$ rpki-client -vvvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa File: 323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa (raw, json) Hash identifier: nR9hO4Qa985Z382iubs5QGrxVnV1ORcnEqkp/kAD8Kg= Subject key identifier: A8:54:96:13:D6:94:CD:03:8A:F2:CC:F8:12:47:45:23:4C:F3:32:A2 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 25FC7A1D985892DC2A50E7D53646335BAABC8E6C Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa Signing time: Wed 16 Sep 2026 05:00:00 +0000 ROA not before: Wed 16 Sep 2026 04:55:00 +0000 ROA not after: Thu 16 Sep 2027 05:00:00 +0000 asID: 38173 IP address blocks: 2406:4440:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fc:7a:1d:98:58:92:dc:2a:50:e7:d5:36:46:33:5b:aa:bc:8e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Sep 16 04:55:00 2026 GMT Not After : Sep 16 05:00:00 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:a8:b0:b1:21:13:81:d6:a5:e5:37:f1:40: 2d:88:bc:f8:7e:fc:fe:08:ed:ee:fd:01:8d:d2:00: f3:b4:71:08:15:d1:8f:d1:8c:b4:df:9b:50:05:c8: 11:1a:73:92:b5:8b:63:24:94:29:67:a7:dd:93:99: c2:50:66:53:a4:e9:76:b0:2c:73:97:68:54:3d:15: a6:75:e2:53:08:4c:3a:f2:23:31:51:e4:85:11:77: 99:3b:1c:0e:60:b0:df:57:dd:39:eb:e2:f7:f8:11: 2f:26:e8:6c:ef:4b:1c:da:29:b0:0c:60:99:41:27: ba:b8:3d:ff:9d:98:5d:14:0e:60:9e:b5:a5:60:61: 79:e2:6e:38:70:1a:d3:27:84:87:56:39:04:b5:5e: e4:1a:69:4f:59:56:e7:37:39:7d:e9:fc:f5:8f:10: 95:c4:43:19:25:31:bc:37:62:83:aa:ff:16:c3:3f: 89:7e:4e:a2:d6:b8:1b:87:9d:aa:50:98:b5:d0:5c: 74:91:f7:ac:20:8a:4c:80:9d:8b:24:8b:0b:3f:8b: b3:7f:2f:7d:b3:ca:c0:f2:d5:56:e8:4a:2e:d0:68: 06:f9:e4:5b:cb:0c:e6:91:9f:4d:49:4f:d8:ac:19: 86:87:63:d6:1e:5e:ed:ef:2f:d2:2e:11:cd:6d:aa: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:54:96:13:D6:94:CD:03:8A:F2:CC:F8:12:47:45:23:4C:F3:32:A2 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e203338313733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:f000::/44 Signature Algorithm: sha256WithRSAEncryption 03:70:e3:4d:4c:86:84:de:f9:05:cf:12:67:ad:c2:17:e3:6f: 68:b5:3d:ce:25:a6:e7:15:d1:7e:24:59:0e:b9:a0:c0:34:fe: 01:22:89:d6:8e:5b:13:c9:e0:f6:11:c6:ad:a8:75:85:54:75: 67:4f:fb:ab:d7:7b:6f:be:9a:1c:4a:2f:6d:5a:9c:d0:55:ba: ef:42:da:84:7d:c8:6f:e1:e1:3b:8b:16:ef:06:09:c7:72:24: f4:5f:59:d2:d3:f4:bb:96:ce:e4:e9:b2:77:76:1b:2a:68:0d: 0e:bd:d7:c6:46:a6:16:f5:b6:f9:c0:b7:fd:49:42:38:c4:f4: f6:2c:08:61:a8:0f:50:f1:ff:93:0c:bb:ec:df:71:53:44:23: 82:0e:7a:18:3f:97:7c:0d:ab:7c:7e:5c:bf:a7:d2:5e:af:58: c1:62:a6:82:50:9e:ef:6b:71:c2:a7:f7:74:d4:97:3a:40:87: 28:e0:ad:e7:43:94:7e:95:4b:dd:eb:75:b5:50:0b:5e:0c:cb: cf:74:82:72:9b:06:e3:c1:80:c2:23:e3:00:68:35:73:2b:23: e9:c6:a0:be:77:35:9f:cd:3b:4f:1d:78:88:5b:26:10:2f:78: 1a:d1:d5:36:08:a8:22:8b:f2:26:d8:05:71:af:6c:96:d1:d4: da:c3:22:2e -----BEGIN CERTIFICATE----- MIIG4TCCBcmgAwIBAgIUJfx6HZhYktwqUOfVNkYzW6q8jmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA5MTYwNDU1MDBaFw0yNzA5MTYwNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjUwNkE4QjBCMTIxMTM4MUQ2 QTVFNTM3RjE0MDJEODhCQ0Y4N0VGQ0ZFMDhFREVFRkQwMThERDIwMEYzQjQ3MTA4 MTVEMThGRDE4Q0I0REY5QjUwMDVDODExMUE3MzkyQjU4QjYzMjQ5NDI5NjdBN0RE OTM5OUMyNTA2NjUzQTRFOTc2QjAyQzczOTc2ODU0M0QxNUE2NzVFMjUzMDg0QzNB RjIyMzMxNTFFNDg1MTE3Nzk5M0IxQzBFNjBCMERGNTdERDM5RUJFMkY3RjgxMTJG MjZFODZDRUY0QjFDREEyOUIwMEM2MDk5NDEyN0JBQjgzREZGOUQ5ODVEMTQwRTYw OUVCNUE1NjA2MTc5RTI2RTM4NzAxQUQzMjc4NDg3NTYzOTA0QjU1RUU0MUE2OTRG NTk1NkU3MzczOTdERTlGQ0Y1OEYxMDk1QzQ0MzE5MjUzMUJDMzc2MjgzQUFGRjE2 QzMzRjg5N0U0RUEyRDZCODFCODc5REFBNTA5OEI1RDA1Qzc0OTFGN0FDMjA4QTRD ODA5RDhCMjQ4QjBCM0Y4QkIzN0YyRjdEQjNDQUMwRjJENTU2RTg0QTJFRDA2ODA2 RjlFNDVCQ0IwQ0U2OTE5RjRENDk0RkQ4QUMxOTg2ODc2M0Q2MUU1RUVERUYyRkQy MkUxMUNENkRBQUJGMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtQaosLEhE4HWpeU38UAtiLz4fvz+CO3u/QGN0gDztHEIFdGP0Yy0 35tQBcgRGnOStYtjJJQpZ6fdk5nCUGZTpOl2sCxzl2hUPRWmdeJTCEw68iMxUeSF EXeZOxwOYLDfV9056+L3+BEvJuhs70sc2imwDGCZQSe6uD3/nZhdFA5gnrWlYGF5 4m44cBrTJ4SHVjkEtV7kGmlPWVbnNzl96fz1jxCVxEMZJTG8N2KDqv8Wwz+Jfk6i 1rgbh52qUJi10Fx0kfesIIpMgJ2LJIsLP4uzfy99s8rA8tVW6Eou0GgG+eRbywzm kZ9NSU/YrBmGh2PWHl7t7y/SLhHNbaq/AQIDAQABo4IB7zCCAeswHQYDVR0OBBYE FKhUlhPWlM0DivLM+BJHRSNM8zKiMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBhQYI KwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmlyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTY2MzAzMDMwM2Ez YTJmMzQzNDJkMzQzODIwM2QzZTIwMzMzODMxMzczMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQGREDw ADANBgkqhkiG9w0BAQsFAAOCAQEAA3DjTUyGhN75Bc8SZ63CF+NvaLU9ziWm5xXR fiRZDrmgwDT+ASKJ1o5bE8ng9hHGrah1hVR1Z0/7q9d7b76aHEovbVqc0FW670La hH3Ib+HhO4sW7wYJx3Ik9F9Z0tP0u5bO5Omyd3YbKmgNDr3XxkamFvW2+cC3/UlC OMT09iwIYagPUPH/kwy77N9xU0Qjgg56GD+XfA2rfH5cv6fSXq9YwWKmglCe72tx wqf3dNSXOkCHKOCt50OUfpVL3et1tVALXgzLz3SCcpsG48GAwiPjAGg1cysj6cag vnc1n807Tx14iFsmEC94GtHVNgioIovyJtgFca9sltHU2sMiLg== -----END CERTIFICATE-----Generated at Mon Sep 21 05:22:07 2026 by rpki-client