$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132343235.roa File: 323630323a666564613a6335303a3a2f34342d3438203d3e20323132343235.roa (raw, json) Hash identifier: jFzMKgy5SvT4+aTkGZvARw3QUmJBpE5Drxm8KFRuxJs= Subject key identifier: C1:1A:B7:D2:7E:5C:BF:D9:F2:6B:D5:AF:42:87:A7:18:E2:2E:9E:AA Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 11D0B0B49E522EB3D4004DD543C10A7471362564 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132343235.roa Signing time: Mon 16 Jun 2025 08:52:32 +0000 ROA not before: Mon 16 Jun 2025 08:47:32 +0000 ROA not after: Mon 15 Jun 2026 08:52:32 +0000 asID: 212425 IP address blocks: 2602:feda:c50::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 09:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d0:b0:b4:9e:52:2e:b3:d4:00:4d:d5:43:c1:0a:74:71:36:25:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:32 2025 GMT Not After : Jun 15 08:52:32 2026 GMT Subject: CN=C11AB7D27E5CBFD9F26BD5AF4287A718E22E9EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:c2:8b:dc:8c:8b:e6:7b:8f:09:61:bf:4d: 37:e6:8e:34:5e:71:17:37:c1:ae:9b:a3:e5:7e:0b: 92:ff:aa:75:68:22:bf:a2:2e:ea:be:4c:a8:48:e4: e7:57:4b:6b:00:39:c0:82:1b:9f:0c:a3:0a:21:c6: 02:8e:06:3e:fd:76:0c:5f:56:bc:fb:92:d7:bb:69: 30:ed:85:97:32:d9:08:66:8c:79:83:33:a9:62:b2: 1c:d5:98:4c:27:01:3b:08:02:2c:c4:64:e7:4d:f9: b5:c7:86:f0:52:6d:69:d0:e5:89:0e:d1:81:0a:31: 2d:27:97:f3:40:e0:ec:82:91:4e:4a:17:b5:80:8d: 9f:0d:4f:3c:28:4e:3c:53:07:de:ab:6a:81:76:3b: d3:ee:03:bf:2e:ef:d8:25:c5:7a:a2:d2:3f:97:6f: 2b:d3:3c:90:01:d4:cc:a0:f9:2a:89:ce:d2:ab:f2: c3:0f:3b:61:34:83:e0:64:77:3b:85:ce:1c:ab:aa: ca:9e:aa:20:48:c9:9e:55:ac:3d:e6:45:be:ca:85: c4:63:c8:d4:6d:a7:18:3b:ce:79:d5:34:ea:72:22: 64:77:8d:cd:88:c5:2a:bd:fd:f2:ad:dc:14:bb:af: 1e:06:39:1f:eb:5e:c4:84:4a:de:df:5a:e0:cf:14: f0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1A:B7:D2:7E:5C:BF:D9:F2:6B:D5:AF:42:87:A7:18:E2:2E:9E:AA X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c50::/44 Signature Algorithm: sha256WithRSAEncryption bf:74:8d:6c:43:23:02:a1:ee:94:ef:75:fd:d4:66:e3:22:fb: b8:3a:11:91:68:a2:5f:14:64:1a:74:2e:3a:2e:84:10:34:61: 1d:f7:b5:30:2d:ea:74:78:d0:67:8b:10:e0:f7:04:3e:fb:a5: fc:4a:b3:0c:9f:9e:15:42:b0:83:42:83:22:5d:f1:36:68:17: a1:ae:88:44:f4:0d:f7:b5:b5:3f:58:18:5f:2f:04:52:1b:f2: 19:54:f1:e1:b1:9f:1c:be:24:02:c4:88:91:5d:06:18:78:f6: b6:59:d5:88:d8:10:51:d4:fd:5d:72:4a:1d:28:79:10:cd:ae: 87:65:2d:d7:d0:dc:45:40:f6:7f:de:3e:3b:5c:e7:98:c5:05: 26:07:c5:98:a4:1a:3e:64:5c:bb:f2:f2:25:ca:fe:9d:8f:0c: 83:65:57:82:1a:3b:e0:5b:f5:89:ee:09:f5:38:6f:76:df:78: c9:2f:f2:11:f1:65:c7:7d:92:83:09:55:3a:a1:e2:04:e8:68: e7:f9:9c:48:55:1d:59:1c:bb:d3:78:75:b8:d6:d5:9d:2b:9c: 75:dc:ed:c1:14:c2:4b:d4:3a:cc:df:51:2b:62:10:f9:93:af: f9:eb:0e:1a:5f:b6:e3:1a:ec:d9:f5:00:1d:4d:14:84:8a:a5: 44:aa:b9:1c -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUEdCwtJ5SLrPUAE3VQ8EKdHE2JWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMyWhcNMjYwNjE1MDg1MjMy WjAzMTEwLwYDVQQDEyhDMTFBQjdEMjdFNUNCRkQ5RjI2QkQ1QUY0Mjg3QTcxOEUy MkU5RUFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9jCi9yMi+Z7 jwlhv0035o40XnEXN8Gum6PlfguS/6p1aCK/oi7qvkyoSOTnV0trADnAghufDKMK IcYCjgY+/XYMX1a8+5LXu2kw7YWXMtkIZox5gzOpYrIc1ZhMJwE7CAIsxGTnTfm1 x4bwUm1p0OWJDtGBCjEtJ5fzQODsgpFOShe1gI2fDU88KE48Uwfeq2qBdjvT7gO/ Lu/YJcV6otI/l28r0zyQAdTMoPkqic7Sq/LDDzthNIPgZHc7hc4cq6rKnqogSMme Vaw95kW+yoXEY8jUbacYO8551TTqciJkd43NiMUqvf3yrdwUu68eBjkf617EhEre 31rgzxTwWQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMEat9J+XL/Z8mvVr0KHpxji Lp6qMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzQzMjM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gxQMA0GCSqGSIb3DQEBCwUAA4IBAQC/dI1sQyMCoe6U73X91Gbj Ivu4OhGRaKJfFGQadC46LoQQNGEd97UwLep0eNBnixDg9wQ++6X8SrMMn54VQrCD QoMiXfE2aBehrohE9A33tbU/WBhfLwRSG/IZVPHhsZ8cviQCxIiRXQYYePa2WdWI 2BBR1P1dckodKHkQza6HZS3X0NxFQPZ/3j47XOeYxQUmB8WYpBo+ZFy78vIlyv6d jwyDZVeCGjvgW/WJ7gn1OG9233jJL/IR8WXHfZKDCVU6oeIE6Gjn+ZxIVR1ZHLvT eHW41tWdK5x13O3BFMJL1DrM31ErYhD5k6/56w4aX7bjGuzZ9QAdTRSEiqVEqrkc -----END CERTIFICATE-----Generated at Sun Jun 29 17:44:36 2025 by rpki-client