This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
File: qd58EzgSN8W4mNWiTyyabLPBlxs.cer (raw, json)
Hash identifier: 1fSV5gOm/kU/SezisY9TEQdMYFc9vbTTVS/HJZnEmRo=
Subject key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 5C43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Sat 15 Nov 2025 01:33:18 +0000
Certificate not after: Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources: IP: 49.128.24.0/21
IP: 49.128.96.0/22
IP: 203.201.52.0/22
IP: 211.15.112.0/20
IP: 211.19.224.0/19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 17:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23619 (0x5c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Nov 15 01:33:18 2025 GMT
Not After : Nov 15 01:30:02 2026 GMT
Subject: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:ee:dc:28:65:f0:e1:9f:86:cd:9f:f1:32:
34:37:97:d6:7b:9f:7b:02:ed:d3:42:c6:72:28:fa:
7a:68:c9:85:6c:f4:00:62:17:42:06:76:39:42:0d:
25:0a:d2:d3:a9:72:e0:10:87:59:a5:03:86:18:60:
79:4c:e3:78:89:6c:05:5e:82:f4:69:9f:46:d0:62:
03:23:9c:6d:48:40:02:f9:fe:c6:cd:c0:be:20:45:
a5:3a:3a:58:6c:41:f3:e1:54:5a:00:f6:8d:88:35:
78:e3:75:af:33:d9:e0:a2:ad:1c:24:52:f8:99:f4:
31:9f:d2:d5:1a:33:a1:c8:eb:5f:bc:f5:45:1d:47:
95:65:80:5f:b4:48:9f:34:87:97:5c:af:d8:15:17:
39:2b:71:61:79:ea:fe:2c:34:18:29:f0:1d:66:fd:
42:20:67:c4:a4:d7:02:c2:10:6d:4b:3c:9e:e8:ff:
bd:5d:27:db:42:f2:83:67:21:70:37:f9:71:8d:2a:
2f:d9:26:80:87:78:21:f3:e3:44:9f:ed:f8:14:a2:
12:83:3d:58:95:2a:a0:6a:0c:d6:ad:62:96:b4:aa:
49:17:1e:49:37:d1:e9:2e:d5:b0:30:a4:8c:da:6f:
86:70:74:d4:ac:c8:b8:4c:29:6f:52:92:bb:a3:18:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.24.0/21
49.128.96.0/22
203.201.52.0/22
211.15.112.0/20
211.19.224.0/19
Signature Algorithm: sha256WithRSAEncryption
83:5f:76:f4:71:01:76:e6:ef:e8:f2:39:f5:6f:1f:1c:07:20:
e2:7e:18:d4:8e:ed:7f:20:a5:6e:55:be:67:ea:9b:79:df:06:
43:3d:db:61:7a:86:63:de:66:16:58:af:b7:3d:3a:34:9c:0a:
37:c9:77:42:95:36:76:e9:bd:db:fa:59:7f:9e:45:e7:74:7a:
a2:c8:d4:0f:5a:9f:7f:54:87:77:d3:cb:5a:04:e0:28:52:87:
db:bd:d7:52:e0:1d:36:f1:15:2e:2c:34:ca:32:6e:52:36:b8:
c4:65:95:ba:7f:6f:8f:54:7f:2d:0a:ab:42:db:95:13:e0:84:
d6:f7:9b:58:b6:c6:e1:3f:7a:8c:74:e6:4a:9b:ed:b3:dc:b4:
76:83:5a:75:ea:77:2e:bb:70:19:cd:ca:38:ae:95:04:4a:92:
0d:c6:a5:bd:86:40:ba:72:fc:53:20:c2:fc:58:c6:6c:cd:96:
07:ca:d6:2a:2c:45:b6:aa:90:1f:cc:98:c8:f7:10:54:f5:18:
f7:cf:8c:3f:2a:27:5d:f5:96:e2:e6:e5:1b:cb:dc:40:43:ff:
31:34:95:60:97:d0:15:e5:e4:16:c4:1a:50:37:2d:23:06:d6:
41:e9:40:8d:ad:b5:de:14:7e:67:6c:91:a4:a4:fe:1c:4e:22:
97:4f:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:06:19 2025 by rpki-client