$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3332203d3e2031303239.roa File: 32332e3234372e3133362e302f32322d3332203d3e2031303239.roa (raw, json) Hash identifier: S+/sACJezZY/erP64lHsbG2PhYI2NxHfG4PV2cDx1II= Subject key identifier: 72:58:29:86:18:96:AF:DD:CF:F3:1F:5D:60:2A:ED:A0:FC:0C:90:AC Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3F693C4E13E80D8E4D7858333B20A661FC25D6F4 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3332203d3e2031303239.roa Signing time: Sat 14 Feb 2026 17:21:30 +0000 ROA not before: Sat 14 Feb 2026 17:16:30 +0000 ROA not after: Sat 13 Feb 2027 17:21:30 +0000 asID: 1029 IP address blocks: 23.247.136.0/22 maxlen: 32 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 11:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:69:3c:4e:13:e8:0d:8e:4d:78:58:33:3b:20:a6:61:fc:25:d6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Feb 14 17:16:30 2026 GMT Not After : Feb 13 17:21:30 2027 GMT Subject: CN=725829861896AFDDCFF31F5D602AEDA0FC0C90AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:4a:60:72:d0:10:90:df:9f:64:fe:1a:8a: 3d:05:03:2f:8a:83:4b:e4:65:ea:c7:65:69:d1:0b: 43:62:8b:85:be:86:db:5f:20:db:a4:66:f3:48:a3: 33:85:70:36:3d:13:8c:2b:5e:40:df:e9:af:1f:5b: af:d4:4b:88:d9:7f:6a:61:3b:95:b1:d3:85:45:8e: 0e:a3:01:40:2a:6b:4d:77:85:49:72:67:6c:02:13: 7d:a1:01:f3:eb:0e:f1:23:4a:92:cd:2e:4f:68:bb: 32:fd:8e:dc:8d:7f:06:93:81:7a:b0:a1:91:53:94: 7b:47:a0:99:da:47:68:f3:06:4a:e8:60:91:59:1c: aa:65:fd:74:69:a1:11:37:cd:d8:0f:d0:69:f0:c7: a0:89:a3:e9:56:93:5f:14:b2:54:07:c0:fa:b4:e3: 1d:f3:ed:1a:d5:b2:bb:64:66:ba:ff:30:78:9a:25: 78:e3:b1:8c:62:5e:0c:0f:b4:0b:c9:11:f3:2a:43: 7e:da:b0:4a:d1:e5:c1:5e:8d:0a:98:58:09:2c:dd: 1b:36:b6:38:d5:f5:57:11:99:59:50:22:64:a2:5f: 69:cf:81:24:60:b5:e1:68:be:c8:c2:e9:e1:e8:fa: d2:2f:af:0b:55:2d:0e:07:0c:d4:33:42:97:07:db: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:58:29:86:18:96:AF:DD:CF:F3:1F:5D:60:2A:ED:A0:FC:0C:90:AC X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3332203d3e2031303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.247.136.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:aa:73:39:a9:dd:26:6f:51:93:17:53:20:72:fc:50:ff:e8: 2d:fc:3c:4f:2b:52:54:da:1a:a6:4c:8e:a6:ea:88:e8:4e:d4: aa:4b:d6:80:8b:b3:be:da:16:c0:67:e6:84:38:1a:cb:ea:be: ec:9c:b0:a3:a2:d6:e3:8f:df:73:ad:87:5c:22:6f:a1:cd:9d: b7:23:57:20:24:d4:1e:99:4b:dd:ba:6d:d8:ee:e6:23:01:75: f1:42:f1:c1:a3:85:8a:31:7d:fc:2c:90:7e:ff:6e:78:56:f0: ec:22:e8:30:9d:79:5b:13:8e:e5:e6:81:b7:aa:9b:d6:93:55: 53:75:54:7a:88:05:e0:ca:12:64:cb:7a:f7:8b:a4:e7:99:94: 9d:86:6d:78:c8:f4:ea:6f:8c:df:7e:49:8f:72:2b:5c:22:b4: c3:f3:e1:99:7d:23:da:91:fc:87:f0:ae:9f:33:b6:b0:95:35: 68:04:cd:f0:04:66:4d:96:5a:3b:fc:b9:b1:31:ce:e7:59:c1: d2:ae:25:10:65:ee:d0:40:4b:6f:5f:7f:dd:ce:7c:28:b9:ff: 39:6e:1b:69:c1:a8:2f:a7:42:be:72:cd:1e:fa:08:8c:a1:9b: eb:aa:57:6d:70:54:cd:36:a0:43:1d:17:d8:7f:61:4d:d7:59: b5:92:3a:d2 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUP2k8ThPoDY5NeFgzOyCmYfwl1vQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwMjE0MTcxNjMwWhcNMjcwMjEzMTcyMTMw WjAzMTEwLwYDVQQDEyg3MjU4Mjk4NjE4OTZBRkREQ0ZGMzFGNUQ2MDJBRURBMEZD MEM5MEFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ktKYHLQEJDf n2T+Goo9BQMvioNL5GXqx2Vp0QtDYouFvobbXyDbpGbzSKMzhXA2PROMK15A3+mv H1uv1EuI2X9qYTuVsdOFRY4OowFAKmtNd4VJcmdsAhN9oQHz6w7xI0qSzS5PaLsy /Y7cjX8Gk4F6sKGRU5R7R6CZ2kdo8wZK6GCRWRyqZf10aaERN83YD9Bp8MegiaPp VpNfFLJUB8D6tOMd8+0a1bK7ZGa6/zB4miV447GMYl4MD7QLyRHzKkN+2rBK0eXB Xo0KmFgJLN0bNrY41fVXEZlZUCJkol9pz4EkYLXhaL7Iwunh6PrSL68LVS0OBwzU M0KXB9tJjQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFHJYKYYYlq/dz/MfXWAq7aD8 DJCsMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzMzJlMzIzNDM3MmUzMTMzMzYy ZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMTMwMzIzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhf3iDAN BgkqhkiG9w0BAQsFAAOCAQEAe6pzOandJm9RkxdTIHL8UP/oLfw8TytSVNoapkyO puqI6E7UqkvWgIuzvtoWwGfmhDgay+q+7Jywo6LW44/fc62HXCJvoc2dtyNXICTU HplL3bpt2O7mIwF18ULxwaOFijF9/CyQfv9ueFbw7CLoMJ15WxOO5eaBt6qb1pNV U3VUeogF4MoSZMt694uk55mUnYZteMj06m+M335Jj3IrXCK0w/PhmX0j2pH8h/Cu nzO2sJU1aATN8ARmTZZaO/y5sTHO51nB0q4lEGXu0EBLb19/3c58KLn/OW4bacGo L6dCvnLNHvoIjKGb66pXbXBUzTagQx0X2H9hTddZtZI60g== -----END CERTIFICATE-----Generated at Sun Mar 1 20:21:50 2026 by rpki-client