$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa File: 323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa (raw, json) Hash identifier: MOLEK6/TG1FD18KucoWhGlmbagTfEROO3boyHwwQ8Bo= Subject key identifier: 76:F6:9C:00:8B:2F:7F:E1:1F:C7:1B:C5:6C:49:FA:60:D4:F3:CD:81 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6D5FC754FA28DD23BA9B3D802E8E91A3010A2BF1 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa Signing time: Mon 16 Jun 2025 08:52:27 +0000 ROA not before: Mon 16 Jun 2025 08:47:27 +0000 ROA not after: Mon 15 Jun 2026 08:52:27 +0000 asID: 47158 IP address blocks: 2602:feda:ab0::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5f:c7:54:fa:28:dd:23:ba:9b:3d:80:2e:8e:91:a3:01:0a:2b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:27 2025 GMT Not After : Jun 15 08:52:27 2026 GMT Subject: CN=76F69C008B2F7FE11FC71BC56C49FA60D4F3CD81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:4b:d5:ed:b2:8d:e2:45:a2:40:c1:bc:57: b4:7e:07:7f:df:e8:c2:81:a8:15:14:7d:37:3d:ca: 37:4c:5f:43:e5:6b:5a:df:e7:22:c5:eb:21:55:47: fa:ed:02:33:03:bb:0c:47:33:09:bf:73:41:7e:31: 51:c8:98:1e:e9:35:cd:ea:59:4b:03:0c:8d:78:d2: 18:31:8d:58:d0:49:76:c9:ee:8c:68:97:96:3e:8d: 5d:bf:7c:dd:11:88:2b:d9:d1:24:26:90:01:af:0e: f6:b2:8d:7c:b0:74:7f:b8:d6:1c:e7:42:7b:e5:96: 65:0d:c1:68:ed:8a:3b:2b:bd:bb:5e:04:bb:bf:2b: 35:b9:ae:15:da:97:90:f6:55:d9:e8:a0:2b:c9:3d: 81:f5:aa:e7:87:68:67:da:d8:ad:89:c5:af:56:a5: d2:ce:5d:7d:cb:36:20:cd:02:e6:58:e3:c1:d1:be: 22:42:3b:c4:58:bd:b5:f7:63:86:4b:6c:5e:25:65: 6e:1c:83:c9:a9:58:bc:91:cd:eb:61:32:b6:70:39: 77:e3:42:1d:9b:0b:86:0a:c6:70:d0:f5:07:ce:76: f2:c3:d4:9b:1c:43:1e:e4:34:e1:c5:33:70:0e:eb: 34:8b:4f:3f:3f:36:41:cf:d3:9a:30:38:54:83:31: 30:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F6:9C:00:8B:2F:7F:E1:1F:C7:1B:C5:6C:49:FA:60:D4:F3:CD:81 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:ab0::/44 Signature Algorithm: sha256WithRSAEncryption 89:f9:39:41:d4:30:b0:57:9f:3c:48:16:4b:d1:f5:90:c9:31: 50:4f:7e:99:92:03:b3:5f:d8:fa:e9:91:0c:38:c1:3b:b3:be: 6e:ce:de:02:15:da:a6:5d:b2:65:4f:5e:55:e7:50:b6:71:a2: 31:06:a3:a5:08:1f:76:e9:10:36:78:6e:44:26:b9:05:76:5e: 1a:2b:bf:a1:7b:c3:f1:8f:b9:fd:ec:b9:f0:d7:25:4f:6a:17: 18:9f:ed:89:d6:c9:ba:9d:3f:f2:43:9a:2b:93:14:61:32:0f: 2c:d3:fc:d1:cb:da:d7:54:ea:bd:8d:31:b7:93:6f:f8:e8:e8: b7:5b:b7:d6:73:03:2a:03:87:fd:e7:be:5c:19:75:9b:79:fe: 1d:5e:65:7c:50:1f:b4:2a:7e:65:6c:3e:a4:ae:9c:1e:39:87: be:87:0c:09:c7:ce:b5:9a:2e:a1:23:79:cf:a0:0c:17:2d:fe: 37:e6:0e:12:0b:c0:55:6a:37:0e:f9:b4:04:3c:dd:13:e6:6d: 23:56:e4:a7:c7:fb:0c:93:49:0c:47:1b:61:2f:46:b2:e4:c7: 99:16:9b:3e:ae:6b:44:08:f0:7c:fe:82:e4:9a:83:38:af:86: b1:98:59:28:c0:e5:8d:d6:b9:aa:0c:e0:27:9d:0c:a2:48:2a: ef:bd:9d:c2 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUbV/HVPoo3SO6mz2ALo6RowEKK/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI3WhcNMjYwNjE1MDg1MjI3 WjAzMTEwLwYDVQQDEyg3NkY2OUMwMDhCMkY3RkUxMUZDNzFCQzU2QzQ5RkE2MEQ0 RjNDRDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzspL1e2yjeJF okDBvFe0fgd/3+jCgagVFH03Pco3TF9D5Wta3+cixeshVUf67QIzA7sMRzMJv3NB fjFRyJge6TXN6llLAwyNeNIYMY1Y0El2ye6MaJeWPo1dv3zdEYgr2dEkJpABrw72 so18sHR/uNYc50J75ZZlDcFo7Yo7K727XgS7vys1ua4V2peQ9lXZ6KAryT2B9arn h2hn2titicWvVqXSzl19yzYgzQLmWOPB0b4iQjvEWL2192OGS2xeJWVuHIPJqVi8 kc3rYTK2cDl340IdmwuGCsZw0PUHznbyw9SbHEMe5DThxTNwDus0i08/PzZBz9Oa MDhUgzEwUwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFHb2nACLL3/hH8cbxWxJ+mDU 882BMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2 MTYyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNDM3MzEzNTM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEJgL+2gqwMA0GCSqGSIb3DQEBCwUAA4IBAQCJ+TlB1DCwV588SBZL0fWQyTFQ T36ZkgOzX9j66ZEMOME7s75uzt4CFdqmXbJlT15V51C2caIxBqOlCB926RA2eG5E JrkFdl4aK7+he8Pxj7n97Lnw1yVPahcYn+2J1sm6nT/yQ5orkxRhMg8s0/zRy9rX VOq9jTG3k2/46Oi3W7fWcwMqA4f9575cGXWbef4dXmV8UB+0Kn5lbD6krpweOYe+ hwwJx861mi6hI3nPoAwXLf435g4SC8BVajcO+bQEPN0T5m0jVuSnx/sMk0kMRxth L0ay5MeZFps+rmtECPB8/oLkmoM4r4axmFkowOWN1rmqDOAnnQyiSCrvvZ3C -----END CERTIFICATE-----Generated at Wed Nov 5 12:19:57 2025 by rpki-client