$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa File: 323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa (raw, json) Hash identifier: QfQfgHhNoIlDyYnWqBn9ldeN13TMPWqdyiqv7ATA69s= Subject key identifier: 4A:6C:59:9D:5A:C2:71:E0:F2:C2:92:3B:FB:F9:24:22:75:5D:59:EC Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 28B5CDB24A2AC16ED0FEB5AB9F31376727AAAB50 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa Signing time: Mon 16 Jun 2025 08:52:25 +0000 ROA not before: Mon 16 Jun 2025 08:47:25 +0000 ROA not after: Mon 15 Jun 2026 08:52:25 +0000 asID: 46997 IP address blocks: 2602:feda:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 09:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b5:cd:b2:4a:2a:c1:6e:d0:fe:b5:ab:9f:31:37:67:27:aa:ab:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:25 2025 GMT Not After : Jun 15 08:52:25 2026 GMT Subject: CN=4A6C599D5AC271E0F2C2923BFBF92422755D59EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:a2:65:8c:c1:09:6f:70:3a:02:71:5a:21: f9:a6:bc:cc:aa:9f:d0:9e:57:8f:7e:f5:24:e7:ac: 7e:68:b8:4c:d7:3b:b6:f6:5f:5a:94:af:1e:4e:29: 16:82:1d:44:a8:dc:9c:61:44:0c:ce:07:2c:e6:bc: 9d:40:1c:f1:36:42:4c:e5:ce:39:1a:89:be:bf:2f: ae:07:f5:38:6c:9e:1e:3f:05:b1:b1:c9:d5:dd:51: f0:25:e3:9c:49:c7:7c:29:7a:14:1a:83:4f:b7:6b: 2c:12:a9:c2:2d:86:ba:98:66:cc:65:a5:9a:1c:62: d0:e9:7f:bd:5f:71:3f:f4:02:80:ee:43:e5:99:aa: aa:65:9c:38:8f:68:0a:9b:82:a5:e2:7f:e2:0e:f8: 74:51:4e:27:f7:60:3d:17:8a:ef:3b:6a:bb:4a:b4: 6c:03:33:06:01:1e:b6:d9:59:2c:79:63:e2:d5:fa: fb:4c:8d:b5:5e:bc:4d:84:79:45:62:82:77:ee:b5: 65:75:44:33:0f:e4:34:f6:6a:45:37:67:a9:3a:0f: 0f:fe:bf:b6:a0:7a:0a:ec:b2:01:95:80:04:89:65: 00:e4:61:37:64:bc:7f:86:09:58:ed:7d:ac:52:a8: d5:62:9a:15:a9:87:8b:a8:60:df:b3:57:55:32:4f: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6C:59:9D:5A:C2:71:E0:F2:C2:92:3B:FB:F9:24:22:75:5D:59:EC X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:a2::/48 Signature Algorithm: sha256WithRSAEncryption 7c:dd:d4:66:14:cd:79:67:58:07:91:d5:02:b1:60:da:2a:3e: 81:28:12:1b:b4:ec:ed:48:8e:a9:cf:3d:9e:0d:ab:ca:89:81: 37:ab:b8:c1:5a:e8:83:8e:55:bb:3e:b6:4b:f2:e3:34:ad:28: c0:01:34:fe:bc:dd:fb:b0:07:85:67:78:67:d7:ce:c7:6a:9f: 01:bf:ce:cb:bf:da:58:52:95:a0:3a:b3:d0:fc:3c:b4:d5:e0: db:96:72:0a:45:ea:62:86:7c:8c:a8:c1:18:f2:05:1c:35:83: ec:84:b7:3c:c6:a4:92:d5:ac:60:99:6e:59:02:82:de:2b:fb: ca:67:b6:35:a4:d3:8a:d5:21:0f:e4:c8:9c:9c:9e:f3:bf:be: 53:7d:c4:cf:d7:76:1e:6e:79:14:e3:ef:41:ac:e9:94:e7:b9: 8a:a5:b3:f6:0f:39:34:ae:6a:e6:de:7e:e7:be:63:f4:21:4a: 4c:f0:03:80:cb:ef:e1:79:cd:8c:6b:b9:d4:29:52:31:8d:85: d8:ce:a0:28:3f:99:9b:83:c0:1c:1d:38:f9:2b:b7:53:19:93: ea:7f:a3:4a:be:47:56:75:e2:60:6e:84:34:5e:9e:15:40:24: f9:54:36:ae:07:1e:f4:ca:bd:12:6f:62:69:31:4f:b3:73:8b: 91:a2:a2:72 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUKLXNskoqwW7Q/rWrnzE3Zyeqq1AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI1WhcNMjYwNjE1MDg1MjI1 WjAzMTEwLwYDVQQDEyg0QTZDNTk5RDVBQzI3MUUwRjJDMjkyM0JGQkY5MjQyMjc1 NUQ1OUVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXKiZYzBCW9w OgJxWiH5przMqp/QnlePfvUk56x+aLhM1zu29l9alK8eTikWgh1EqNycYUQMzgcs 5rydQBzxNkJM5c45Gom+vy+uB/U4bJ4ePwWxscnV3VHwJeOcScd8KXoUGoNPt2ss EqnCLYa6mGbMZaWaHGLQ6X+9X3E/9AKA7kPlmaqqZZw4j2gKm4Kl4n/iDvh0UU4n 92A9F4rvO2q7SrRsAzMGAR622VkseWPi1fr7TI21XrxNhHlFYoJ37rVldUQzD+Q0 9mpFN2epOg8P/r+2oHoK7LIBlYAEiWUA5GE3ZLx/hglY7X2sUqjVYpoVqYeLqGDf s1dVMk+kAQIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFEpsWZ1awnHg8sKSO/v5JCJ1 XVnsMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNjM5MzkzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACYC/toAojANBgkqhkiG9w0BAQsFAAOCAQEAfN3UZhTNeWdYB5HVArFg2io+gSgS G7Ts7UiOqc89ng2ryomBN6u4wVrog45Vuz62S/LjNK0owAE0/rzd+7AHhWd4Z9fO x2qfAb/Oy7/aWFKVoDqz0Pw8tNXg25ZyCkXqYoZ8jKjBGPIFHDWD7IS3PMakktWs YJluWQKC3iv7yme2NaTTitUhD+TInJye87++U33Ez9d2Hm55FOPvQazplOe5iqWz 9g85NK5q5t5+575j9CFKTPADgMvv4XnNjGu51ClSMY2F2M6gKD+Zm4PAHB04+Su3 UxmT6n+jSr5HVnXiYG6ENF6eFUAk+VQ2rgce9Mq9Em9iaTFPs3OLkaKicg== -----END CERTIFICATE-----Generated at Mon Jun 30 01:20:53 2025 by rpki-client