$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa File: 323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa (raw, json) Hash identifier: Vrtr/g9mwaj942FPX0eh+YKhTBcDaiD65ip9z/ITn8E= Subject key identifier: A6:93:A5:CB:94:80:01:84:3F:79:B7:C7:EB:C1:9E:3D:3A:E0:AA:13 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 6C16B3E5121D339D85FB37C81A7F3053B4CC314C Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa Signing time: Mon 16 Jun 2025 08:52:24 +0000 ROA not before: Mon 16 Jun 2025 08:47:24 +0000 ROA not after: Mon 15 Jun 2026 08:52:24 +0000 asID: 131477 IP address blocks: 2602:feda:af3::/48 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:16:b3:e5:12:1d:33:9d:85:fb:37:c8:1a:7f:30:53:b4:cc:31:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:24 2025 GMT Not After : Jun 15 08:52:24 2026 GMT Subject: CN=A693A5CB948001843F79B7C7EBC19E3D3AE0AA13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:31:e7:1e:93:f7:c1:d9:c8:ce:99:49:6a: 95:ef:11:23:db:cf:f8:d1:3d:ae:d7:29:a0:38:24: d7:db:ef:aa:e4:03:01:92:47:ca:a2:50:2a:fa:0c: 2e:88:87:89:0b:43:50:61:78:eb:95:de:02:65:e3: a0:9f:c4:9d:8d:46:67:78:a3:d3:c6:34:5e:ae:2d: 28:1b:9f:5c:9a:9f:30:e1:72:76:f6:ca:cb:a7:01: 0a:86:60:83:c4:39:0b:24:59:a5:d6:b6:cf:9b:a3: b8:20:25:0e:9c:30:b7:20:cb:e7:35:ad:93:6d:2c: 5c:bf:75:04:24:0f:64:92:eb:6c:25:1b:50:2d:7d: 62:41:a8:40:ff:a6:a8:09:63:3d:db:7e:d0:91:1c: fb:09:33:74:1e:d2:54:31:3e:93:01:79:7b:0f:f3: 71:af:47:6c:a5:06:ef:d0:55:4a:02:9f:e8:00:ea: 9d:b9:91:43:6a:97:1b:b8:ea:a4:dd:f3:95:d8:a3: 96:fc:b6:95:59:09:67:e8:00:39:5d:1b:20:8a:80: dd:d7:d6:8c:f7:f5:7f:3f:f8:5a:c6:1f:1c:c7:35: 83:fc:81:58:b4:91:a1:df:01:d5:de:2a:42:6b:d2: 80:17:66:2e:59:cd:57:bc:78:86:5d:03:66:94:9b: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:93:A5:CB:94:80:01:84:3F:79:B7:C7:EB:C1:9E:3D:3A:E0:AA:13 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:af3::/48 Signature Algorithm: sha256WithRSAEncryption 63:14:21:90:b3:fb:d9:2b:fe:46:6c:41:65:0a:07:1e:a3:d0: 95:ca:15:79:a8:28:81:33:c3:af:74:02:ce:46:73:44:a7:ab: 5b:39:78:23:a2:6b:74:b2:56:fc:e2:ff:8d:36:8d:0e:d6:f5: 86:dc:06:12:14:d4:d7:a6:ca:62:e4:1a:ee:32:c4:bc:0e:57: dc:c1:6b:fa:00:a5:7c:bf:78:43:6a:25:d8:f4:a4:c7:6d:e4: f9:3a:c6:b3:07:60:c4:29:24:7f:28:46:53:2d:ba:86:43:bd: f2:37:82:5d:24:fd:56:4b:83:e1:84:6b:9c:28:72:15:bc:04: 1b:6c:f1:24:5b:49:7b:7c:d1:6b:89:a6:e4:a2:01:dc:12:5c: d3:a2:5f:ad:be:01:b9:55:9c:38:c3:fb:be:5b:bd:79:b9:68: bf:26:09:ce:21:5a:e9:9a:d6:78:78:97:df:32:f1:ff:d0:9a: 0d:86:57:b7:1b:04:33:f5:68:6c:69:53:64:10:7d:88:a9:3b: 09:f9:96:f6:12:e1:d6:93:97:03:9f:b6:56:d1:cc:a2:89:62: 72:a4:e6:de:84:53:c8:17:22:bd:c1:23:28:35:e5:95:45:b3: 77:a3:b1:f2:20:bc:26:ea:d3:5d:ea:88:6a:aa:be:ce:de:7b: 46:35:97:ec -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUbBaz5RIdM52F+zfIGn8wU7TMMUwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzI0WhcNMjYwNjE1MDg1MjI0 WjAzMTEwLwYDVQQDEyhBNjkzQTVDQjk0ODAwMTg0M0Y3OUI3QzdFQkMxOUUzRDNB RTBBQTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCMx5x6T98HZ yM6ZSWqV7xEj28/40T2u1ymgOCTX2++q5AMBkkfKolAq+gwuiIeJC0NQYXjrld4C ZeOgn8SdjUZneKPTxjReri0oG59cmp8w4XJ29srLpwEKhmCDxDkLJFml1rbPm6O4 ICUOnDC3IMvnNa2TbSxcv3UEJA9kkutsJRtQLX1iQahA/6aoCWM9237QkRz7CTN0 HtJUMT6TAXl7D/Nxr0dspQbv0FVKAp/oAOqduZFDapcbuOqk3fOV2KOW/LaVWQln 6AA5XRsgioDd19aM9/V/P/haxh8cxzWD/IFYtJGh3wHV3ipCa9KAF2YuWc1XvHiG XQNmlJufOQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKaTpcuUgAGEP3m3x+vBnj06 4KoTMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjE2NjMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMxMzQzNzM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL+2grzMA0GCSqGSIb3DQEBCwUAA4IBAQBjFCGQs/vZK/5GbEFlCgce o9CVyhV5qCiBM8OvdALORnNEp6tbOXgjomt0slb84v+NNo0O1vWG3AYSFNTXpspi 5BruMsS8DlfcwWv6AKV8v3hDaiXY9KTHbeT5OsazB2DEKSR/KEZTLbqGQ73yN4Jd JP1WS4PhhGucKHIVvAQbbPEkW0l7fNFriabkogHcElzTol+tvgG5VZw4w/u+W715 uWi/JgnOIVrpmtZ4eJffMvH/0JoNhle3GwQz9WhsaVNkEH2IqTsJ+Zb2EuHWk5cD n7ZW0cyiiWJypObehFPIFyK9wSMoNeWVRbN3o7HyILwm6tNd6ohqqr7O3ntGNZfs -----END CERTIFICATE-----Generated at Mon Jun 16 09:57:42 2025 by rpki-client