$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa File: 323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (raw, json) Hash identifier: PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU= Subject key identifier: 04:80:A4:09:03:CA:DF:71:9E:18:F7:9D:09:C2:82:66:A2:A6:E9:29 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 79193ADEF330D180F33AD1664E58A4AB765C4C82 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa Signing time: Wed 19 Feb 2025 07:00:00 +0000 ROA not before: Wed 19 Feb 2025 06:55:00 +0000 ROA not after: Thu 19 Feb 2026 07:00:00 +0000 asID: 46997 IP address blocks: 2406:4440:80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 05:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:19:3a:de:f3:30:d1:80:f3:3a:d1:66:4e:58:a4:ab:76:5c:4c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Feb 19 06:55:00 2025 GMT Not After : Feb 19 07:00:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:37:ce:db:90:f9:f1:94:b0:52:0d:da:2d: 1b:81:32:00:fb:19:e6:22:39:ba:d1:be:44:8f:61: b6:6e:95:68:b0:75:0a:9b:33:95:35:e7:0a:4d:55: bc:f1:f6:d4:c1:3f:3f:39:be:85:2a:f4:e7:f6:bf: 54:a6:f1:1f:6f:a3:dc:10:7a:39:88:94:33:6e:c5: 7d:0a:b1:69:52:09:ab:9a:c7:fb:64:43:fc:9b:ca: 1a:35:42:dc:5d:f7:b4:45:9b:00:2e:3e:9d:a1:7a: b8:26:21:02:6e:9e:b3:93:72:13:e7:0b:5c:14:85: 59:52:ac:0a:b8:2c:a9:71:3d:0e:ee:9e:37:19:e5: 3d:15:04:47:73:2c:71:0e:8c:ce:eb:23:88:a1:25: ce:b8:f4:20:a3:50:e9:2e:64:62:66:ba:35:9c:70: a5:65:b4:9f:48:0a:96:10:c6:5e:a4:7c:6f:56:ab: 8c:d3:00:17:a7:4c:3c:fa:7a:4f:d6:e7:24:fd:82: 38:06:25:35:94:a0:cd:1b:75:33:45:23:b7:c7:69: 2b:83:45:28:9b:b9:fa:c3:d1:15:85:cb:03:ac:44: de:9f:9b:62:3b:7f:2b:ad:35:d9:7c:c4:3f:67:06: b1:e2:f9:c3:ec:ab:11:ca:f4:25:a2:98:bc:77:ac: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:80:A4:09:03:CA:DF:71:9E:18:F7:9D:09:C2:82:66:A2:A6:E9:29 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:80::/44 Signature Algorithm: sha256WithRSAEncryption 2a:eb:24:c0:88:3b:38:2f:84:4c:a6:be:57:07:f1:25:66:3d: 05:22:da:a4:29:51:a9:82:c4:b1:ab:fc:78:8b:b9:c7:19:0b: a1:8d:7b:cf:8d:b1:56:d9:df:e8:8e:9a:01:21:f9:9d:73:ee: 7a:c9:29:c7:e6:32:97:11:be:95:19:eb:0f:63:ee:f8:55:53: 53:3c:f0:e3:51:dc:0c:54:f4:6a:86:86:9a:87:2e:27:72:d3: 67:b0:9c:cb:ad:7c:7c:40:8b:82:70:f3:1d:98:f7:f8:64:58: ae:63:e4:e8:37:4c:58:42:f1:56:3c:c6:90:a3:78:cd:5b:6d: c2:ca:b5:f3:43:26:23:44:26:3e:fe:ce:1e:ab:6a:ab:0e:c2: c7:38:04:de:a5:e2:5c:51:51:a1:01:89:20:90:08:29:5c:69: e3:71:5f:45:84:1b:0e:50:a3:e1:b4:f0:cb:6a:90:43:a2:6d: ce:b8:e8:8e:5e:ee:c3:93:ad:42:2d:e5:b5:a4:19:12:43:d9: dc:d6:c0:18:a0:e9:c0:28:cf:63:28:b5:6f:c2:36:b1:6c:b1: 3a:a9:f8:33:3d:14:38:14:48:4a:29:07:a4:b5:01:e6:35:b8: 89:a8:dd:3f:51:3b:4d:ff:ef:9d:c3:25:b7:c6:79:76:64:be: 51:75:fd:91 -----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgIUeRk63vMw0YDzOtFmTlikq3ZcTIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNTAyMTkwNjU1MDBaFw0yNjAyMTkwNzAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc2MDM3Q0VEQjkwRjlGMTk0 QjA1MjBEREEyRDFCODEzMjAwRkIxOUU2MjIzOUJBRDFCRTQ0OEY2MUI2NkU5NTY4 QjA3NTBBOUIzMzk1MzVFNzBBNEQ1NUJDRjFGNkQ0QzEzRjNGMzlCRTg1MkFGNEU3 RjZCRjU0QTZGMTFGNkZBM0RDMTA3QTM5ODg5NDMzNkVDNTdEMEFCMTY5NTIwOUFC OUFDN0ZCNjQ0M0ZDOUJDQTFBMzU0MkRDNURGN0I0NDU5QjAwMkUzRTlEQTE3QUI4 MjYyMTAyNkU5RUIzOTM3MjEzRTcwQjVDMTQ4NTU5NTJBQzBBQjgyQ0E5NzEzRDBF RUU5RTM3MTlFNTNEMTUwNDQ3NzMyQzcxMEU4Q0NFRUIyMzg4QTEyNUNFQjhGNDIw QTM1MEU5MkU2NDYyNjZCQTM1OUM3MEE1NjVCNDlGNDgwQTk2MTBDNjVFQTQ3QzZG NTZBQjhDRDMwMDE3QTc0QzNDRkE3QTRGRDZFNzI0RkQ4MjM4MDYyNTM1OTRBMENE MUI3NTMzNDUyM0I3Qzc2OTJCODM0NTI4OUJCOUZBQzNEMTE1ODVDQjAzQUM0NERF OUY5QjYyM0I3RjJCQUQzNUQ5N0NDNDNGNjcwNkIxRTJGOUMzRUNBQjExQ0FGNDI1 QTI5OEJDNzdBQ0YwQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAp2A3ztuQ+fGUsFIN2i0bgTIA+xnmIjm60b5Ej2G2bpVosHUKmzOV NecKTVW88fbUwT8/Ob6FKvTn9r9UpvEfb6PcEHo5iJQzbsV9CrFpUgmrmsf7ZEP8 m8oaNULcXfe0RZsALj6doXq4JiECbp6zk3IT5wtcFIVZUqwKuCypcT0O7p43GeU9 FQRHcyxxDozO6yOIoSXOuPQgo1DpLmRiZro1nHClZbSfSAqWEMZepHxvVquM0wAX p0w8+npP1uck/YI4BiU1lKDNG3UzRSO3x2krg0Uom7n6w9EVhcsDrETen5tiO38r rTXZfMQ/Zwax4vnD7KsRyvQlopi8d6zwvwIDAQABo4IB6zCCAecwHQYDVR0OBBYE FASApAkDyt9xnhj3nQnCgmaipukpMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBgQYI KwYBBQUHAQsEdTBzMHEGCCsGAQUFBzALhmVyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTM4MzAzYTNhMmYz NDM0MmQzNDM4MjAzZDNlMjAzNDM2MzkzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAZEQACAMA0G CSqGSIb3DQEBCwUAA4IBAQAq6yTAiDs4L4RMpr5XB/ElZj0FItqkKVGpgsSxq/x4 i7nHGQuhjXvPjbFW2d/ojpoBIfmdc+56ySnH5jKXEb6VGesPY+74VVNTPPDjUdwM VPRqhoaahy4nctNnsJzLrXx8QIuCcPMdmPf4ZFiuY+ToN0xYQvFWPMaQo3jNW23C yrXzQyYjRCY+/s4eq2qrDsLHOATepeJcUVGhAYkgkAgpXGnjcV9FhBsOUKPhtPDL apBDom3OuOiOXu7Dk61CLeW1pBkSQ9nc1sAYoOnAKM9jKLVvwjaxbLE6qfgzPRQ4 FEhKKQektQHmNbiJqN0/UTtN/++dwyW3xnl2ZL5Rdf2R -----END CERTIFICATE-----Generated at Sat Apr 26 21:37:34 2025 by rpki-client