
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa
File: 323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier: Q3vvOgX1+nYLVCrILwZsDsrPqgEIDlOiLw/ybm7yJVc=
Subject key identifier: B6:1D:97:B2:21:F1:55:D1:FC:68:95:17:98:D4:A2:EC:F4:B0:B4:96
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 7FC8A7EF9453A1ED42119F1C6C1AE2318EE660FE
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa
Signing time: Mon 18 May 2026 09:21:41 +0000
ROA not before: Mon 18 May 2026 09:16:41 +0000
ROA not after: Mon 17 May 2027 09:21:41 +0000
asID: 46997
IP address blocks: 2602:feda:a2::/48 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 05:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c8:a7:ef:94:53:a1:ed:42:11:9f:1c:6c:1a:e2:31:8e:e6:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:41 2026 GMT
Not After : May 17 09:21:41 2027 GMT
Subject: CN=B61D97B221F155D1FC68951798D4A2ECF4B0B496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:36:37:48:c9:c3:09:12:6e:37:e3:e5:96:
1d:58:c0:68:26:5a:a2:7b:0e:be:46:ec:22:2b:6f:
db:fc:91:1c:ab:e4:a1:fc:e9:7e:e4:b0:a4:51:22:
a3:3f:c9:81:cf:93:de:84:ef:6e:8a:b3:2b:fe:e1:
c0:8e:2d:b5:82:4a:df:73:a4:20:b1:8a:25:dc:49:
fe:93:6f:97:b2:9d:c0:85:dc:d8:6d:ec:ad:77:58:
35:c0:7c:bb:57:a3:20:55:f7:21:3a:78:63:a5:e2:
ef:9b:43:0f:b0:63:f4:9b:b9:bf:1b:39:4c:d6:79:
90:cd:1e:e7:42:d3:86:66:e3:e1:e4:d4:1b:cb:bb:
33:6e:3a:31:96:9e:be:da:8a:8c:3f:a2:5e:a2:5f:
06:bc:18:42:1d:70:7f:a7:1e:43:2a:83:f9:0f:bd:
84:35:d3:98:4e:61:39:df:8f:de:7c:6e:66:37:c2:
c0:c4:a4:7d:90:c1:ae:c8:0c:1d:6e:7d:72:39:cb:
57:1e:8e:8b:65:f8:78:c3:24:03:1e:1a:ff:42:1a:
63:31:c3:b9:6a:a5:f2:b3:90:5f:db:94:8f:ee:00:
fd:aa:dc:51:9b:10:cf:ab:26:54:27:c7:db:00:3d:
a7:ea:be:a3:58:2d:34:00:48:3d:3f:72:37:4a:b9:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:97:B2:21:F1:55:D1:FC:68:95:17:98:D4:A2:EC:F4:B0:B4:96
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:a2::/48
Signature Algorithm: sha256WithRSAEncryption
43:03:de:b3:54:4a:3c:4f:ce:d3:eb:78:fc:f4:30:98:d1:7f:
6b:89:cd:7c:de:ce:26:b5:9d:a5:70:8c:5d:cf:eb:1a:3b:27:
b0:3c:c2:55:65:3f:5e:19:7c:4d:44:14:1e:f9:0f:d6:fd:41:
f2:84:f4:5f:3f:e1:e3:f7:5a:b1:0d:39:76:15:36:df:f4:c0:
63:8d:86:6e:84:19:db:45:7b:9e:73:f9:b8:48:c6:a9:48:7e:
20:6a:44:ae:60:74:11:45:04:c2:9f:64:cf:1b:24:b9:73:a3:
b2:47:fd:d7:f6:a2:42:39:b9:92:26:a9:19:8f:2d:60:40:76:
70:c7:51:1f:01:c1:7a:ff:0c:f5:a5:c1:66:ec:f2:e4:ff:b2:
1b:12:86:48:92:34:8b:fa:e0:f6:91:54:e5:30:7c:f4:d2:29:
fc:19:a4:4b:95:4a:9c:82:0d:df:60:57:f8:8c:80:3c:38:d5:
9e:e8:33:e6:a4:11:c2:b7:e1:26:44:57:4e:3e:db:c0:94:74:
92:cc:e6:48:0c:b3:2f:5a:d0:9c:40:93:ce:e5:35:42:13:f3:
24:86:16:35:e0:70:73:5d:a8:94:ab:9d:b2:f3:25:27:f5:f6:
63:f9:22:3d:3c:3d:c8:ab:04:98:bb:53:bd:a0:a4:92:fa:8c:
a2:74:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:57:47 2026 by rpki-client