$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: SdUvolg7HG6Wz9sr9XmiMP3G/gGUlm4jniJYLOls0AI= Subject key identifier: 7E:F1:3E:61:4C:8E:32:B2:DF:A3:2E:BB:1C:27:0C:E1:38:36:CA:AD Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 4AA71FCF79E5548D5A90CC42927FF2530F038BC7 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 16 Jun 2025 08:52:23 +0000 ROA not before: Mon 16 Jun 2025 08:47:23 +0000 ROA not after: Mon 15 Jun 2026 08:52:23 +0000 asID: 46997 IP address blocks: 2602:feda:8::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 09:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a7:1f:cf:79:e5:54:8d:5a:90:cc:42:92:7f:f2:53:0f:03:8b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:23 2025 GMT Not After : Jun 15 08:52:23 2026 GMT Subject: CN=7EF13E614C8E32B2DFA32EBB1C270CE13836CAAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:31:11:30:97:26:45:a2:7b:3b:de:33:72: 84:5a:cb:f7:93:a3:6b:4e:73:67:8b:e5:01:af:fa: 4a:bf:9d:70:67:9f:4e:26:be:55:cc:46:14:1c:c6: 0d:e0:08:a5:2b:c3:6e:d4:c6:3f:6e:5b:1c:be:9b: a4:d1:aa:3e:0f:89:39:d5:cc:93:96:c8:70:77:e3: 82:a6:13:50:5c:d5:a3:29:f6:37:51:ff:31:d1:75: 4a:fc:02:e9:85:6b:e7:a0:49:07:3d:3f:01:c2:a2: 6d:ae:81:87:97:c2:d9:44:2f:3a:b0:06:b9:aa:db: ce:2d:5e:21:b3:88:d8:9d:92:ea:e3:39:e7:75:67: 6f:7f:86:78:eb:f6:96:f8:bf:a4:39:c4:95:53:ca: 40:c3:1c:e4:ec:14:b8:4c:f8:ab:73:02:20:75:bb: 3b:ae:80:90:e1:f8:b6:ab:83:a5:4d:d2:b2:e8:53: da:92:a5:c7:fc:bd:cd:2b:32:60:6e:3e:fb:ad:66: 2d:2a:44:b4:63:b6:01:13:28:da:66:a9:13:51:8b: fa:3a:a4:c4:7f:4b:a1:ec:d6:16:ee:21:26:25:2b: 59:94:16:3d:80:4a:33:99:d5:3a:0f:cc:fa:ac:c2: 1a:10:9c:dd:cb:e0:86:f9:c1:8a:5b:23:8c:21:f4: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:3E:61:4C:8E:32:B2:DF:A3:2E:BB:1C:27:0C:E1:38:36:CA:AD X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:8::/48 Signature Algorithm: sha256WithRSAEncryption c0:ce:c9:5a:47:ed:9a:ed:2d:0a:3b:de:a0:d4:83:e5:a6:f5: 48:dc:57:62:e8:86:39:75:b3:3d:28:aa:37:c7:42:af:25:b0: 88:25:53:fa:fb:c2:21:72:0a:60:83:74:cf:c3:ba:92:43:ad: 39:2c:27:8d:bf:c9:02:62:96:de:27:b4:e3:55:ec:0b:b6:d8: 3e:72:56:d3:e6:12:74:de:74:70:d1:6e:9d:53:81:78:39:dc: 81:3f:d0:64:f4:5d:49:f0:2b:87:a2:80:65:54:56:65:21:8e: 8c:57:09:1e:a1:c7:9c:5b:32:3b:ea:ab:9e:83:2a:b6:0e:53: fa:35:b9:85:6a:48:37:39:4f:ef:04:59:ef:46:e2:03:10:25: 3d:b6:7b:bb:1e:6f:57:6b:50:6a:97:fd:4a:53:a0:be:da:c4: 0e:e0:7f:8d:b4:ca:3c:05:ba:71:2b:99:35:8d:13:0f:b6:7e: 25:b5:fb:9f:bb:fc:e9:6c:89:18:0b:25:ec:18:67:6e:d8:27: 6f:99:61:3c:4e:a3:03:b1:f1:be:47:6f:55:1b:8a:99:ad:81: f4:00:f6:1c:45:d2:5b:30:88:10:c4:8b:9e:19:97:3b:fc:d7: 6d:58:c7:bd:da:27:e8:17:fd:2d:84:60:a9:16:70:66:b9:ca: d0:06:ce:93 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUSqcfz3nlVI1akMxCkn/yUw8Di8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIzWhcNMjYwNjE1MDg1MjIz WjAzMTEwLwYDVQQDEyg3RUYxM0U2MTRDOEUzMkIyREZBMzJFQkIxQzI3MENFMTM4 MzZDQUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfQxETCXJkWi ezveM3KEWsv3k6NrTnNni+UBr/pKv51wZ59OJr5VzEYUHMYN4AilK8Nu1MY/blsc vpuk0ao+D4k51cyTlshwd+OCphNQXNWjKfY3Uf8x0XVK/ALphWvnoEkHPT8BwqJt roGHl8LZRC86sAa5qtvOLV4hs4jYnZLq4znndWdvf4Z46/aW+L+kOcSVU8pAwxzk 7BS4TPircwIgdbs7roCQ4fi2q4OlTdKy6FPakqXH/L3NKzJgbj77rWYtKkS0Y7YB EyjaZqkTUYv6OqTEf0uh7NYW7iEmJStZlBY9gEozmdU6D8z6rMIaEJzdy+CG+cGK WyOMIfRr0QIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFH7xPmFMjjKy36MuuxwnDOE4 NsqtMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez ODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzOTM5Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm Av7aAAgwDQYJKoZIhvcNAQELBQADggEBAMDOyVpH7ZrtLQo73qDUg+Wm9UjcV2Lo hjl1sz0oqjfHQq8lsIglU/r7wiFyCmCDdM/DupJDrTksJ42/yQJilt4ntONV7Au2 2D5yVtPmEnTedHDRbp1TgXg53IE/0GT0XUnwK4eigGVUVmUhjoxXCR6hx5xbMjvq q56DKrYOU/o1uYVqSDc5T+8EWe9G4gMQJT22e7seb1drUGqX/UpToL7axA7gf420 yjwFunErmTWNEw+2fiW1+5+7/OlsiRgLJewYZ27YJ2+ZYTxOowOx8b5Hb1Ubipmt gfQA9hxF0lswiBDEi54Zlzv8121Yx73aJ+gX/S2EYKkWcGa5ytAGzpM= -----END CERTIFICATE-----Generated at Mon Jun 30 01:32:24 2025 by rpki-client