$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3233203d3e203436393937.roa File: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (raw, json) Hash identifier: Wi1qb5YR6hM+Rr/97FNmrDj9BmcRyeZjRET4hlt6MxM= Subject key identifier: 1A:9C:D3:59:28:2A:C4:98:48:60:CF:EE:0F:61:46:B9:94:6D:5D:F7 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 28822511B0A45E5130A2FBAE1DFBA69E5442D082 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3233203d3e203436393937.roa Signing time: Tue 16 Sep 2025 09:00:00 +0000 ROA not before: Tue 16 Sep 2025 08:55:00 +0000 ROA not after: Wed 16 Sep 2026 09:00:00 +0000 asID: 46997 IP address blocks: 103.152.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:82:25:11:b0:a4:5e:51:30:a2:fb:ae:1d:fb:a6:9e:54:42:d0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Sep 16 08:55:00 2025 GMT Not After : Sep 16 09:00:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:8c:7b:4f:5b:79:56:e3:e4:e4:80:23:89: d8:91:85:8b:22:2b:0f:59:ab:16:12:52:44:b1:74: 0c:3d:21:1a:40:59:1e:df:39:32:8a:2f:ad:24:f0: 90:fc:89:ef:a5:06:2b:15:fb:d4:bd:8f:6c:18:eb: 70:63:98:3b:46:21:aa:1c:cf:01:28:26:05:69:8c: 8c:b2:a3:44:af:9d:eb:d1:d4:1e:9a:a0:37:36:ed: 0d:12:de:3c:1d:2f:2f:82:a1:1f:51:56:56:16:c6: fc:a7:b5:09:38:63:f0:dd:a2:41:a7:7d:e4:94:43: c4:f1:70:16:50:f9:9d:ff:30:13:cf:64:fe:c6:d8: ec:00:07:30:71:d1:10:28:d1:47:da:5f:b7:a1:07: 7f:a7:04:40:37:c3:f2:ce:35:f6:72:70:f5:61:5f: 19:9e:6e:90:14:a2:92:31:cb:10:1b:11:6e:b1:8b: 71:a1:b7:c9:7c:ab:7b:56:42:db:2b:67:f6:b2:e7: 0a:4d:86:e0:77:07:b7:60:42:f1:33:75:c2:21:cb: d3:35:94:a6:88:7d:9c:be:d6:10:9e:91:cb:df:90: 5c:1a:c0:47:9f:fc:dc:a9:58:60:1c:6f:37:a9:50: cf:a3:83:c9:3e:6e:54:7b:7e:5c:3d:57:1e:87:97: 01:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9C:D3:59:28:2A:C4:98:48:60:CF:EE:0F:61:46:B9:94:6D:5D:F7 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3233203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.34.0/23 Signature Algorithm: sha256WithRSAEncryption 71:52:1c:7e:0f:82:c3:d5:58:e5:34:7c:35:ea:15:74:eb:a2: 78:ef:1e:26:09:b9:3b:76:50:ca:08:9f:5d:90:59:50:00:c5: ba:ec:8f:ce:f9:80:9e:f9:04:54:ea:b6:fc:fe:d0:64:aa:a7: 11:17:85:42:a2:c5:f1:10:01:a2:4f:94:9c:50:4e:0b:e0:28: 1f:83:cf:9c:72:25:a7:33:85:16:7f:a1:d7:44:33:59:39:83: c3:79:8a:8d:75:b0:1a:c7:a0:dc:0b:98:52:22:82:4f:d3:1f: f1:2e:4e:b5:95:e8:8d:0e:3a:b4:12:dd:cf:62:e1:47:10:e9: b5:a6:5f:9a:ce:46:a0:c9:32:b0:af:5a:6c:80:64:36:64:63: df:ca:4e:2b:5c:48:b0:90:8f:57:b2:77:dd:73:c4:76:9c:44: 85:e3:77:71:e3:be:68:fb:59:f1:f0:da:65:30:f6:3a:5d:f4: a2:13:3a:fd:58:4f:83:fa:d7:e5:f4:33:90:2f:d0:31:a0:53: 45:35:69:4a:36:c2:4f:eb:12:d0:53:54:f9:cd:e0:52:99:e3: 4f:e1:df:06:a4:a0:42:8f:e5:66:52:f5:61:41:4d:ab:1d:b7: f9:2e:c1:36:22:d9:48:fb:f0:1f:5f:cb:dd:79:a3:a7:12:cc: 12:fb:05:72 -----BEGIN CERTIFICATE----- MIIG1TCCBb2gAwIBAgIUKIIlEbCkXlEwovuuHfumnlRC0IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNTA5MTYwODU1MDBaFw0yNjA5MTYwOTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JDRjhDN0I0RjVCNzk1NkUz RTRFNDgwMjM4OUQ4OTE4NThCMjIyQjBGNTlBQjE2MTI1MjQ0QjE3NDBDM0QyMTFB NDA1OTFFREYzOTMyOEEyRkFEMjRGMDkwRkM4OUVGQTUwNjJCMTVGQkQ0QkQ4RjZD MThFQjcwNjM5ODNCNDYyMUFBMUNDRjAxMjgyNjA1Njk4QzhDQjJBMzQ0QUY5REVC RDFENDFFOUFBMDM3MzZFRDBEMTJERTNDMUQyRjJGODJBMTFGNTE1NjU2MTZDNkZD QTdCNTA5Mzg2M0YwRERBMjQxQTc3REU0OTQ0M0M0RjE3MDE2NTBGOTlERkYzMDEz Q0Y2NEZFQzZEOEVDMDAwNzMwNzFEMTEwMjhEMTQ3REE1RkI3QTEwNzdGQTcwNDQw MzdDM0YyQ0UzNUY2NzI3MEY1NjE1RjE5OUU2RTkwMTRBMjkyMzFDQjEwMUIxMTZF QjE4QjcxQTFCN0M5N0NBQjdCNTY0MkRCMkI2N0Y2QjJFNzBBNEQ4NkUwNzcwN0I3 NjA0MkYxMzM3NUMyMjFDQkQzMzU5NEE2ODg3RDlDQkVENjEwOUU5MUNCREY5MDVD MUFDMDQ3OUZGQ0RDQTk1ODYwMUM2RjM3QTk1MENGQTM4M0M5M0U2RTU0N0I3RTVD M0Q1NzFFODc5NzAxQTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAy8+Me09beVbj5OSAI4nYkYWLIisPWasWElJEsXQMPSEaQFke3zky ii+tJPCQ/InvpQYrFfvUvY9sGOtwY5g7RiGqHM8BKCYFaYyMsqNEr53r0dQemqA3 Nu0NEt48HS8vgqEfUVZWFsb8p7UJOGPw3aJBp33klEPE8XAWUPmd/zATz2T+xtjs AAcwcdEQKNFH2l+3oQd/pwRAN8PyzjX2cnD1YV8Znm6QFKKSMcsQGxFusYtxobfJ fKt7VkLbK2f2sucKTYbgdwe3YELxM3XCIcvTNZSmiH2cvtYQnpHL35BcGsBHn/zc qVhgHG83qVDPo4PJPm5Ue35cPVceh5cBoQIDAQABo4IB4zCCAd8wHQYDVR0OBBYE FBqc01koKsSYSGDP7g9hRrmUbV33MB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjB9Bggr BgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8vcnBraS5hcGVybmV0Lmlv L3JlcG8vQVBFUk5FVC8xLzMxMzAzMzJlMzEzNTMyMmUzMzM0MmUzMDJmMzIzMzJk MzIzMzIwM2QzZTIwMzQzNjM5MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeYIjANBgkqhkiG9w0B AQsFAAOCAQEAcVIcfg+Cw9VY5TR8NeoVdOuieO8eJgm5O3ZQygifXZBZUADFuuyP zvmAnvkEVOq2/P7QZKqnEReFQqLF8RABok+UnFBOC+AoH4PPnHIlpzOFFn+h10Qz WTmDw3mKjXWwGseg3AuYUiKCT9Mf8S5OtZXojQ46tBLdz2LhRxDptaZfms5GoMky sK9abIBkNmRj38pOK1xIsJCPV7J33XPEdpxEheN3ceO+aPtZ8fDaZTD2Ol30ohM6 /VhPg/rX5fQzkC/QMaBTRTVpSjbCT+sS0FNU+c3gUpnjT+HfBqSgQo/lZlL1YUFN qx23+S7BNiLZSPvwH1/L3XmjpxLMEvsFcg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:16:06 2025 by rpki-client