$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa File: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (raw, json) Hash identifier: /DgHrGsKZXfhHJDujJu1DCrT/bG0Lf+Gu/mfh7ooopc= Subject key identifier: B9:65:F8:D7:94:19:04:58:E8:BA:64:D0:83:44:14:A1:CE:A8:03:A0 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 2509B572E622A7381B789BB47C2BB148BC8DD830 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa Signing time: Mon 29 Sep 2025 05:00:00 +0000 ROA not before: Mon 29 Sep 2025 04:55:00 +0000 ROA not after: Tue 29 Sep 2026 05:00:00 +0000 asID: 396303 IP address blocks: 2406:4440:50::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:09:b5:72:e6:22:a7:38:1b:78:9b:b4:7c:2b:b1:48:bc:8d:d8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Sep 29 04:55:00 2025 GMT Not After : Sep 29 05:00:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:57:66:2d:14:b6:33:d7:2a:e5:f7:5a:fc: 68:d0:ef:27:1a:37:b7:e3:f9:1e:13:99:a9:6e:6c: 03:fc:7b:a0:22:8b:a3:68:2d:25:c0:96:fe:94:8b: 2d:a1:e6:92:6e:70:49:ca:f7:d5:76:e8:4b:43:0a: 55:ba:b5:c5:c0:30:d2:d9:c2:9b:7d:bd:dd:11:5d: b1:96:dc:0f:d4:f9:10:b9:9e:af:84:21:aa:d8:2e: c3:6f:b9:05:2d:88:2d:fd:e3:6a:de:6c:e5:f7:30: 68:07:93:4d:1a:ac:60:3b:a3:ce:c2:53:89:48:0d: 4b:99:67:2d:44:05:3a:5f:a8:32:4b:9c:1a:c0:92: 54:ae:82:1f:3a:ab:8b:61:d0:a0:8b:f5:91:ee:a0: 18:43:d6:c8:f9:e4:f8:9e:2a:85:c0:2b:1a:a8:f4: 9f:f4:40:4a:6d:9a:f0:2f:94:d3:aa:e1:b2:cb:07: f0:21:1c:e3:47:6a:bd:e7:3e:d3:5f:42:07:7f:3b: 84:39:ea:c9:7a:07:92:75:5b:d1:a3:49:88:37:4b: 5e:90:bf:ff:ea:8d:26:fa:d0:45:1b:56:08:f8:ca: 45:05:33:ff:5b:6d:55:ca:3b:5b:4e:e7:b4:9b:75: 8d:50:f1:1b:30:04:33:c4:77:7e:34:a0:93:24:18: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:65:F8:D7:94:19:04:58:E8:BA:64:D0:83:44:14:A1:CE:A8:03:A0 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:50::/44 Signature Algorithm: sha256WithRSAEncryption 4e:92:f4:3c:cc:7a:f4:38:ad:43:77:72:60:2c:da:2f:91:8f: bf:9f:e1:10:ec:c1:28:0e:c7:62:db:01:d8:57:95:31:d0:00: 97:6c:bf:82:18:fb:bc:f5:0e:4b:63:71:45:35:63:c7:5d:78: 6f:ae:db:0c:6d:8e:fb:64:99:50:7e:5d:2b:61:ce:1e:88:8c: 95:b1:a9:9f:6c:c3:ae:2e:8b:ef:fe:cd:f4:f6:00:12:15:89: dc:8a:86:8a:ea:b8:3c:d8:ac:30:a6:5d:a9:db:4b:31:85:27: f2:5c:f9:25:19:f0:2f:14:4f:dd:87:fe:a9:54:ba:d3:04:28: ce:4b:57:dc:4e:30:cf:95:1a:0c:7a:a2:5b:fc:42:a7:b8:bd: 9f:d3:0c:02:55:14:ba:11:c7:45:24:c0:63:c1:69:22:10:fb: ff:62:3f:f0:45:a6:7b:37:87:12:8e:0f:c0:c5:f8:bd:c9:05: fc:de:65:cc:bd:6a:73:6c:38:fa:55:cc:4b:28:58:81:df:04: c1:1c:69:65:f8:75:b8:4a:99:bb:0c:50:9f:2b:9c:8e:d4:03: ce:41:17:36:50:ef:2d:fc:5a:58:04:47:ca:24:2e:94:3c:c1: 26:89:9c:ad:75:31:4a:67:cc:54:95:fd:45:88:00:b1:f8:b4: 08:ee:6e:4d -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUJQm1cuYipzgbeJu0fCuxSLyN2DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNTA5MjkwNDU1MDBaFw0yNjA5MjkwNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjlDNTU3NjYyRDE0QjYzM0Q3 MkFFNUY3NUFGQzY4RDBFRjI3MUEzN0I3RTNGOTFFMTM5OUE5NkU2QzAzRkM3QkEw MjI4QkEzNjgyRDI1QzA5NkZFOTQ4QjJEQTFFNjkyNkU3MDQ5Q0FGN0Q1NzZFODRC NDMwQTU1QkFCNUM1QzAzMEQyRDlDMjlCN0RCREREMTE1REIxOTZEQzBGRDRGOTEw Qjk5RUFGODQyMUFBRDgyRUMzNkZCOTA1MkQ4ODJERkRFMzZBREU2Q0U1RjczMDY4 MDc5MzREMUFBQzYwM0JBM0NFQzI1Mzg5NDgwRDRCOTk2NzJENDQwNTNBNUZBODMy NEI5QzFBQzA5MjU0QUU4MjFGM0FBQjhCNjFEMEEwOEJGNTkxRUVBMDE4NDNENkM4 RjlFNEY4OUUyQTg1QzAyQjFBQThGNDlGRjQ0MDRBNkQ5QUYwMkY5NEQzQUFFMUIy Q0IwN0YwMjExQ0UzNDc2QUJERTczRUQzNUY0MjA3N0YzQjg0MzlFQUM5N0EwNzky NzU1QkQxQTM0OTg4Mzc0QjVFOTBCRkZGRUE4RDI2RkFEMDQ1MUI1NjA4RjhDQTQ1 MDUzM0ZGNUI2RDU1Q0EzQjVCNEVFN0I0OUI3NThENTBGMTFCMzAwNDMzQzQ3NzdF MzRBMDkzMjQxODYxMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAucVXZi0UtjPXKuX3Wvxo0O8nGje34/keE5mpbmwD/HugIoujaC0l wJb+lIstoeaSbnBJyvfVduhLQwpVurXFwDDS2cKbfb3dEV2xltwP1PkQuZ6vhCGq 2C7Db7kFLYgt/eNq3mzl9zBoB5NNGqxgO6POwlOJSA1LmWctRAU6X6gyS5wawJJU roIfOquLYdCgi/WR7qAYQ9bI+eT4niqFwCsaqPSf9EBKbZrwL5TTquGyywfwIRzj R2q95z7TX0IHfzuEOerJegeSdVvRo0mIN0tekL//6o0m+tBFG1YI+MpFBTP/W21V yjtbTue0m3WNUPEbMAQzxHd+NKCTJBhhJwIDAQABo4IB7TCCAekwHQYDVR0OBBYE FLll+NeUGQRY6Lpk0INEFKHOqAOgMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBgwYI KwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTM1MzAzYTNhMmYz NDM0MmQzNDM0MjAzZDNlMjAzMzM5MzYzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkBkRAAFAw DQYJKoZIhvcNAQELBQADggEBAE6S9DzMevQ4rUN3cmAs2i+Rj7+f4RDswSgOx2Lb AdhXlTHQAJdsv4IY+7z1DktjcUU1Y8ddeG+u2wxtjvtkmVB+XSthzh6IjJWxqZ9s w64ui+/+zfT2ABIVidyKhorquDzYrDCmXanbSzGFJ/Jc+SUZ8C8UT92H/qlUutME KM5LV9xOMM+VGgx6olv8Qqe4vZ/TDAJVFLoRx0UkwGPBaSIQ+/9iP/BFpns3hxKO D8DF+L3JBfzeZcy9anNsOPpVzEsoWIHfBMEcaWX4dbhKmbsMUJ8rnI7UA85BFzZQ 7y38WlgER8okLpQ8wSaJnK11MUpnzFSV/UWIALH4tAjubk0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:14 2025 by rpki-client