$ rpki-client -vvvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa File: 323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa (raw, json) Hash identifier: VC76BXlmDMGocgYfofyRtI3aWBdkKVb7OPouWf2rk/Y= Subject key identifier: C3:5E:DB:32:92:59:38:05:66:5E:E5:B4:DB:B0:61:48:1C:C3:CD:86 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 7E5F2915BB3C7EC62CA794F0EB30CF24911F0B51 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa Signing time: Tue 01 Sep 2026 05:00:00 +0000 ROA not before: Tue 01 Sep 2026 04:55:00 +0000 ROA not after: Wed 01 Sep 2027 05:00:00 +0000 asID: 396303 IP address blocks: 2406:4440:50::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5f:29:15:bb:3c:7e:c6:2c:a7:94:f0:eb:30:cf:24:91:1f:0b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Sep 1 04:55:00 2026 GMT Not After : Sep 1 05:00:00 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:66:5f:e9:bc:d1:1e:f9:fb:50:0c:27:26: aa:e4:5f:85:a9:85:64:ee:0c:19:7e:bc:ff:0f:56: bf:39:4b:69:ae:50:cc:ba:ea:56:3b:41:99:5d:7f: 6c:0f:85:46:3a:c0:f8:97:73:0f:4e:7a:cc:a6:bb: 43:9d:d3:f8:87:68:d5:77:ee:f4:be:8b:23:a7:e3: 09:93:e1:c9:09:d2:11:3d:1d:88:76:ea:b5:00:99: 97:fa:d5:5d:b0:47:e6:2a:b3:dd:f3:62:eb:5e:0d: 4b:94:41:f7:0e:3f:4c:17:42:77:a9:8b:f6:e9:88: 2a:a0:3b:fd:4a:fe:cf:f3:45:a9:e9:a6:e4:08:94: 41:1b:6c:71:08:84:db:b4:28:62:ea:a2:c9:ce:47: 96:39:74:03:34:5c:9d:da:8a:5d:6e:a0:e1:8f:da: ec:a8:2d:16:80:d7:0e:cb:54:cc:71:f5:b3:56:1b: 6d:66:fd:ff:60:63:86:92:07:7f:06:a1:2b:15:02: f0:8c:16:f0:63:bc:45:b1:8a:30:43:6b:10:f4:a4: 08:ec:2e:fc:56:94:a7:55:90:ae:b8:0f:cc:9a:6e: 0f:8e:1c:85:0f:53:26:44:26:7e:dd:fa:db:25:ba: f0:51:80:87:6d:a5:ec:24:f9:e1:72:c3:ea:1a:d9: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:DB:32:92:59:38:05:66:5E:E5:B4:DB:B0:61:48:1C:C3:CD:86 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a35303a3a2f34342d3434203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:50::/44 Signature Algorithm: sha256WithRSAEncryption cd:cc:15:e2:67:e8:02:53:32:5d:af:56:29:ce:73:d1:84:5b: 6b:9b:08:6f:f3:17:73:8e:49:e2:7c:be:5e:ef:e6:be:3f:7d: 24:fc:35:c3:41:86:33:92:31:a6:13:dc:5e:38:ec:30:46:d6: 74:88:fb:0d:0f:c9:c5:5b:af:f2:02:71:e2:da:e9:54:72:4a: 6b:66:50:f3:2f:75:3d:d7:74:f5:41:eb:8b:3c:6a:f1:c2:5e: 18:a1:a7:68:69:cb:1b:0c:39:0e:04:7f:05:9e:28:c7:b4:d5: 42:58:c6:35:ae:89:5e:8e:94:e8:9f:d8:a0:1d:90:c0:84:3e: c6:e5:fb:54:e3:1f:71:36:a9:7c:66:dd:aa:8d:09:56:6e:26: c7:35:2a:20:30:1a:60:fb:d7:78:49:e2:7b:ae:39:52:d0:f1: b6:a4:70:c3:00:06:2e:25:85:ec:44:0b:05:22:e3:d5:aa:3c: 01:0f:9d:ae:90:2e:6a:9a:d5:86:13:f7:d7:06:e5:76:19:33: c0:d6:e0:4b:9a:d6:63:35:d7:5f:e2:68:af:f3:ae:2c:88:40: 3e:54:30:5f:c0:da:89:89:e4:fb:64:50:1e:da:44:dd:8f:74: 84:72:10:27:a1:2d:ca:78:5b:a1:be:91:31:0c:af:81:32:46: c1:c6:cc:c8 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUfl8pFbs8fsYsp5Tw6zDPJJEfC1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA5MDEwNDU1MDBaFw0yNzA5MDEwNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzM5NDY2NUZFOUJDRDExRUY5 RkI1MDBDMjcyNkFBRTQ1Rjg1QTk4NTY0RUUwQzE5N0VCQ0ZGMEY1NkJGMzk0QjY5 QUU1MENDQkFFQTU2M0I0MTk5NUQ3RjZDMEY4NTQ2M0FDMEY4OTc3MzBGNEU3QUND QTZCQjQzOUREM0Y4ODc2OEQ1NzdFRUY0QkU4QjIzQTdFMzA5OTNFMUM5MDlEMjEx M0QxRDg4NzZFQUI1MDA5OTk3RkFENTVEQjA0N0U2MkFCM0RERjM2MkVCNUUwRDRC OTQ0MUY3MEUzRjRDMTc0Mjc3QTk4QkY2RTk4ODJBQTAzQkZENEFGRUNGRjM0NUE5 RTlBNkU0MDg5NDQxMUI2QzcxMDg4NERCQjQyODYyRUFBMkM5Q0U0Nzk2Mzk3NDAz MzQ1QzlEREE4QTVENkVBMEUxOEZEQUVDQTgyRDE2ODBENzBFQ0I1NENDNzFGNUIz NTYxQjZENjZGREZGNjA2Mzg2OTIwNzdGMDZBMTJCMTUwMkYwOEMxNkYwNjNCQzQ1 QjE4QTMwNDM2QjEwRjRBNDA4RUMyRUZDNTY5NEE3NTU5MEFFQjgwRkNDOUE2RTBG OEUxQzg1MEY1MzI2NDQyNjdFRERGQURCMjVCQUYwNTE4MDg3NkRBNUVDMjRGOUUx NzJDM0VBMUFEOURBREYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAw5RmX+m80R75+1AMJyaq5F+FqYVk7gwZfrz/D1a/OUtprlDMuupW O0GZXX9sD4VGOsD4l3MPTnrMprtDndP4h2jVd+70vosjp+MJk+HJCdIRPR2Iduq1 AJmX+tVdsEfmKrPd82LrXg1LlEH3Dj9MF0J3qYv26YgqoDv9Sv7P80Wp6abkCJRB G2xxCITbtChi6qLJzkeWOXQDNFyd2opdbqDhj9rsqC0WgNcOy1TMcfWzVhttZv3/ YGOGkgd/BqErFQLwjBbwY7xFsYowQ2sQ9KQI7C78VpSnVZCuuA/Mmm4PjhyFD1Mm RCZ+3frbJbrwUYCHbaXsJPnhcsPqGtna3wIDAQABo4IB7TCCAekwHQYDVR0OBBYE FMNe2zKSWTgFZl7ltNuwYUgcw82GMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBgwYI KwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTM1MzAzYTNhMmYz NDM0MmQzNDM0MjAzZDNlMjAzMzM5MzYzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkBkRAAFAw DQYJKoZIhvcNAQELBQADggEBAM3MFeJn6AJTMl2vVinOc9GEW2ubCG/zF3OOSeJ8 vl7v5r4/fST8NcNBhjOSMaYT3F447DBG1nSI+w0PycVbr/ICceLa6VRySmtmUPMv dT3XdPVB64s8avHCXhihp2hpyxsMOQ4EfwWeKMe01UJYxjWuiV6OlOif2KAdkMCE Psbl+1TjH3E2qXxm3aqNCVZuJsc1KiAwGmD713hJ4nuuOVLQ8bakcMMABi4lhexE CwUi49WqPAEPna6QLmqa1YYT99cG5XYZM8DW4Eua1mM111/iaK/zriyIQD5UMF/A 2omJ5PtkUB7aRN2PdIRyECehLcp4W6G+kTEMr4EyRsHGzMg= -----END CERTIFICATE-----Generated at Mon Sep 21 09:30:03 2026 by rpki-client