$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa File: 323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa (raw, json) Hash identifier: s1oWR8ueC75w3SObpbmb2aRQvvN48wOJduCLxjDZn44= Subject key identifier: 31:A1:D7:25:07:36:E0:68:44:EA:BA:2E:5C:CE:F4:7C:23:69:99:A2 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 72591435011EFE668CA8B43F0501D491A4C58805 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa Signing time: Mon 16 Jun 2025 08:52:22 +0000 ROA not before: Mon 16 Jun 2025 08:47:22 +0000 ROA not after: Mon 15 Jun 2026 08:52:22 +0000 asID: 141706 IP address blocks: 2602:feda:3a8::/45 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:59:14:35:01:1e:fe:66:8c:a8:b4:3f:05:01:d4:91:a4:c5:88:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:22 2025 GMT Not After : Jun 15 08:52:22 2026 GMT Subject: CN=31A1D7250736E06844EABA2E5CCEF47C236999A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e4:91:18:86:3e:5b:6b:9f:d7:3f:56:f3:67: 0d:73:32:14:13:a6:f5:3e:e1:79:2c:94:5a:b0:19: 4d:55:cd:a1:1b:84:f4:de:c9:04:e2:63:13:b8:d1: 4e:fa:e8:97:af:f4:c6:cf:8a:31:b6:52:19:cb:5c: 09:39:1b:53:fe:8a:34:9f:78:f2:00:b4:c2:ec:f6: ef:81:ad:45:81:f2:0b:86:47:c7:74:92:9d:b2:de: 27:39:7c:dd:10:ce:09:1a:f8:90:9d:d1:22:81:e9: 84:e4:e4:3a:c5:71:08:31:47:dd:76:48:6b:36:46: 88:af:ce:88:99:aa:8d:16:af:c9:ec:f8:29:de:40: 7b:a6:15:93:82:a9:12:43:8d:b3:77:49:91:9e:94: 16:de:b7:93:33:c6:d9:9d:36:02:4f:de:c2:4c:53: 02:b6:88:d8:2e:cf:46:a6:66:c6:57:70:f4:0c:ef: 38:de:ed:08:7e:d9:49:27:b5:cd:67:3c:3b:bd:c3: e7:4f:ca:43:35:de:78:98:4b:4d:42:3d:a3:d4:b3: 44:c4:fa:63:fd:e6:0a:cc:4d:c9:21:f5:9c:c4:22: a6:39:2f:ca:32:d7:2e:96:17:d2:88:cc:8a:84:74: d7:ca:ab:4d:40:b4:94:93:18:e6:a7:e6:ad:4e:5e: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A1:D7:25:07:36:E0:68:44:EA:BA:2E:5C:CE:F4:7C:23:69:99:A2 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:3a8::/45 Signature Algorithm: sha256WithRSAEncryption 93:db:b4:a6:24:43:e1:6c:51:2d:c4:e3:95:d2:85:90:c7:51: bf:75:40:f4:b3:e2:35:ff:62:46:19:83:90:7f:34:5e:6b:31: 9f:53:08:b6:2e:8e:18:af:19:a6:2f:b9:39:dc:8c:e6:63:cf: 1f:f9:9a:b5:8f:90:69:dd:57:8a:c7:4f:52:2a:b3:4b:19:f5: a9:96:8c:f3:f6:63:31:c7:bf:cd:f6:ae:c3:32:ef:cb:78:ff: 08:7f:f6:02:c1:26:a6:a6:0c:6f:ba:a0:27:db:71:1d:64:6a: ff:fd:c7:5f:ab:42:ba:63:4b:6f:09:86:6a:df:bc:2a:02:c6: 0e:68:a8:f3:c7:34:0d:76:2a:2a:6c:11:83:73:51:04:2e:7b: 2d:67:f2:c7:aa:24:3f:9a:9e:7c:be:d3:08:5e:26:f7:e4:53: a5:fa:48:c5:80:45:ab:ad:68:56:e4:ae:d9:5e:76:9a:a7:06: 2a:64:2c:bf:97:30:34:f0:e6:68:6a:11:8b:df:7f:29:9f:31: 7b:69:c1:39:d3:7a:1e:ef:e8:66:3a:16:9f:4f:d3:a3:2b:43: 41:e1:0b:be:a5:88:0e:2d:eb:40:f5:bf:75:4b:80:69:4f:48: bf:86:c0:d7:c2:94:04:0f:11:7f:2f:96:ea:5c:ac:a3:4c:c6: 4a:92:ef:29 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUclkUNQEe/maMqLQ/BQHUkaTFiAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIyWhcNMjYwNjE1MDg1MjIy WjAzMTEwLwYDVQQDEygzMUExRDcyNTA3MzZFMDY4NDRFQUJBMkU1Q0NFRjQ3QzIz Njk5OUEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uSRGIY+W2uf 1z9W82cNczIUE6b1PuF5LJRasBlNVc2hG4T03skE4mMTuNFO+uiXr/TGz4oxtlIZ y1wJORtT/oo0n3jyALTC7Pbvga1FgfILhkfHdJKdst4nOXzdEM4JGviQndEigemE 5OQ6xXEIMUfddkhrNkaIr86ImaqNFq/J7Pgp3kB7phWTgqkSQ42zd0mRnpQW3reT M8bZnTYCT97CTFMCtojYLs9GpmbGV3D0DO843u0IftlJJ7XNZzw7vcPnT8pDNd54 mEtNQj2j1LNExPpj/eYKzE3JIfWcxCKmOS/KMtculhfSiMyKhHTXyqtNQLSUkxjm p+atTl49AwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDGh1yUHNuBoROq6LlzO9Hwj aZmiMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzM2MTM4M2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzEzNDMxMzczMDM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcDJgL+2gOoMA0GCSqGSIb3DQEBCwUAA4IBAQCT27SmJEPhbFEtxOOV0oWQ x1G/dUD0s+I1/2JGGYOQfzReazGfUwi2Lo4YrxmmL7k53IzmY88f+Zq1j5Bp3VeK x09SKrNLGfWplozz9mMxx7/N9q7DMu/LeP8If/YCwSampgxvuqAn23EdZGr//cdf q0K6Y0tvCYZq37wqAsYOaKjzxzQNdioqbBGDc1EELnstZ/LHqiQ/mp58vtMIXib3 5FOl+kjFgEWrrWhW5K7ZXnaapwYqZCy/lzA08OZoahGL338pnzF7acE503oe7+hm OhafT9OjK0NB4Qu+pYgOLetA9b91S4BpT0i/hsDXwpQEDxF/L5bqXKyjTMZKku8p -----END CERTIFICATE-----Generated at Thu Jul 3 00:44:19 2025 by rpki-client