$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa File: 323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa (raw, json) Hash identifier: vs3UoJMNYjlIDAR0rzYNrKRhsWaZ/ZxH/RwXj9Ifxa8= Subject key identifier: 69:3D:14:36:75:46:4A:AE:31:BC:00:9C:27:1E:82:B0:64:BF:70:71 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 2A2D5136260270F861A1DA2CB66E4F7C370D6699 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa Signing time: Thu 16 Apr 2026 18:00:00 +0000 ROA not before: Thu 16 Apr 2026 17:55:00 +0000 ROA not after: Fri 16 Apr 2027 18:00:00 +0000 asID: 142641 IP address blocks: 2406:4440:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2d:51:36:26:02:70:f8:61:a1:da:2c:b6:6e:4f:7c:37:0d:66:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Apr 16 17:55:00 2026 GMT Not After : Apr 16 18:00:00 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:1b:27:bc:3f:3c:2d:fa:8c:81:d9:34:b7: 35:ac:fa:f9:1f:01:76:fc:b4:16:0a:2c:42:73:0b: 8a:3f:92:04:a6:01:da:06:5d:c5:7f:cc:87:5a:4b: b8:d8:70:ba:f5:13:fc:94:b3:ae:67:3c:4f:b1:c5: 56:57:95:99:0d:99:d2:a0:19:4d:71:73:9f:cf:45: 9d:f7:d4:20:5b:65:59:60:0f:be:35:19:b6:f4:3e: 02:ac:41:09:f4:9e:4e:dc:0e:50:5a:69:33:be:e4: 99:a2:ac:67:73:6a:d2:33:6b:fa:b8:40:7e:9b:82: f4:ab:ce:8c:3e:7c:e9:56:a1:94:94:2d:55:43:96: 5c:5e:4d:16:bc:2f:b6:ce:fd:d5:c3:4f:77:ea:09: cf:9a:43:c1:d1:1b:37:d1:98:f0:4a:8b:69:b8:5d: 57:da:26:8a:ad:4e:56:54:17:96:2a:a7:41:ec:e6: 8f:84:80:e6:3f:73:23:14:f1:0c:6e:15:02:9d:e3: 2b:87:f6:47:75:b5:fc:58:a2:4c:3a:ef:54:b9:a4: 8f:95:bc:78:86:60:01:8c:a2:d6:99:ad:07:e4:d8: 2c:64:ec:db:7c:64:c5:d5:ef:bc:d6:be:65:c5:01: 2b:f1:99:69:c6:79:e9:3e:a7:65:a6:bb:91:5a:60: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3D:14:36:75:46:4A:AE:31:BC:00:9C:27:1E:82:B0:64:BF:70:71 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a31303a3a2f34342d3438203d3e20313432363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:10::/44 Signature Algorithm: sha256WithRSAEncryption d6:75:35:bf:90:8d:9d:34:82:a6:a8:3e:72:d9:78:68:c0:01: fc:22:4f:d7:1f:46:ce:5a:dc:bb:2c:d3:07:01:2e:cf:78:1e: 02:21:f8:45:48:8a:f8:6e:d7:1a:5f:69:dd:11:fa:cc:d1:53: b7:a8:81:f2:9c:f2:b4:dc:c7:f7:63:8d:3d:c2:b6:38:5c:6e: 93:06:9f:57:9d:5e:8c:61:5c:de:9a:de:35:7b:f5:3d:54:8b: af:fb:73:d9:a2:e6:de:60:c9:7e:99:a7:fc:24:2c:49:96:9a: 1a:05:5c:a4:85:9e:8c:e8:53:4c:b9:ef:af:d8:54:10:fb:b9: 32:69:76:a4:e6:d0:8d:5d:5f:83:c5:e1:6d:82:d5:63:0d:1d: 65:e4:26:94:f3:7f:18:e0:ea:71:90:5b:a2:97:e5:94:d9:0a: d9:dd:7c:80:93:0d:eb:53:31:27:f9:42:93:6d:14:ed:4e:47: 55:55:6b:13:20:1c:07:58:0e:df:57:b6:a1:b3:56:b5:f7:48: cc:7b:18:6b:9c:b2:03:4e:e9:74:dd:87:2c:8f:d6:f0:85:e7: 32:c5:f9:f6:a2:df:45:47:52:9d:77:bf:e6:25:00:84:2b:6c: 06:3b:97:37:ea:be:8c:cb:9b:a7:b3:6a:02:e4:e0:08:6b:78: ce:a0:cf:ef -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUKi1RNiYCcPhhodostm5PfDcNZpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA0MTYxNzU1MDBaFw0yNzA0MTYxODAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU2NDFCMjdCQzNGM0MyREZB OEM4MUQ5MzRCNzM1QUNGQUY5MUYwMTc2RkNCNDE2MEEyQzQyNzMwQjhBM0Y5MjA0 QTYwMURBMDY1REM1N0ZDQzg3NUE0QkI4RDg3MEJBRjUxM0ZDOTRCM0FFNjczQzRG QjFDNTU2NTc5NTk5MEQ5OUQyQTAxOTRENzE3MzlGQ0Y0NTlERjdENDIwNUI2NTU5 NjAwRkJFMzUxOUI2RjQzRTAyQUM0MTA5RjQ5RTRFREMwRTUwNUE2OTMzQkVFNDk5 QTJBQzY3NzM2QUQyMzM2QkZBQjg0MDdFOUI4MkY0QUJDRThDM0U3Q0U5NTZBMTk0 OTQyRDU1NDM5NjVDNUU0RDE2QkMyRkI2Q0VGREQ1QzM0Rjc3RUEwOUNGOUE0M0Mx RDExQjM3RDE5OEYwNEE4QjY5Qjg1RDU3REEyNjhBQUQ0RTU2NTQxNzk2MkFBNzQx RUNFNjhGODQ4MEU2M0Y3MzIzMTRGMTBDNkUxNTAyOURFMzJCODdGNjQ3NzVCNUZD NThBMjRDM0FFRjU0QjlBNDhGOTVCQzc4ODY2MDAxOENBMkQ2OTlBRDA3RTREODJD NjRFQ0RCN0M2NEM1RDVFRkJDRDZCRTY1QzUwMTJCRjE5OTY5QzY3OUU5M0VBNzY1 QTZCQjkxNUE2MDVCNzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAvmQbJ7w/PC36jIHZNLc1rPr5HwF2/LQWCixCcwuKP5IEpgHaBl3F f8yHWku42HC69RP8lLOuZzxPscVWV5WZDZnSoBlNcXOfz0Wd99QgW2VZYA++NRm2 9D4CrEEJ9J5O3A5QWmkzvuSZoqxnc2rSM2v6uEB+m4L0q86MPnzpVqGUlC1VQ5Zc Xk0WvC+2zv3Vw0936gnPmkPB0Rs30ZjwSotpuF1X2iaKrU5WVBeWKqdB7OaPhIDm P3MjFPEMbhUCneMrh/ZHdbX8WKJMOu9UuaSPlbx4hmABjKLWma0H5NgsZOzbfGTF 1e+81r5lxQEr8ZlpxnnpPqdlpruRWmBbeQIDAQABo4IB7TCCAekwHQYDVR0OBBYE FGk9FDZ1RkquMbwAnCcegrBkv3BxMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBgwYI KwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTMxMzAzYTNhMmYz NDM0MmQzNDM4MjAzZDNlMjAzMTM0MzIzNjM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkBkRAABAw DQYJKoZIhvcNAQELBQADggEBANZ1Nb+QjZ00gqaoPnLZeGjAAfwiT9cfRs5a3Lss 0wcBLs94HgIh+EVIivhu1xpfad0R+szRU7eogfKc8rTcx/djjT3CtjhcbpMGn1ed XoxhXN6a3jV79T1Ui6/7c9mi5t5gyX6Zp/wkLEmWmhoFXKSFnozoU0y576/YVBD7 uTJpdqTm0I1dX4PF4W2C1WMNHWXkJpTzfxjg6nGQW6KX5ZTZCtndfICTDetTMSf5 QpNtFO1OR1VVaxMgHAdYDt9XtqGzVrX3SMx7GGucsgNO6XTdhyyP1vCF5zLF+fai 30VHUp13v+YlAIQrbAY7lzfqvozLm6ezagLk4AhreM6gz+8= -----END CERTIFICATE-----Generated at Fri Apr 17 09:49:41 2026 by rpki-client