$ rpki-client -vvvf rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3233203d3e203436393937.roa File: 3130332e3135322e33342e302f32332d3233203d3e203436393937.roa (raw, json) Hash identifier: C2NTJFZsjvkYLsbps06kyeYngY6dBkneRjgRkUn300c= Subject key identifier: 44:B4:11:80:9C:C7:0D:03:B2:25:1F:BA:EE:F7:07:C7:6C:F3:8D:28 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 63987D8836245DD61FFC685E48AAD56F0E9935EE Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3233203d3e203436393937.roa Signing time: Wed 19 Aug 2026 09:00:00 +0000 ROA not before: Wed 19 Aug 2026 08:55:00 +0000 ROA not after: Thu 19 Aug 2027 09:00:00 +0000 asID: 46997 IP address blocks: 103.152.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:98:7d:88:36:24:5d:d6:1f:fc:68:5e:48:aa:d5:6f:0e:99:35:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Aug 19 08:55:00 2026 GMT Not After : Aug 19 09:00:00 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:1f:54:6a:4d:7a:70:c2:9f:0e:ea:49:2f: ef:8f:9a:14:f3:9d:bd:ff:11:0e:01:72:1b:a0:6c: b6:cc:0e:dd:41:13:73:44:f3:80:4d:d5:6e:c1:fc: cf:4e:1c:80:32:5c:62:f8:3e:ff:f0:03:e4:12:3a: 99:2a:44:3e:76:79:d8:17:06:44:ab:59:55:0d:e4: 85:93:0a:25:2a:cc:25:fb:1d:a8:40:ba:14:65:7e: 89:26:b0:cd:a9:b1:c3:cd:79:9a:41:ec:41:a1:cf: 46:b5:66:4d:fb:d8:22:60:0f:ee:9f:68:91:6e:4d: 3c:55:59:b6:26:ac:22:7a:01:ca:d9:b6:f0:55:b2: 5b:15:5c:98:82:3e:99:ce:1e:93:12:f6:3c:6a:0a: c8:96:1f:b5:1a:2e:94:6d:90:f8:21:c7:76:34:50: 85:61:7a:d7:7e:ee:d7:32:ac:19:a5:8d:ca:52:2f: b5:70:3d:1a:a6:38:3c:f6:45:39:30:a3:4f:ba:8c: 1a:30:3e:41:31:b8:f2:92:80:09:59:20:82:82:63: 67:7f:55:4c:08:55:23:a2:e9:54:76:d1:55:da:a2: 4a:c9:b7:20:c6:9d:de:ae:50:ef:3b:d6:3b:6d:71: 2c:bf:cd:27:00:d2:1e:c3:49:92:85:1f:6b:94:63: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B4:11:80:9C:C7:0D:03:B2:25:1F:BA:EE:F7:07:C7:6C:F3:8D:28 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/3130332e3135322e33342e302f32332d3233203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.34.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:7f:fa:62:ac:9d:7a:0d:7a:e3:21:ea:d1:da:f5:9b:4a:97: 75:cd:00:4b:29:49:19:5b:64:9d:09:15:95:58:fe:f8:5d:8b: 80:36:9e:1c:1e:02:2f:c0:cb:52:75:97:e9:c8:74:33:b1:26: 81:11:df:72:e8:25:cc:18:81:8b:f0:52:8a:6c:66:d3:46:c6: 5b:84:f9:2f:d8:55:cd:c2:5f:9b:86:5b:c7:c4:93:9b:ea:32: 98:52:12:e5:bd:00:17:40:0d:23:34:db:a8:fa:fd:87:17:ae: 58:a2:6c:58:b0:51:a6:b7:4f:0b:95:2d:ec:7d:ef:89:32:2d: e1:5a:4e:c0:89:65:4a:b9:54:2e:bb:8c:0b:ce:23:a8:ad:b3: f6:03:ef:bd:9d:12:3f:e8:ea:55:8c:98:2e:58:86:91:82:b5: 71:16:af:60:88:b8:a8:d1:d9:29:2d:aa:40:0f:fc:98:7b:3b: c0:b4:d2:4e:24:56:c7:7f:50:ea:76:f1:87:f8:d5:4a:1b:ae: 45:9d:78:67:41:31:24:f5:d8:97:81:8d:50:82:d8:f6:af:ba: 29:0c:09:6a:e6:8b:22:17:a7:a4:ed:d8:1e:72:9c:04:b0:62: d6:c1:9b:15:ba:01:88:65:f5:56:91:e2:1a:6f:04:ab:96:89: c0:36:9d:64 -----BEGIN CERTIFICATE----- MIIG1TCCBb2gAwIBAgIUY5h9iDYkXdYf/GheSKrVbw6ZNe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA4MTkwODU1MDBaFw0yNzA4MTkwOTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDNFQjFGNTQ2QTREN0E3MEMy OUYwRUVBNDkyRkVGOEY5QTE0RjM5REJERkYxMTBFMDE3MjFCQTA2Q0I2Q0MwRURE NDExMzczNDRGMzgwNERENTZFQzFGQ0NGNEUxQzgwMzI1QzYyRjgzRUZGRjAwM0U0 MTIzQTk5MkE0NDNFNzY3OUQ4MTcwNjQ0QUI1OTU1MERFNDg1OTMwQTI1MkFDQzI1 RkIxREE4NDBCQTE0NjU3RTg5MjZCMENEQTlCMUMzQ0Q3OTlBNDFFQzQxQTFDRjQ2 QjU2NjRERkJEODIyNjAwRkVFOUY2ODkxNkU0RDNDNTU1OUI2MjZBQzIyN0EwMUNB RDlCNkYwNTVCMjVCMTU1Qzk4ODIzRTk5Q0UxRTkzMTJGNjNDNkEwQUM4OTYxRkI1 MUEyRTk0NkQ5MEY4MjFDNzc2MzQ1MDg1NjE3QUQ3N0VFRUQ3MzJBQzE5QTU4RENB NTIyRkI1NzAzRDFBQTYzODNDRjY0NTM5MzBBMzRGQkE4QzFBMzAzRTQxMzFCOEYy OTI4MDA5NTkyMDgyODI2MzY3N0Y1NTRDMDg1NTIzQTJFOTU0NzZEMTU1REFBMjRB QzlCNzIwQzY5RERFQUU1MEVGM0JENjNCNkQ3MTJDQkZDRDI3MDBEMjFFQzM0OTky ODUxRjZCOTQ2MzRERjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA0+sfVGpNenDCnw7qSS/vj5oU8529/xEOAXIboGy2zA7dQRNzRPOA TdVuwfzPThyAMlxi+D7/8APkEjqZKkQ+dnnYFwZEq1lVDeSFkwolKswl+x2oQLoU ZX6JJrDNqbHDzXmaQexBoc9GtWZN+9giYA/un2iRbk08VVm2JqwiegHK2bbwVbJb FVyYgj6Zzh6TEvY8agrIlh+1Gi6UbZD4Icd2NFCFYXrXfu7XMqwZpY3KUi+1cD0a pjg89kU5MKNPuowaMD5BMbjykoAJWSCCgmNnf1VMCFUjoulUdtFV2qJKybcgxp3e rlDvO9Y7bXEsv80nANIew0mShR9rlGNN+QIDAQABo4IB4zCCAd8wHQYDVR0OBBYE FES0EYCcxw0DsiUfuu73B8ds840oMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjB9Bggr BgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8vcnBraS5hcGVybmV0Lmlv L3JlcG8vQVBFUk5FVC8xLzMxMzAzMzJlMzEzNTMyMmUzMzM0MmUzMDJmMzIzMzJk MzIzMzIwM2QzZTIwMzQzNjM5MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeYIjANBgkqhkiG9w0B AQsFAAOCAQEAen/6Yqydeg164yHq0dr1m0qXdc0ASylJGVtknQkVlVj++F2LgDae HB4CL8DLUnWX6ch0M7EmgRHfcuglzBiBi/BSimxm00bGW4T5L9hVzcJfm4Zbx8ST m+oymFIS5b0AF0ANIzTbqPr9hxeuWKJsWLBRprdPC5Ut7H3viTIt4VpOwIllSrlU LruMC84jqK2z9gPvvZ0SP+jqVYyYLliGkYK1cRavYIi4qNHZKS2qQA/8mHs7wLTS TiRWx39Q6nbxh/jVShuuRZ14Z0ExJPXYl4GNUILY9q+6KQwJauaLIhenpO3YHnKc BLBi1sGbFboBiGX1VpHiGm8Eq5aJwDadZA== -----END CERTIFICATE-----Generated at Mon Sep 21 03:13:22 2026 by rpki-client