This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
File:                     oZSoPJxvQE959c3rjP4RR_VPIeA.cer (raw, json)
Hash identifier:          evJ0Ei5Gm6grDSY/j6gMuUkiEkFzA2KDLKfWp/DX/RU=
Subject key identifier:   A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5C17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:32:00 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 2001:f58::/32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23575 (0x5c17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:32:00 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:fe:9c:da:33:e0:f1:f3:a0:f3:28:ea:5b:
                    80:85:99:14:8d:61:fb:5a:4d:ec:dd:ee:80:00:88:
                    f4:ce:ea:98:43:e4:49:66:95:1c:a0:28:53:4d:af:
                    11:7c:d0:53:17:06:1f:03:43:58:5f:17:25:54:df:
                    ad:fc:92:01:9f:a5:17:58:76:1d:80:38:df:a4:79:
                    ee:70:66:6b:56:06:ec:dd:ee:61:15:32:4d:d8:28:
                    ae:bb:33:16:1a:85:06:7e:f8:c7:b8:48:cf:eb:a4:
                    87:7c:bd:5d:0e:bc:75:90:74:e3:36:59:cd:58:c0:
                    23:6d:05:3e:c7:74:6c:c1:66:52:a5:11:14:27:99:
                    89:ac:5e:ab:dd:c4:27:4b:e6:c9:e9:b6:18:b2:ca:
                    19:7c:cb:26:f7:4f:7c:72:b1:34:cc:35:2c:8e:d0:
                    ce:58:29:aa:af:35:81:5e:e5:34:b8:40:4d:96:12:
                    ea:5b:6c:9b:db:20:d2:00:97:55:e0:39:59:02:c2:
                    84:b6:c9:9b:01:9b:55:02:22:b7:c7:eb:e8:73:b0:
                    1e:96:00:3b:10:0c:5d:72:4d:45:5c:e8:a7:b2:f4:
                    38:c0:3d:02:05:f9:b9:5b:0e:ac:34:e2:b4:dc:fc:
                    c5:df:1c:0a:88:eb:e3:a2:9c:ea:08:e2:f5:dc:e7:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f58::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:27:3a:8d:7d:a4:1b:36:3f:e0:f2:77:df:8e:fa:8f:0a:73:
         71:43:ea:1b:86:74:0c:4e:a2:7f:6d:97:9e:94:68:fa:01:b6:
         ba:09:8e:0a:5f:07:a9:a0:84:83:63:29:cd:8a:e3:f2:d3:8e:
         23:81:2e:db:9e:30:72:69:ff:a3:f5:c7:a2:ab:74:34:75:b0:
         9e:d2:6b:54:44:44:a9:68:fb:7f:19:63:1a:06:10:9f:94:52:
         88:e8:5b:1f:04:8f:6e:d2:9b:2d:bf:01:2e:38:b1:fc:c9:04:
         20:c5:89:e5:23:a5:89:13:65:ce:2e:e6:7a:6b:f5:c1:9f:5b:
         a5:3b:39:ed:a6:14:d9:ee:10:02:4b:cc:2a:15:b5:01:a3:54:
         ee:74:55:c9:f5:76:c5:94:05:70:6e:8e:62:2e:b6:3f:64:61:
         f1:3b:55:b1:56:0d:2b:b0:12:3a:49:49:70:ec:29:d7:50:b7:
         60:f7:b3:ab:0c:c5:2d:b9:a8:f3:53:a3:b7:1e:d2:7b:48:6d:
         c3:d7:f3:61:1f:cb:8b:24:05:c1:4e:87:a8:81:be:64:86:b3:
         d0:b9:4d:94:12:12:32:24:8f:32:ab:e9:14:42:f2:3a:c5:47:
         80:dc:5f:04:ec:12:6e:4a:e5:5e:70:5f:a9:e3:05:ee:6f:f9:
         8d:9f:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:06:23 2025 by rpki-client