This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
File:                     xQNPu84HmaDyhoO9O6M5qb1kW9w.cer (raw, json)
Hash identifier:          hEx+9U6AGo1gy3EcpG93Jkvg1dcp8cbcf3OiV773VUY=
Subject key identifier:   C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       5D76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Sat 15 Nov 2025 01:42:29 +0000
Certificate not after:    Sun 15 Nov 2026 01:30:02 +0000
Subordinate resources:    IP: 61.114.64.0/20
                          IP: 61.195.128.0/20
                          IP: 120.50.224.0/19
                          IP: 120.72.0.0/20
                          IP: 202.180.192.0/20
                          IP: 218.231.224.0/20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Nov 2025 17:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23926 (0x5d76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Nov 15 01:42:29 2025 GMT
            Not After : Nov 15 01:30:02 2026 GMT
        Subject: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:d9:c2:0c:56:a0:b8:7c:49:2d:29:27:ce:
                    cf:dc:28:80:46:e6:7a:61:2b:0b:fb:c1:b6:4c:a3:
                    07:1e:2e:70:71:36:b4:82:64:09:b6:4a:13:46:1e:
                    26:47:49:c7:fd:d4:93:5d:6b:58:3e:64:24:a9:b6:
                    fa:fd:04:f9:85:a2:8a:73:ea:ad:d0:f1:82:28:09:
                    55:fe:5e:22:f9:c8:7a:24:7d:b7:ef:77:54:07:d6:
                    5e:1b:01:cc:04:bb:30:67:d1:c1:e3:b9:21:60:37:
                    d7:79:20:8d:55:37:a3:a8:62:88:22:32:53:4d:88:
                    bd:24:76:e1:9c:5d:f3:8e:45:c2:44:9a:9f:ac:a2:
                    4a:6a:ee:aa:06:71:63:50:b4:ad:74:48:fc:ac:2a:
                    36:74:46:2b:e2:ae:5b:53:63:96:59:7b:37:1c:c4:
                    ca:3f:59:f2:4e:17:e6:1b:7f:f4:fe:4f:1c:93:f0:
                    9b:df:60:7b:0c:d2:76:ad:7d:27:1c:6a:50:36:49:
                    22:84:f2:ab:86:c7:5a:33:15:c7:af:c3:e4:e3:f7:
                    d9:70:53:b8:26:75:1a:4b:93:56:ec:21:65:9a:e4:
                    79:34:b0:51:65:bd:7d:bc:18:69:6a:1a:5f:f4:4f:
                    6b:cc:7c:2a:7b:16:91:cb:d1:17:c4:d5:5d:6e:bf:
                    ae:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.64.0/20
                  61.195.128.0/20
                  120.50.224.0/19
                  120.72.0.0/20
                  202.180.192.0/20
                  218.231.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:4c:ea:b7:54:6d:1c:ca:60:00:15:92:2a:e1:c4:5d:2f:ff:
         5f:01:42:89:57:9a:ae:46:dd:c6:70:ce:f8:fc:9c:63:0e:73:
         81:c0:b5:6d:6c:a3:46:64:d6:40:17:9e:9a:b4:bc:ce:d0:27:
         78:d9:2e:4e:a9:2d:86:6d:fb:29:f6:1f:ae:61:7d:62:6d:1f:
         d2:13:65:eb:16:0d:df:6e:a7:a3:b3:b6:64:28:25:ad:d2:74:
         26:63:f7:f0:0f:f0:8a:c3:8e:24:95:95:d9:7b:6b:37:2b:90:
         0f:c2:9f:7b:b4:75:32:db:53:e2:72:ce:40:29:ae:c5:42:f4:
         00:6f:1e:eb:ea:32:13:96:ce:46:68:48:aa:b1:a4:c6:b1:ae:
         4d:6d:7c:96:46:96:4c:50:2f:f7:6b:17:db:93:c6:0d:ef:c2:
         3d:dd:6d:ee:c1:e7:f5:36:65:88:3c:43:40:48:8a:53:7e:00:
         a6:87:7c:9e:81:92:3b:06:b4:0f:28:48:ba:9b:38:f7:c1:61:
         15:73:b4:46:ac:9c:6e:44:31:38:01:0c:d6:61:9a:43:a3:81:
         10:86:92:a5:7a:8d:41:61:08:8b:eb:9b:48:d3:16:9b:86:38:
         d5:fa:af:cc:65:dd:d2:72:d3:52:75:6f:35:c9:60:1d:3a:5a:
         4b:8c:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:05:33 2025 by rpki-client