$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa File: 3134312e3139332e32312e302f32342d3234203d3e203436393937.roa (raw, json) Hash identifier: fmLMruHO44fyxA+wi+3JNlvaAKHrCLD/SFGmXThI9eM= Subject key identifier: C7:34:1E:8E:60:40:42:27:C8:AF:19:BA:2A:15:82:E6:A8:C3:28:5D Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 47E225F23E028FD175C19FFD732331EE5495587A Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa Signing time: Mon 16 Jun 2025 08:52:27 +0000 ROA not before: Mon 16 Jun 2025 08:47:27 +0000 ROA not after: Mon 15 Jun 2026 08:52:27 +0000 asID: 46997 IP address blocks: 141.193.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 03:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e2:25:f2:3e:02:8f:d1:75:c1:9f:fd:73:23:31:ee:54:95:58:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:27 2025 GMT Not After : Jun 15 08:52:27 2026 GMT Subject: CN=C7341E8E60404227C8AF19BA2A1582E6A8C3285D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:44:56:2c:96:b1:55:27:16:2e:39:99:7e: 0d:ac:a2:c2:2e:38:e4:f7:4d:a0:6b:b2:5d:38:2c: b9:75:80:84:36:1d:b3:e1:5f:73:42:47:60:cb:1a: 51:49:69:d5:44:ab:d9:4b:b5:9b:39:2b:60:d3:42: 31:f2:31:b8:5d:49:18:5b:7d:87:fd:29:f0:14:ea: 61:f3:a9:4d:aa:44:c8:49:18:39:fc:64:aa:82:b7: 16:14:b7:67:69:ff:8b:73:29:e8:6e:09:4f:b9:b6: 43:46:e8:f6:00:6f:7e:e3:01:6c:2e:73:0d:92:7f: 18:66:a3:ef:d6:73:22:db:07:78:1f:b2:ae:61:1f: 3e:7e:6e:9e:fc:8b:68:cf:94:f9:b3:de:fb:a8:5c: d0:48:a5:28:87:25:5e:90:36:9c:43:c0:c0:2c:71: 31:13:cc:37:b8:f5:5e:47:1e:f0:5f:62:d5:15:a0: 88:56:fd:08:8f:a6:da:80:d6:97:1d:84:0d:a8:f2: c9:43:be:0d:e8:cf:77:f0:00:17:06:84:75:57:ae: f7:86:7f:56:d3:9a:bd:86:bc:e1:8c:3e:ff:06:39: d9:bc:c6:16:34:3b:2b:3c:9f:5e:50:9a:7f:ac:17: 08:54:13:60:8c:7b:6d:e4:7b:90:2a:73:42:a9:5f: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:34:1E:8E:60:40:42:27:C8:AF:19:BA:2A:15:82:E6:A8:C3:28:5D X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.193.21.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:d3:0a:f4:d5:78:7e:d0:ce:1d:a0:e6:83:ae:0d:79:03:c8: b9:64:f4:d2:ea:2f:8a:16:e5:6f:2d:45:45:3c:3e:a1:04:6b: 3b:8d:2c:21:56:44:fd:d9:f7:b1:38:69:f6:d0:52:6e:ac:b7: ec:2f:bf:f3:db:66:55:5e:c6:4b:7d:f4:f7:12:df:f3:02:21: 16:f6:7b:cb:95:29:bf:77:f0:e2:a5:0c:6d:b8:5e:3d:7b:d6: 3f:96:6b:14:3b:01:c3:e6:3b:df:f0:25:e6:a5:d8:6c:fb:18: fc:f6:46:09:54:09:ea:14:29:39:91:9d:16:2d:84:b5:f7:dd: 83:e1:57:ec:af:7f:0a:4c:dd:3e:00:fb:56:5c:f6:e4:56:c9: 0d:73:74:66:6f:dd:83:29:67:56:4a:79:1c:af:75:c2:2a:15: 44:5b:2c:2e:17:f5:35:fb:6b:c7:c9:07:fe:34:c6:50:13:0a: 2d:a6:7f:00:5b:e3:2f:3d:15:59:67:3f:19:77:ee:4e:48:73: e0:6f:0d:60:2b:ad:d6:6c:1e:67:6b:01:dd:9d:3c:26:28:51: 3d:3e:97:54:e0:24:d4:f4:50:3e:e2:b7:a2:22:45:e5:b2:21: f2:b3:3c:30:d4:a2:02:88:24:be:d9:44:96:b1:14:63:d9:1d: c5:d8:35:a7 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUR+Il8j4Cj9F1wZ/9cyMx7lSVWHowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI3WhcNMjYwNjE1MDg1MjI3 WjAzMTEwLwYDVQQDEyhDNzM0MUU4RTYwNDA0MjI3QzhBRjE5QkEyQTE1ODJFNkE4 QzMyODVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcpEViyWsVUn Fi45mX4NrKLCLjjk902ga7JdOCy5dYCENh2z4V9zQkdgyxpRSWnVRKvZS7WbOStg 00Ix8jG4XUkYW32H/SnwFOph86lNqkTISRg5/GSqgrcWFLdnaf+LcynobglPubZD Ruj2AG9+4wFsLnMNkn8YZqPv1nMi2wd4H7KuYR8+fm6e/Itoz5T5s977qFzQSKUo hyVekDacQ8DALHExE8w3uPVeRx7wX2LVFaCIVv0Ij6bagNaXHYQNqPLJQ74N6M93 8AAXBoR1V673hn9W05q9hrzhjD7/BjnZvMYWNDsrPJ9eUJp/rBcIVBNgjHtt5HuQ KnNCqV9S8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMc0Ho5gQEInyK8ZuioVguao wyhdMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzNDMxMmUzMTM5MzMyZTMyMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM2MzkzOTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEV MA0GCSqGSIb3DQEBCwUAA4IBAQAO0wr01Xh+0M4doOaDrg15A8i5ZPTS6i+KFuVv LUVFPD6hBGs7jSwhVkT92fexOGn20FJurLfsL7/z22ZVXsZLffT3Et/zAiEW9nvL lSm/d/DipQxtuF49e9Y/lmsUOwHD5jvf8CXmpdhs+xj89kYJVAnqFCk5kZ0WLYS1 992D4Vfsr38KTN0+APtWXPbkVskNc3Rmb92DKWdWSnkcr3XCKhVEWywuF/U1+2vH yQf+NMZQEwotpn8AW+MvPRVZZz8Zd+5OSHPgbw1gK63WbB5nawHdnTwmKFE9PpdU 4CTU9FA+4reiIkXlsiHyszww1KICiCS+2USWsRRj2R3F2DWn -----END CERTIFICATE-----Generated at Tue Jun 17 18:38:47 2025 by rpki-client