$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa File: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (raw, json) Hash identifier: xOdpTeWx1XKyNghJjlzJHpj1FXT5YgC3jmRekathLYU= Subject key identifier: 53:D9:5B:78:06:43:57:1A:83:12:4E:82:38:78:AD:17:B2:3F:69:41 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 0508C2EB6CAA0D93D150177BCFAA3A290B5E9512 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa Signing time: Tue 14 Oct 2025 05:00:00 +0000 ROA not before: Tue 14 Oct 2025 04:55:00 +0000 ROA not after: Wed 14 Oct 2026 05:00:00 +0000 asID: 38173 IP address blocks: 2406:4440:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:08:c2:eb:6c:aa:0d:93:d1:50:17:7b:cf:aa:3a:29:0b:5e:95:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Oct 14 04:55:00 2025 GMT Not After : Oct 14 05:00:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4f:f8:25:68:43:db:89:db:bc:ba:56:7c:30: ac:af:3b:14:da:8e:3a:f3:7f:da:c3:61:31:bd:d3: 2a:30:4b:83:96:42:b2:52:93:0e:be:f4:9f:5c:ef: 8d:9f:3b:6b:60:17:ac:e8:3b:d4:4f:37:24:3d:57: 2a:20:69:90:1b:8a:ce:f6:d5:a5:46:1e:eb:a2:a6: 99:de:aa:3c:d2:ef:4a:61:8b:67:54:37:9c:98:2a: bc:23:41:58:30:a5:4b:5c:53:2b:ca:f1:87:1d:ca: ad:e9:ff:9e:0b:26:b3:d3:c2:60:72:8e:d3:58:c5: 76:41:57:f7:91:75:bb:e1:a2:1c:5c:2e:ef:85:bb: 0c:38:2e:39:cf:1a:17:bb:6a:a6:2e:0d:13:7b:e2: f4:f8:31:12:34:92:1c:f0:02:10:3d:a8:82:a3:78: dc:61:05:d3:fa:d6:e1:39:2a:09:9b:d7:65:38:e7: e2:c4:ba:aa:45:61:c2:23:67:33:13:d9:da:ef:4c: f1:95:93:18:3c:dc:ec:9a:08:f8:71:55:96:8f:0a: 1f:c6:9f:4b:0f:f6:42:56:42:fe:db:5b:18:00:12: e2:8a:38:5f:e8:6d:a9:07:1d:d4:1b:6d:fc:95:16: 43:0c:37:e9:11:3a:f3:69:42:6c:8b:8e:af:9f:cf: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:5B:78:06:43:57:1A:83:12:4E:82:38:78:AD:17:B2:3F:69:41 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:f000::/44 Signature Algorithm: sha256WithRSAEncryption a6:b0:e6:2c:91:b2:d2:43:07:21:78:a2:8a:43:6b:65:55:1f: d4:d0:46:b7:b8:03:26:e6:4a:5f:55:7d:c6:dc:fb:f9:aa:5d: f3:98:bc:b5:b7:97:45:38:c8:9f:59:e8:b0:a8:9c:c1:8a:a2: 24:74:6f:f7:a3:a8:38:98:bc:b7:37:3c:37:44:92:67:3b:3c: f2:6f:3e:04:01:1b:c7:00:3b:53:a8:72:3d:77:c3:d0:b3:5a: 8e:07:d0:1e:46:48:20:ca:52:a6:1c:d0:e6:93:5b:d7:19:7f: 35:a3:fd:8e:f5:e9:38:3d:11:d4:35:1f:d6:cc:c7:4a:d5:40: 36:4f:f6:da:d4:ac:27:d8:40:96:5f:a8:23:38:1d:cd:b9:31: 24:59:26:6c:4e:0a:2f:24:61:56:80:49:49:5c:84:9c:3f:27: b2:bd:20:1c:df:fa:75:5c:91:c8:5c:62:59:4c:ef:bc:b4:ca: 6c:7f:12:5c:ed:d0:cb:85:0d:b0:ec:f1:3d:24:e4:b1:74:c6: 39:30:4b:69:16:de:80:de:c4:93:9d:8a:f8:5a:15:d0:c0:1e: 74:81:b3:5a:32:99:36:dd:bf:27:4d:fb:dd:7c:5f:43:3e:da: df:30:0f:00:89:80:4a:77:99:07:3a:44:6b:46:86:2c:c3:ae: d0:0e:f4:78 -----BEGIN CERTIFICATE----- MIIG4TCCBcmgAwIBAgIUBQjC62yqDZPRUBd7z6o6KQtelRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNTEwMTQwNDU1MDBaFw0yNjEwMTQwNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUM0RkY4MjU2ODQzREI4OURC QkNCQTU2N0MzMEFDQUYzQjE0REE4RTNBRjM3RkRBQzM2MTMxQkREMzJBMzA0Qjgz OTY0MkIyNTI5MzBFQkVGNDlGNUNFRjhEOUYzQjZCNjAxN0FDRTgzQkQ0NEYzNzI0 M0Q1NzJBMjA2OTkwMUI4QUNFRjZENUE1NDYxRUVCQTJBNjk5REVBQTNDRDJFRjRB NjE4QjY3NTQzNzlDOTgyQUJDMjM0MTU4MzBBNTRCNUM1MzJCQ0FGMTg3MURDQUFE RTlGRjlFMEIyNkIzRDNDMjYwNzI4RUQzNThDNTc2NDE1N0Y3OTE3NUJCRTFBMjFD NUMyRUVGODVCQjBDMzgyRTM5Q0YxQTE3QkI2QUE2MkUwRDEzN0JFMkY0RjgzMTEy MzQ5MjFDRjAwMjEwM0RBODgyQTM3OERDNjEwNUQzRkFENkUxMzkyQTA5OUJENzY1 MzhFN0UyQzRCQUFBNDU2MUMyMjM2NzMzMTNEOURBRUY0Q0YxOTU5MzE4M0NEQ0VD OUEwOEY4NzE1NTk2OEYwQTFGQzY5RjRCMEZGNjQyNTY0MkZFREI1QjE4MDAxMkUy OEEzODVGRTg2REE5MDcxREQ0MUI2REZDOTUxNjQzMEMzN0U5MTEzQUYzNjk0MjZD OEI4RUFGOUZDRkFBNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA7E/4JWhD24nbvLpWfDCsrzsU2o4683/aw2ExvdMqMEuDlkKyUpMO vvSfXO+NnztrYBes6DvUTzckPVcqIGmQG4rO9tWlRh7roqaZ3qo80u9KYYtnVDec mCq8I0FYMKVLXFMryvGHHcqt6f+eCyaz08Jgco7TWMV2QVf3kXW74aIcXC7vhbsM OC45zxoXu2qmLg0Te+L0+DESNJIc8AIQPaiCo3jcYQXT+tbhOSoJm9dlOOfixLqq RWHCI2czE9na70zxlZMYPNzsmgj4cVWWjwofxp9LD/ZCVkL+21sYABLiijhf6G2p Bx3UG238lRZDDDfpETrzaUJsi46vn8+qRQIDAQABo4IB7zCCAeswHQYDVR0OBBYE FFPZW3gGQ1cagxJOgjh4rReyP2lBMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBhQYI KwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmlyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTY2MzAzMDMwM2Ez YTJmMzQzNDJkMzQzODIwM2QzZTIwMzMzODMxMzczMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQGREDw ADANBgkqhkiG9w0BAQsFAAOCAQEAprDmLJGy0kMHIXiiikNrZVUf1NBGt7gDJuZK X1V9xtz7+apd85i8tbeXRTjIn1nosKicwYqiJHRv96OoOJi8tzc8N0SSZzs88m8+ BAEbxwA7U6hyPXfD0LNajgfQHkZIIMpSphzQ5pNb1xl/NaP9jvXpOD0R1DUf1szH StVANk/22tSsJ9hAll+oIzgdzbkxJFkmbE4KLyRhVoBJSVyEnD8nsr0gHN/6dVyR yFxiWUzvvLTKbH8SXO3Qy4UNsOzxPSTksXTGOTBLaRbegN7Ek52K+FoV0MAedIGz WjKZNt2/J0373XxfQz7a3zAPAImASneZBzpEa0aGLMOu0A70eA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:27 2025 by rpki-client