$ rpki-client -vvvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa File: 323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa (raw, json) Hash identifier: EKJ6hq723fVv86HUHUJIlgNnqFHrxqYBXcD+FPSrYfI= Subject key identifier: 4C:54:10:1B:03:B7:E3:62:26:6E:5C:D4:E4:39:AA:EB:C3:F8:0C:87 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 4F57BA1B884C245DF10282FEB4C738228F7F9BA9 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa Signing time: Tue 01 Sep 2026 06:00:00 +0000 ROA not before: Tue 01 Sep 2026 05:55:00 +0000 ROA not after: Wed 01 Sep 2027 06:00:00 +0000 asID: 396303 IP address blocks: 2406:4440:70::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:57:ba:1b:88:4c:24:5d:f1:02:82:fe:b4:c7:38:22:8f:7f:9b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Sep 1 05:55:00 2026 GMT Not After : Sep 1 06:00:00 2027 GMT Subject: CN=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 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:bd:ee:4a:04:e1:08:1b:fe:0b:13:2b:f2: 63:1d:69:1d:51:5c:9d:7c:e0:45:f6:0c:10:98:05: 9d:60:62:f2:82:0e:48:6e:80:e6:8b:a0:20:87:4f: 58:e1:2a:1f:ae:1b:3a:91:44:d5:76:a7:d7:3b:8f: c3:9a:6b:9c:bf:d9:d3:ba:95:a6:f3:1e:75:4e:78: 0a:a9:d6:8d:43:66:e3:40:67:82:86:83:ff:9b:ff: d5:0d:29:1f:c4:b3:a2:37:68:03:88:f4:97:6d:23: ae:57:e1:21:ad:87:2a:d4:c8:d0:a5:a2:10:ea:79: 4e:c9:ee:70:dd:00:df:9e:a8:4b:7d:78:90:37:f6: 7d:0b:f6:38:da:02:1f:42:dd:28:61:f9:0c:b9:d4: 06:89:0b:76:b2:f2:6d:04:a3:89:fa:37:52:4e:76: 7d:c4:b3:90:31:db:33:fc:67:8e:11:ff:d5:d3:35: 57:14:f8:08:ac:e9:d1:06:92:e0:b5:6c:b0:fd:45: 74:64:dd:93:33:cc:96:91:c6:4c:21:03:62:89:01: 1b:af:df:b8:eb:72:72:71:75:da:2b:c0:e2:68:59: cc:12:42:31:0a:3e:fd:26:e5:39:41:65:f2:f0:79: db:e4:55:0e:43:c3:87:6c:c6:99:9a:e6:e2:36:e0: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:54:10:1B:03:B7:E3:62:26:6E:5C:D4:E4:39:AA:EB:C3:F8:0C:87 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a37303a3a2f34342d3434203d3e20333936333033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:70::/44 Signature Algorithm: sha256WithRSAEncryption 99:7f:cb:db:d9:46:5f:11:fa:69:33:75:f9:fd:6a:b1:c6:8a: fc:96:90:b4:77:bc:97:e3:86:6d:fe:af:51:7d:75:c4:9a:2f: 77:59:3f:38:75:39:62:72:36:96:8b:b6:db:2a:1a:e5:f7:2c: 07:36:a9:45:4d:b1:69:4a:e2:3f:9d:64:e9:0b:8a:27:dc:6a: 68:f6:99:4d:9e:17:90:e0:83:d7:61:c5:87:a3:33:03:28:51: bd:ca:09:d6:6e:66:66:b1:fb:dc:99:3b:90:52:06:47:42:fc: 37:81:45:6a:09:8e:f2:27:28:c3:35:60:90:63:6e:35:d9:51: ac:d6:e4:e8:26:ff:76:b7:e5:d9:be:da:72:86:72:ef:de:f2: 5c:5b:61:f4:c4:8a:a8:05:d4:86:f3:34:d4:52:0c:e0:0e:cb: 81:80:9e:bb:50:ed:b3:68:62:2f:42:44:b6:62:f7:16:ef:df: 5c:c0:4d:75:47:da:01:3c:c0:ea:cd:bf:3e:11:bf:b0:df:db: 93:f6:6b:47:18:69:72:10:8c:e3:c8:f9:92:43:13:cc:a9:97: 18:c8:e8:bf:d9:a1:03:e3:31:c6:3d:56:62:98:71:2b:b5:bd: 80:ae:0f:e5:b3:72:bd:10:f6:df:0a:9f:9f:ad:22:76:a5:d9: 97:0e:a4:74 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUT1e6G4hMJF3xAoL+tMc4Io9/m6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA5MDEwNTU1MDBaFw0yNzA5MDEwNjAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTgyRkJERUU0QTA0RTEwODFC RkUwQjEzMkJGMjYzMUQ2OTFENTE1QzlEN0NFMDQ1RjYwQzEwOTgwNTlENjA2MkYy ODIwRTQ4NkU4MEU2OEJBMDIwODc0RjU4RTEyQTFGQUUxQjNBOTE0NEQ1NzZBN0Q3 M0I4RkMzOUE2QjlDQkZEOUQzQkE5NUE2RjMxRTc1NEU3ODBBQTlENjhENDM2NkUz NDA2NzgyODY4M0ZGOUJGRkQ1MEQyOTFGQzRCM0EyMzc2ODAzODhGNDk3NkQyM0FF NTdFMTIxQUQ4NzJBRDRDOEQwQTVBMjEwRUE3OTRFQzlFRTcwREQwMERGOUVBODRC N0Q3ODkwMzdGNjdEMEJGNjM4REEwMjFGNDJERDI4NjFGOTBDQjlENDA2ODkwQjc2 QjJGMjZEMDRBMzg5RkEzNzUyNEU3NjdEQzRCMzkwMzFEQjMzRkM2NzhFMTFGRkQ1 RDMzNTU3MTRGODA4QUNFOUQxMDY5MkUwQjU2Q0IwRkQ0NTc0NjRERDkzMzNDQzk2 OTFDNjRDMjEwMzYyODkwMTFCQUZERkI4RUI3MjcyNzE3NURBMkJDMEUyNjg1OUND MTI0MjMxMEEzRUZEMjZFNTM5NDE2NUYyRjA3OURCRTQ1NTBFNDNDMzg3NkNDNjk5 OUFFNkUyMzZFMDA2OUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAqC+97koE4Qgb/gsTK/JjHWkdUVydfOBF9gwQmAWdYGLygg5IboDm i6Agh09Y4Sofrhs6kUTVdqfXO4/Dmmucv9nTupWm8x51TngKqdaNQ2bjQGeChoP/ m//VDSkfxLOiN2gDiPSXbSOuV+EhrYcq1MjQpaIQ6nlOye5w3QDfnqhLfXiQN/Z9 C/Y42gIfQt0oYfkMudQGiQt2svJtBKOJ+jdSTnZ9xLOQMdsz/GeOEf/V0zVXFPgI rOnRBpLgtWyw/UV0ZN2TM8yWkcZMIQNiiQEbr9+463JycXXaK8DiaFnMEkIxCj79 JuU5QWXy8Hnb5FUOQ8OHbMaZmubiNuAGnQIDAQABo4IB7TCCAekwHQYDVR0OBBYE FExUEBsDt+NiJm5c1OQ5quvD+AyHMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBgwYI KwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTM3MzAzYTNhMmYz NDM0MmQzNDM0MjAzZDNlMjAzMzM5MzYzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkBkRAAHAw DQYJKoZIhvcNAQELBQADggEBAJl/y9vZRl8R+mkzdfn9arHGivyWkLR3vJfjhm3+ r1F9dcSaL3dZPzh1OWJyNpaLttsqGuX3LAc2qUVNsWlK4j+dZOkLiifcamj2mU2e F5Dgg9dhxYejMwMoUb3KCdZuZmax+9yZO5BSBkdC/DeBRWoJjvInKMM1YJBjbjXZ UazW5Ogm/3a35dm+2nKGcu/e8lxbYfTEiqgF1IbzNNRSDOAOy4GAnrtQ7bNoYi9C RLZi9xbv31zATXVH2gE8wOrNvz4Rv7Df25P2a0cYaXIQjOPI+ZJDE8yplxjI6L/Z oQPjMcY9VmKYcSu1vYCuD+Wzcr0Q9t8Kn5+tInal2ZcOpHQ= -----END CERTIFICATE-----Generated at Mon Sep 21 19:38:11 2026 by rpki-client