$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203136353039.roa File: 32332e3234372e3133362e302f32322d3234203d3e203136353039.roa (raw, json) Hash identifier: MGlAFFZLsmjeeU4GWmO+oS0zXKNn2qWM84nq0ERmemg= Subject key identifier: 02:BA:6B:4E:A2:91:AE:F0:D6:34:72:77:4D:7C:6C:2A:BD:7A:05:A7 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 305F6E7866D770044FD3B8DD705CDA784D403685 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203136353039.roa Signing time: Mon 16 Jun 2025 08:52:27 +0000 ROA not before: Mon 16 Jun 2025 08:47:27 +0000 ROA not after: Mon 15 Jun 2026 08:52:27 +0000 asID: 16509 IP address blocks: 23.247.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5f:6e:78:66:d7:70:04:4f:d3:b8:dd:70:5c:da:78:4d:40:36:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:27 2025 GMT Not After : Jun 15 08:52:27 2026 GMT Subject: CN=02BA6B4EA291AEF0D63472774D7C6C2ABD7A05A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:e1:0f:30:fb:dd:96:28:25:8a:e2:c1:38: 43:19:b1:60:25:26:2b:fe:ad:76:98:40:29:4a:de: 86:17:ab:fa:07:54:14:7a:af:e1:ca:6b:99:a2:09: ed:19:bc:c1:08:ee:2c:a8:e5:97:10:26:c2:dd:ce: 97:bf:32:fd:fe:1e:cf:f5:55:7d:21:52:8f:e1:1d: ff:28:87:8e:91:ff:a5:64:d3:84:ee:dc:0c:c4:e1: ca:55:14:7c:e4:62:b1:0e:6a:ae:0c:0a:6d:ed:b9: 6b:df:98:40:41:4d:c5:68:1f:ae:3a:f2:ac:03:a7: ff:f4:f9:1e:f9:7b:d0:d0:5d:ec:c6:bf:6a:40:c4: da:51:95:5b:ee:ef:97:c5:2f:37:41:d1:b8:44:db: f8:e4:1b:66:47:0e:1c:85:c9:77:b5:27:52:4a:21: 55:ff:79:f2:4a:58:dd:2f:68:0e:50:d2:e8:9c:c0: 40:c8:20:b8:be:65:b0:cf:92:eb:3d:13:4f:5d:32: 2f:26:e3:ff:88:72:bb:26:35:3e:62:e5:00:87:cc: 23:36:ff:8f:44:b0:74:ef:99:69:cb:2d:0e:46:c0: dc:3e:de:5e:25:f4:03:00:68:ea:ae:2c:be:82:0b: d6:59:80:9e:94:78:40:d4:ae:ab:09:29:ec:c1:6f: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BA:6B:4E:A2:91:AE:F0:D6:34:72:77:4D:7C:6C:2A:BD:7A:05:A7 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.247.136.0/22 Signature Algorithm: sha256WithRSAEncryption 81:d0:3a:45:54:f8:6f:69:fb:eb:08:14:d5:1d:62:8a:17:d4: b9:de:bc:32:2d:8c:e9:5c:c1:b1:bf:ad:76:dd:ea:56:91:7b: 1e:28:91:f0:b2:d8:5b:bb:89:93:f0:5f:a7:fa:c9:a6:54:d1: a4:87:3b:83:10:93:e9:b0:d8:52:13:39:80:2e:32:ba:4d:75: db:f4:5b:fa:5b:8d:c7:2b:9f:bc:40:84:05:ab:98:0d:a8:9f: e6:ed:70:52:b7:08:12:51:f4:a0:24:05:95:50:23:44:9d:fc: 53:6f:68:bb:56:10:62:39:f5:f0:66:bc:fe:e8:f9:b3:71:62: 79:59:b0:02:63:96:98:4f:d7:5e:a1:79:f2:f6:26:65:ea:e3: a2:12:1d:6e:f2:5e:53:83:9c:20:62:2c:ad:f7:60:28:62:1b: 83:7c:58:ad:d4:08:23:6f:64:c1:65:54:4e:30:f2:54:2e:71: f5:4f:b6:4f:0a:b1:cc:6c:2a:83:3b:fa:89:f4:e5:f5:81:ad: 92:5f:0f:20:92:5a:11:07:36:b9:ef:ba:9d:4d:bb:0b:5e:3e: 77:82:79:59:1c:74:d3:49:22:0b:95:f8:ad:7b:11:51:88:01: 57:c3:c4:a4:ae:b2:06:f2:45:8a:47:41:c0:69:81:a8:30:0c: b9:c7:af:f5 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUMF9ueGbXcARP07jdcFzaeE1ANoUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI3WhcNMjYwNjE1MDg1MjI3 WjAzMTEwLwYDVQQDEygwMkJBNkI0RUEyOTFBRUYwRDYzNDcyNzc0RDdDNkMyQUJE N0EwNUE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDhDzD73ZYo JYriwThDGbFgJSYr/q12mEApSt6GF6v6B1QUeq/hymuZogntGbzBCO4sqOWXECbC 3c6XvzL9/h7P9VV9IVKP4R3/KIeOkf+lZNOE7twMxOHKVRR85GKxDmquDApt7blr 35hAQU3FaB+uOvKsA6f/9Pke+XvQ0F3sxr9qQMTaUZVb7u+XxS83QdG4RNv45Btm Rw4chcl3tSdSSiFV/3nySljdL2gOUNLonMBAyCC4vmWwz5LrPRNPXTIvJuP/iHK7 JjU+YuUAh8wjNv+PRLB075lpyy0ORsDcPt5eJfQDAGjqriy+ggvWWYCelHhA1K6r CSnswW+1ewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAK6a06ika7w1jRyd018bCq9 egWnMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzMzJlMzIzNDM3MmUzMTMzMzYy ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/eI MA0GCSqGSIb3DQEBCwUAA4IBAQCB0DpFVPhvafvrCBTVHWKKF9S53rwyLYzpXMGx v6123epWkXseKJHwsthbu4mT8F+n+smmVNGkhzuDEJPpsNhSEzmALjK6TXXb9Fv6 W43HK5+8QIQFq5gNqJ/m7XBStwgSUfSgJAWVUCNEnfxTb2i7VhBiOfXwZrz+6Pmz cWJ5WbACY5aYT9deoXny9iZl6uOiEh1u8l5Tg5wgYiyt92AoYhuDfFit1Agjb2TB ZVROMPJULnH1T7ZPCrHMbCqDO/qJ9OX1ga2SXw8gkloRBza577qdTbsLXj53gnlZ HHTTSSILlfitexFRiAFXw8SkrrIG8kWKR0HAaYGoMAy5x6/1 -----END CERTIFICATE-----Generated at Wed Jul 2 20:15:21 2025 by rpki-client