$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa File: 323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa (raw, json) Hash identifier: ewGsNc50a0L1p8P6O4hueCeyfRp2yIrwoqHNAbUBjUw= Subject key identifier: 60:11:4B:55:83:E9:38:4B:07:7F:84:D4:80:D2:F0:43:95:34:E3:22 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 1C555E93E323865A25193B64AFCEFB95C19849DA Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa Signing time: Mon 16 Jun 2025 08:52:23 +0000 ROA not before: Mon 16 Jun 2025 08:47:23 +0000 ROA not after: Mon 15 Jun 2026 08:52:23 +0000 asID: 396303 IP address blocks: 2602:feda:102::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:55:5e:93:e3:23:86:5a:25:19:3b:64:af:ce:fb:95:c1:98:49:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:23 2025 GMT Not After : Jun 15 08:52:23 2026 GMT Subject: CN=60114B5583E9384B077F84D480D2F0439534E322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:65:7d:95:cf:2a:73:8d:a7:b1:4a:20:1a: 55:b9:de:52:b2:d8:05:8a:f6:6c:ce:3a:a1:9f:22: 25:86:62:37:1b:e9:ed:6c:69:c8:35:90:52:ca:0a: 71:2d:94:05:fa:b2:bd:49:9e:89:b3:87:0a:48:3a: a1:96:17:7d:5d:ad:57:93:69:e7:16:6c:28:9d:a6: 9b:c6:54:cd:b7:e6:c2:ee:41:c4:e4:07:d2:cc:f6: 41:ee:97:72:12:57:5a:9d:ac:ac:12:82:c7:cc:1c: da:01:47:2b:5d:59:7a:a2:91:b4:2d:6e:dc:76:36: fe:a4:9d:85:e8:2e:f1:5d:c7:ba:d5:40:22:8f:15: b1:a2:24:07:57:6d:31:24:5b:b8:04:df:8c:2c:73: d3:3b:d8:0a:8a:6d:0f:b3:08:68:61:19:fb:5d:25: 68:03:27:f7:e2:8f:3e:df:e9:8b:eb:60:79:71:4a: fc:5a:b6:a9:cc:66:52:65:88:37:62:b9:c0:76:af: 27:d9:c3:46:0c:c1:13:1c:64:93:5e:a8:25:b3:1f: 1e:d3:20:76:bc:ac:7b:ef:66:f0:89:cd:f5:84:84: 07:be:1c:5a:4b:6e:ed:64:80:36:09:f2:d7:19:95: 8a:60:29:80:c6:96:06:7a:98:e2:fb:5d:90:93:15: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:11:4B:55:83:E9:38:4B:07:7F:84:D4:80:D2:F0:43:95:34:E3:22 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:102::/48 Signature Algorithm: sha256WithRSAEncryption ac:86:bd:e2:7a:42:77:e6:e9:42:e8:e8:de:fc:2e:97:e6:1e: 1f:b8:e1:e4:45:bf:e6:27:6d:eb:a3:1e:a4:33:78:7b:94:32: 57:6d:63:6e:30:38:9d:b8:97:a1:1a:0e:3d:48:08:2d:a4:07: 68:c1:48:9f:7a:84:9d:fd:83:83:e6:15:29:e0:47:52:9b:f9: 6d:46:fd:6a:d5:7d:fe:53:64:91:e6:27:84:38:5c:6b:26:c9: 3b:21:6a:a8:90:ea:40:d7:9f:75:b5:98:4c:c4:6b:03:b8:fb: d1:74:cc:1d:ca:e9:66:eb:cf:fd:a0:fe:16:24:c8:12:26:e5: 5a:d7:dc:68:5d:5e:47:ac:68:77:0d:14:ee:c2:34:10:3d:7d: 7e:5f:08:f4:8b:e5:fb:ac:77:99:51:af:35:93:ab:f6:f9:c4: 5f:71:02:3a:4f:7f:b1:76:0f:a9:e7:04:5d:01:4f:ce:b0:9f: 84:90:65:72:f6:b3:14:c9:4d:32:be:6b:bd:9e:d9:c3:2a:cf: ab:34:72:87:52:f0:89:a5:73:42:c9:a3:01:d6:74:64:37:25: cd:89:c1:2b:a9:bc:a8:c4:36:06:b1:21:bb:d5:e1:fd:b9:fb: c3:c1:04:49:b6:65:0a:1f:7f:1c:a0:36:dc:aa:3e:3f:30:e3: 0b:e3:28:1c -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUHFVek+MjhlolGTtkr877lcGYSdowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIzWhcNMjYwNjE1MDg1MjIz WjAzMTEwLwYDVQQDEyg2MDExNEI1NTgzRTkzODRCMDc3Rjg0RDQ4MEQyRjA0Mzk1 MzRFMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysdlfZXPKnON p7FKIBpVud5SstgFivZszjqhnyIlhmI3G+ntbGnINZBSygpxLZQF+rK9SZ6Js4cK SDqhlhd9Xa1Xk2nnFmwonaabxlTNt+bC7kHE5AfSzPZB7pdyEldanaysEoLHzBza AUcrXVl6opG0LW7cdjb+pJ2F6C7xXce61UAijxWxoiQHV20xJFu4BN+MLHPTO9gK im0PswhoYRn7XSVoAyf34o8+3+mL62B5cUr8WrapzGZSZYg3YrnAdq8n2cNGDMET HGSTXqglsx8e0yB2vKx772bwic31hIQHvhxaS27tZIA2CfLXGZWKYCmAxpYGepji +12QkxXvDQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGARS1WD6ThLB3+E1IDS8EOV NOMiMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh MzEzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzMzMDMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2gECMA0GCSqGSIb3DQEBCwUAA4IBAQCshr3iekJ35ulC6Oje/C6X 5h4fuOHkRb/mJ23rox6kM3h7lDJXbWNuMDiduJehGg49SAgtpAdowUifeoSd/YOD 5hUp4EdSm/ltRv1q1X3+U2SR5ieEOFxrJsk7IWqokOpA1591tZhMxGsDuPvRdMwd yulm68/9oP4WJMgSJuVa19xoXV5HrGh3DRTuwjQQPX1+Xwj0i+X7rHeZUa81k6v2 +cRfcQI6T3+xdg+p5wRdAU/OsJ+EkGVy9rMUyU0yvmu9ntnDKs+rNHKHUvCJpXNC yaMB1nRkNyXNicErqbyoxDYGsSG71eH9ufvDwQRJtmUKH38coDbcqj4/MOML4ygc -----END CERTIFICATE-----Generated at Mon Jun 16 14:40:25 2025 by rpki-client