$ rpki-client -vvvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa File: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (raw, json) Hash identifier: wzC3kyeBN9KvJecVq6d6FcuygV94ToIRjFDqG4nbtEo= Subject key identifier: C9:20:8F:94:B4:E4:6A:DC:D1:E5:1D:B3:48:A5:DE:77:8F:4A:A0:4E Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 7CCBC5774D82BF615F75DD4066506E221B62BC04 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa Signing time: Tue 01 Sep 2026 05:00:00 +0000 ROA not before: Tue 01 Sep 2026 04:55:00 +0000 ROA not after: Wed 01 Sep 2027 05:00:00 +0000 asID: 396303 IP address blocks: 2406:4440:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cb:c5:77:4d:82:bf:61:5f:75:dd:40:66:50:6e:22:1b:62:bc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Sep 1 04:55:00 2026 GMT Not After : Sep 1 05:00:00 2027 GMT Subject: CN=3082010A0282010100C795BD2CEBF360094DCDA85D3360294D93CC40C2C7EE0070708E97176D3B170E9FC43CBCC0AC9D5730F3FB1CDE69FCA565C1114BE521F85A0050DCF16A3547FB78752CC1A11D8BBE00501F98C391845C9E2ED87CFA595DC28AE3896FE41CA94080734713F82E5E3C0287FD9BC63049F41EF0AF7CDFE63E4472A870ACFFD81F7CD0919529FEB68254956A7FB91343DE42123C3CE160C9467D6A8FA6D5B189BD987D120D83EB329CB42CE9965585A72DFFE8899F4FFDD0F7EBDF6851D8D756B679E8797CE4BAD63591F943F0EAE8340B23D143DC97AA0B238A1853E81E1D5231AF173D9A51B5B989E9C049A3512CC43C3B82EA1EA6B8F235C15C7F0D3E9DBB5D850203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:bd:2c:eb:f3:60:09:4d:cd:a8:5d:33:60: 29:4d:93:cc:40:c2:c7:ee:00:70:70:8e:97:17:6d: 3b:17:0e:9f:c4:3c:bc:c0:ac:9d:57:30:f3:fb:1c: de:69:fc:a5:65:c1:11:4b:e5:21:f8:5a:00:50:dc: f1:6a:35:47:fb:78:75:2c:c1:a1:1d:8b:be:00:50: 1f:98:c3:91:84:5c:9e:2e:d8:7c:fa:59:5d:c2:8a: e3:89:6f:e4:1c:a9:40:80:73:47:13:f8:2e:5e:3c: 02:87:fd:9b:c6:30:49:f4:1e:f0:af:7c:df:e6:3e: 44:72:a8:70:ac:ff:d8:1f:7c:d0:91:95:29:fe:b6: 82:54:95:6a:7f:b9:13:43:de:42:12:3c:3c:e1:60: c9:46:7d:6a:8f:a6:d5:b1:89:bd:98:7d:12:0d:83: eb:32:9c:b4:2c:e9:96:55:85:a7:2d:ff:e8:89:9f: 4f:fd:d0:f7:eb:df:68:51:d8:d7:56:b6:79:e8:79: 7c:e4:ba:d6:35:91:f9:43:f0:ea:e8:34:0b:23:d1: 43:dc:97:aa:0b:23:8a:18:53:e8:1e:1d:52:31:af: 17:3d:9a:51:b5:b9:89:e9:c0:49:a3:51:2c:c4:3c: 3b:82:ea:1e:a6:b8:f2:35:c1:5c:7f:0d:3e:9d:bb: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:8F:94:B4:E4:6A:DC:D1:E5:1D:B3:48:A5:DE:77:8F:4A:A0:4E X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:60::/44 Signature Algorithm: sha256WithRSAEncryption 25:88:8b:1f:6b:bd:eb:bc:49:07:d5:27:23:f5:46:f9:d0:df: 6f:32:c7:f0:72:d2:00:b5:fe:67:f3:2b:f7:aa:03:b7:ff:7b: 07:4c:a1:37:d9:3f:7a:6a:07:16:a1:e7:1e:31:6d:ca:a9:98: d6:f7:9f:9b:89:d3:9a:4b:28:b5:36:9e:4f:c5:4d:57:92:25: 56:93:88:93:9d:e5:9f:10:4d:35:79:1c:03:34:a6:24:70:c8: d9:69:be:ce:58:27:af:ab:fc:2a:b0:12:88:6b:ac:12:89:0d: 84:56:4c:89:62:5a:3d:4d:66:63:93:00:2d:dc:8b:05:4b:a2: 6b:23:9c:92:c0:8b:e6:c7:2e:d2:bd:d2:89:81:bb:13:f3:b4: 6f:21:82:de:e0:46:73:e5:9c:c2:39:b6:11:eb:f0:05:8b:6f: 71:5a:cd:06:36:4a:f1:74:6d:23:83:2c:31:a3:65:80:75:10: 5a:1b:1c:b7:e4:0c:aa:45:2f:ed:4c:e1:48:3d:18:06:14:7d: b7:c6:f8:67:73:9f:d6:52:5f:45:a9:41:f4:d7:e6:8c:4a:4d: a3:88:8b:13:3b:33:2f:98:e0:94:7e:54:63:40:1e:0f:1e:2a: af:36:fd:63:76:a3:d4:d7:9b:95:63:5b:b1:c5:a9:ed:14:b5: e4:44:ec:19 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUfMvFd02Cv2Ffdd1AZlBuIhtivAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA5MDEwNDU1MDBaFw0yNzA5MDEwNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc5NUJEMkNFQkYzNjAwOTRE Q0RBODVEMzM2MDI5NEQ5M0NDNDBDMkM3RUUwMDcwNzA4RTk3MTc2RDNCMTcwRTlG QzQzQ0JDQzBBQzlENTczMEYzRkIxQ0RFNjlGQ0E1NjVDMTExNEJFNTIxRjg1QTAw NTBEQ0YxNkEzNTQ3RkI3ODc1MkNDMUExMUQ4QkJFMDA1MDFGOThDMzkxODQ1QzlF MkVEODdDRkE1OTVEQzI4QUUzODk2RkU0MUNBOTQwODA3MzQ3MTNGODJFNUUzQzAy ODdGRDlCQzYzMDQ5RjQxRUYwQUY3Q0RGRTYzRTQ0NzJBODcwQUNGRkQ4MUY3Q0Qw OTE5NTI5RkVCNjgyNTQ5NTZBN0ZCOTEzNDNERTQyMTIzQzNDRTE2MEM5NDY3RDZB OEZBNkQ1QjE4OUJEOTg3RDEyMEQ4M0VCMzI5Q0I0MkNFOTk2NTU4NUE3MkRGRkU4 ODk5RjRGRkREMEY3RUJERjY4NTFEOEQ3NTZCNjc5RTg3OTdDRTRCQUQ2MzU5MUY5 NDNGMEVBRTgzNDBCMjNEMTQzREM5N0FBMEIyMzhBMTg1M0U4MUUxRDUyMzFBRjE3 M0Q5QTUxQjVCOTg5RTlDMDQ5QTM1MTJDQzQzQzNCODJFQTFFQTZCOEYyMzVDMTVD N0YwRDNFOURCQjVEODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAx5W9LOvzYAlNzahdM2ApTZPMQMLH7gBwcI6XF207Fw6fxDy8wKyd VzDz+xzeafylZcERS+Uh+FoAUNzxajVH+3h1LMGhHYu+AFAfmMORhFyeLth8+lld worjiW/kHKlAgHNHE/guXjwCh/2bxjBJ9B7wr3zf5j5EcqhwrP/YH3zQkZUp/raC VJVqf7kTQ95CEjw84WDJRn1qj6bVsYm9mH0SDYPrMpy0LOmWVYWnLf/oiZ9P/dD3 699oUdjXVrZ56Hl85LrWNZH5Q/Dq6DQLI9FD3JeqCyOKGFPoHh1SMa8XPZpRtbmJ 6cBJo1EsxDw7guoeprjyNcFcfw0+nbtdhQIDAQABo4IB7TCCAekwHQYDVR0OBBYE FMkgj5S05Grc0eUds0il3nePSqBOMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBgwYI KwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTM2MzAzYTNhMmYz NDM0MmQzNDM0MjAzZDNlMjAzMzM5MzYzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkBkRAAGAw DQYJKoZIhvcNAQELBQADggEBACWIix9rveu8SQfVJyP1RvnQ328yx/By0gC1/mfz K/eqA7f/ewdMoTfZP3pqBxah5x4xbcqpmNb3n5uJ05pLKLU2nk/FTVeSJVaTiJOd 5Z8QTTV5HAM0piRwyNlpvs5YJ6+r/CqwEohrrBKJDYRWTIliWj1NZmOTAC3ciwVL omsjnJLAi+bHLtK90omBuxPztG8hgt7gRnPlnMI5thHr8AWLb3FazQY2SvF0bSOD LDGjZYB1EFobHLfkDKpFL+1M4Ug9GAYUfbfG+Gdzn9ZSX0WpQfTX5oxKTaOIixM7 My+Y4JR+VGNAHg8eKq82/WN2o9TXm5VjW7HFqe0UteRE7Bk= -----END CERTIFICATE-----Generated at Mon Sep 21 13:52:24 2026 by rpki-client