$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa File: 3133342e3139352e3130302e302f32332d3234203d3e20393933.roa (raw, json) Hash identifier: W6+2vIhq3Dmgm93VGXFLvWBpHc7XFVuzzOpAOglHBoY= Subject key identifier: 42:37:88:59:B8:30:C2:5A:AD:4B:0E:50:F0:E4:97:66:51:C1:C6:1F Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 7C75CA29E59C3D6776076FBB15A4F6336075539C Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa Signing time: Thu 21 Aug 2025 02:52:48 +0000 ROA not before: Thu 21 Aug 2025 02:47:48 +0000 ROA not after: Thu 20 Aug 2026 02:52:48 +0000 asID: 993 IP address blocks: 134.195.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:75:ca:29:e5:9c:3d:67:76:07:6f:bb:15:a4:f6:33:60:75:53:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Aug 21 02:47:48 2025 GMT Not After : Aug 20 02:52:48 2026 GMT Subject: CN=42378859B830C25AAD4B0E50F0E4976651C1C61F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:07:4d:38:be:43:cc:a5:17:73:ca:07:6f: 03:a9:c9:ef:0f:0f:3d:ac:a7:e3:be:f8:77:7d:7a: 76:47:70:e7:ac:bf:9a:71:e4:6e:8b:d8:23:86:a8: 7b:d2:6e:06:4d:12:0f:75:03:91:e9:a9:8c:8a:1e: 43:1b:65:72:84:bd:25:f0:26:82:67:51:46:56:de: 94:6d:1f:37:19:9b:f1:b2:d5:d3:c2:5f:04:5b:5f: ab:c9:63:20:94:4c:d2:b7:18:c1:c9:2a:2e:21:6b: 0e:8d:7d:45:4b:9f:38:c0:54:d6:e9:5e:44:6a:47: 02:2e:81:6b:cf:28:fd:0b:39:23:34:db:7b:3c:46: 1f:52:86:96:8f:5f:32:d6:f0:67:64:33:53:e0:b5: 85:a7:8c:9a:00:9c:75:96:ac:62:fa:48:3f:3f:f4: 22:f8:00:21:2f:5e:65:75:f3:df:9b:6b:49:1c:ac: e5:6a:45:b0:c8:5c:ad:5c:09:05:67:8e:e1:e4:dd: 43:4a:20:64:2a:a0:dc:8a:53:dd:2f:93:dd:8a:36: 3c:0c:86:8f:09:e8:40:6c:73:ce:8a:87:4a:a8:d1: 40:87:7f:2b:8f:16:e0:50:bf:01:ed:8a:4a:a3:09: b0:bd:68:82:b0:94:cf:27:d9:0b:66:d3:cd:84:34: 64:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:88:59:B8:30:C2:5A:AD:4B:0E:50:F0:E4:97:66:51:C1:C6:1F X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.195.100.0/23 Signature Algorithm: sha256WithRSAEncryption c0:3a:e6:da:8b:92:59:e6:00:31:bf:3c:0c:40:19:a8:01:7b: 65:4c:8e:09:b5:25:4a:47:d3:69:3c:9e:20:91:ce:66:97:aa: b9:5f:72:bb:78:e5:12:de:fc:f6:dc:b7:1b:66:d6:e3:68:70: 9e:e6:73:ba:a3:8d:90:02:ff:24:81:67:c0:1b:de:22:34:a2: 97:09:87:9d:4c:19:f6:9a:a1:db:41:07:08:b5:8b:4d:1f:77: 42:dc:b9:66:48:c3:f9:48:ba:f4:22:b1:87:d6:d4:09:c9:af: a3:4f:ef:7d:30:cf:21:29:63:69:e7:ac:8a:ba:8c:48:79:ba: 70:c2:ca:8c:73:71:be:db:9e:2b:29:8d:1e:99:1c:9b:79:e7: ab:af:a1:9e:5e:e7:22:e0:72:e1:86:41:69:99:6d:70:90:4d: bb:6a:1e:35:ca:86:35:f0:fe:40:02:a4:7a:c6:ad:c7:1c:b3: 8d:f3:d8:74:b3:8e:b1:f3:41:2b:83:4d:d5:bf:95:b4:2d:55: 33:d4:67:51:f3:d5:0b:98:da:6d:e2:d3:9a:eb:78:9d:47:65: c0:84:d2:cd:72:7c:8f:c8:fc:4c:1f:01:c5:a3:ed:4b:c2:39: b9:73:79:62:65:bc:e3:db:ee:43:1c:d2:c2:f7:da:a2:9c:21: 1b:4b:c4:c4 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUfHXKKeWcPWd2B2+7FaT2M2B1U5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwODIxMDI0NzQ4WhcNMjYwODIwMDI1MjQ4 WjAzMTEwLwYDVQQDEyg0MjM3ODg1OUI4MzBDMjVBQUQ0QjBFNTBGMEU0OTc2NjUx QzFDNjFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc4HTTi+Q8yl F3PKB28DqcnvDw89rKfjvvh3fXp2R3DnrL+aceRui9gjhqh70m4GTRIPdQOR6amM ih5DG2VyhL0l8CaCZ1FGVt6UbR83GZvxstXTwl8EW1+ryWMglEzStxjBySouIWsO jX1FS584wFTW6V5EakcCLoFrzyj9CzkjNNt7PEYfUoaWj18y1vBnZDNT4LWFp4ya AJx1lqxi+kg/P/Qi+AAhL15ldfPfm2tJHKzlakWwyFytXAkFZ47h5N1DSiBkKqDc ilPdL5PdijY8DIaPCehAbHPOiodKqNFAh38rjxbgUL8B7YpKowmwvWiCsJTPJ9kL ZtPNhDRkkQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFEI3iFm4MMJarUsOUPDkl2ZR wcYfMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzMzM0MmUzMTM5MzUyZTMxMzAz MDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM5MzkzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYbDZDAN BgkqhkiG9w0BAQsFAAOCAQEAwDrm2ouSWeYAMb88DEAZqAF7ZUyOCbUlSkfTaTye IJHOZpequV9yu3jlEt789ty3G2bW42hwnuZzuqONkAL/JIFnwBveIjSilwmHnUwZ 9pqh20EHCLWLTR93Qty5ZkjD+Ui69CKxh9bUCcmvo0/vfTDPISljaeesirqMSHm6 cMLKjHNxvtueKymNHpkcm3nnq6+hnl7nIuBy4YZBaZltcJBNu2oeNcqGNfD+QAKk esatxxyzjfPYdLOOsfNBK4NN1b+VtC1VM9RnUfPVC5jabeLTmut4nUdlwITSzXJ8 j8j8TB8BxaPtS8I5uXN5YmW849vuQxzSwvfaopwhG0vExA== -----END CERTIFICATE-----Generated at Sat Aug 23 21:25:39 2025 by rpki-client