEFD956A3166346795CDB53D5D9B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:b4:70:5d:da:8e:2a:25:1e:dd:50:d5:85: 9a:76:95:59:22:65:9e:2b:8d:21:03:5a:38:3d:b0: 3c:1d:d5:cb:a9:53:23:e0:22:20:98:7f:a3:8f:eb: a0:78:fb:13:f4:e7:97:31:25:61:4a:c7:11:47:16: ac:a1:fd:61:4e:97:2a:59:4f:bb:13:cb:4a:4b:57: 6b:43:10:93:e3:8b:5a:80:d4:15:fd:72:48:09:3c: bb:79:1d:10:bb:3b:9e:57:ae:2a:7d:54:ca:92:33: 64:97:c1:a8:59:0f:9b:b8:8b:f9:3e:b6:de:4d:3c: c5:ef:1a:83:50:4f:f1:ed:c4:75:3c:a2:cc:e0:55: fb:21:d1:ec:64:a7:45:45:4d:55:f0:91:cd:a6:20: 86:cc:7a:85:3a:23:d0:6d:dd:b0:cf:79:72:1a:9b: ba:8c:65:b1:f9:c1:ac:31:88:7d:7f:1f:04:83:69: d4:cc:4d:00:67:92:1c:6f:ab:35:c4:30:97:cc:84: 45:92:87:cf:56:6d:08:73:a1:7f:24:90:19:c0:d0: 9a:87:5b:80:4f:e0:9f:96:58:e2:94:71:e6:e7:b1: 0c:80:2c:b3:62:b0:9c:3f:f5:e3:27:ee:61:dc:c3: 22:1c:c2:a4:ac:72:a0:09:0c:6b:5a:68:79:d5:b3: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:EF:0B:3D:BE:FD:95:6A:31:66:34:67:95:CD:B5:3D:5D:9B:62 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.172.48.0/22 210.167.64.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:97:52:03:f3:3d:c1:1b:6e:0d:49:0f:b5:56:8f:c9:15:61: 2b:4a:c0:b4:8d:14:fb:3c:64:20:a8:17:c9:11:79:4b:9f:3e: 6e:55:b5:4e:77:49:d3:00:72:38:bf:36:4d:a1:95:77:da:2b: cd:53:7e:d5:62:eb:f2:d8:cd:38:98:cf:d7:73:d5:c2:f2:95: bd:4a:a7:25:ef:9a:13:e7:cc:09:98:9b:d6:50:d3:ea:f1:d5: db:e9:9b:91:c1:7f:c3:d1:07:91:0c:ce:e4:c2:1d:e8:d7:9b: 31:b6:2f:a8:99:a1:03:6a:24:7e:7b:83:9a:88:ca:87:f6:34: 25:e9:c1:5b:38:7e:67:0e:30:92:09:07:3f:a8:f7:05:85:fb: 38:68:df:98:1c:f3:50:1b:f6:46:70:e9:ab:38:32:69:fd:b3: 56:e5:13:9c:61:13:1e:f5:85:ca:41:08:f1:d9:18:33:4a:9b: 53:85:7f:ca:1d:d6:ae:3a:c6:11:9a:87:c3:2c:a5:1c:2c:2f: 6b:a0:30:59:bf:e7:d1:cc:b8:fb:e6:a2:10:4c:f4:ff:e4:73: 5b:16:86:fb:51:55:85:a6:ab:a5:e7:bd:9c:bb:c6:24:39:b7: 9d:75:2d:15:4d:62:9d:89:3d:ed:78:1a:de:47:3c:96:97:89: f0:0d:00:85 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICXYUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTExNTAxNDI1M1oXDTI2MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoOTAwNUVGMEIzREJFRkQ5NTZBMzE2NjM0Njc5NUNEQjUzRDVEOUI2 MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALzGtHBd2o4qJR7dUNWF mnaVWSJlniuNIQNaOD2wPB3Vy6lTI+AiIJh/o4/roHj7E/TnlzElYUrHEUcWrKH9 YU6XKllPuxPLSktXa0MQk+OLWoDUFf1ySAk8u3kdELs7nleuKn1UypIzZJfBqFkP m7iL+T623k08xe8ag1BP8e3EdTyizOBV+yHR7GSnRUVNVfCRzaYghsx6hToj0G3d sM95chqbuoxlsfnBrDGIfX8fBINp1MxNAGeSHG+rNcQwl8yERZKHz1ZtCHOhfySQ GcDQmodbgE/gn5ZY4pRx5uexDIAss2KwnD/14yfuYdzDIhzCpKxyoAkMa1poedWz U/cCAwEAAaOCApEwggKNMB0GA1UdDgQWBBSQBe8LPb79lWoxZjRnlc21PV2bYjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMjUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTI1L2tB WHZDejItX1pWcU1XWTBaNVhOdFQxZG0ySS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJurDADBAXSp0AwDQYJ KoZIhvcNAQELBQADggEBAC2XUgPzPcEbbg1JD7VWj8kVYStKwLSNFPs8ZCCoF8kR eUufPm5VtU53SdMAcji/Nk2hlXfaK81TftVi6/LYzTiYz9dz1cLylb1KpyXvmhPn zAmYm9ZQ0+rx1dvpm5HBf8PRB5EMzuTCHejXmzG2L6iZoQNqJH57g5qIyof2NCXp wVs4fmcOMJIJBz+o9wWF+zho35gc81Ab9kZw6as4Mmn9s1blE5xhEx71hcpBCPHZ GDNKm1OFf8od1q46xhGah8MspRwsL2ugMFm/59HMuPvmohBM9P/kc1sWhvtRVYWm q6XnvZy7xiQ5t511LRVNYp2JPe14Gt5HPJaXifANAIU= -----END CERTIFICATE-----Generated at Sat Nov 22 21:06:26 2025 by rpki-client