$ rpki-client -vvvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa File: 323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa (raw, json) Hash identifier: ZLSb2T9cPyJxY8E9tE/mZt7Dh+4FZqUiK+FdoIUFVOs= Subject key identifier: 90:45:51:00:4D:55:E3:5A:56:D6:D2:F0:43:68:6C:73:13:4B:54:F4 Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Certificate serial: 20ED1715FF83F4012DE8CE5396F60F29D3E0DA52 Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa Signing time: Mon 31 Aug 2026 16:00:00 +0000 ROA not before: Mon 31 Aug 2026 15:55:00 +0000 ROA not after: Tue 31 Aug 2027 16:00:00 +0000 asID: 7721 IP address blocks: 2406:4440:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ed:17:15:ff:83:f4:01:2d:e8:ce:53:96:f6:0f:29:d3:e0:da:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7 Validity Not Before: Aug 31 15:55:00 2026 GMT Not After : Aug 31 16:00:00 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:d0:78:d8:e2:d9:02:7c:b3:84:e9:f4:83: 2b:76:24:89:91:96:2b:36:7a:f3:be:a1:f5:36:4f: 3c:39:0b:ff:ab:60:ae:20:58:d8:fb:81:e0:d7:05: 97:d7:08:07:a0:74:8b:fc:7c:a7:59:53:0c:ee:a9: 71:6b:e2:96:7d:3f:1c:ef:4b:89:58:7d:6b:b7:b7: 18:86:cb:07:e1:99:cf:a8:85:b2:ee:61:1a:e5:40: e3:54:57:12:88:97:a5:9c:ac:fe:9d:c2:df:ee:98: 02:97:5d:fd:88:2e:60:98:8b:b1:95:c5:aa:f6:c6: a5:de:c4:67:db:42:22:1d:c7:82:3d:61:d2:49:48: 09:86:4b:1f:69:38:3e:fe:14:0d:9b:67:1f:2a:4b: fa:34:f3:75:07:4e:46:e7:d6:b2:14:67:a1:8a:11: a2:d5:1a:f8:7c:29:8d:03:ec:37:35:b1:db:25:14: 36:78:7d:a2:8c:9f:7c:99:21:24:20:81:69:ce:fb: 0b:2f:46:ea:cd:69:e8:f3:b3:5d:d7:63:50:cd:8c: dd:46:54:b8:4a:88:88:c8:9b:75:86:6d:bb:3c:86: 64:47:03:98:97:b1:be:84:49:8a:c6:e2:54:72:e0: 90:29:3e:0e:03:a3:fb:be:21:d2:11:43:32:20:f5: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:45:51:00:4D:55:E3:5A:56:D6:D2:F0:43:68:6C:73:13:4B:54:F4 X509v3 Authority Key Identifier: keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer Subject Information Access: Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a663030303a3a2f34342d3438203d3e2037373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:f000::/44 Signature Algorithm: sha256WithRSAEncryption 98:ba:cd:60:3a:4c:9e:c6:8c:6e:7d:3a:61:a2:83:e3:a8:41: c4:f5:fb:af:e8:bc:da:66:91:9c:eb:ab:5b:6c:89:67:ce:e9: 33:70:4d:16:47:98:74:5e:f6:43:87:1d:4f:52:ab:f4:9b:bd: 7f:17:2f:6c:47:38:32:c9:ac:d7:29:f0:c1:64:8a:06:df:d3: a8:18:aa:14:5c:d6:05:b9:24:26:20:e4:17:b7:ed:e0:90:90: 5f:b9:ea:95:7d:57:a2:1a:9c:b6:71:2b:b6:bd:1f:b8:dc:82: 51:ab:e3:d0:fc:9a:cf:3f:a0:f4:20:8d:de:55:59:3f:6f:e1: 08:62:5d:74:6a:62:aa:c4:60:2b:8f:4c:16:5e:14:44:74:27: 07:f4:fc:a3:19:45:9c:fb:00:d6:a5:5c:8d:85:c6:a4:f2:d3: 71:39:22:72:3b:4e:8d:1c:56:b7:c5:5c:46:1c:5f:25:2e:10: 92:27:97:0a:93:c0:db:6a:eb:3a:9c:71:6d:ad:91:c9:02:65: 1b:b7:db:e3:33:bc:ee:b4:45:83:5a:97:b0:f3:c6:12:b4:ec: 34:bb:dc:07:5f:96:24:fa:b7:ed:78:01:df:e1:d3:a6:bb:0e: c1:91:66:12:51:bb:59:ce:9c:f2:64:0c:7e:51:32:e9:ba:e4: 97:d9:6e:dc -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUIO0XFf+D9AEt6M5TlvYPKdPg2lIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy QkQ4MzdBNzAeFw0yNjA4MzExNTU1MDBaFw0yNzA4MzExNjAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY4Q0QwNzhEOEUyRDkwMjdD QjM4NEU5RjQ4MzJCNzYyNDg5OTE5NjJCMzY3QUYzQkVBMUY1MzY0RjNDMzkwQkZG QUI2MEFFMjA1OEQ4RkI4MUUwRDcwNTk3RDcwODA3QTA3NDhCRkM3Q0E3NTk1MzBD RUVBOTcxNkJFMjk2N0QzRjFDRUY0Qjg5NTg3RDZCQjdCNzE4ODZDQjA3RTE5OUNG QTg4NUIyRUU2MTFBRTU0MEUzNTQ1NzEyODg5N0E1OUNBQ0ZFOURDMkRGRUU5ODAy OTc1REZEODgyRTYwOTg4QkIxOTVDNUFBRjZDNkE1REVDNDY3REI0MjIyMURDNzgy M0Q2MUQyNDk0ODA5ODY0QjFGNjkzODNFRkUxNDBEOUI2NzFGMkE0QkZBMzRGMzc1 MDc0RTQ2RTdENkIyMTQ2N0ExOEExMUEyRDUxQUY4N0MyOThEMDNFQzM3MzVCMURC MjUxNDM2Nzg3REEyOEM5RjdDOTkyMTI0MjA4MTY5Q0VGQjBCMkY0NkVBQ0Q2OUU4 RjNCMzVERDc2MzUwQ0Q4Q0RENDY1NEI4NEE4ODg4Qzg5Qjc1ODY2REJCM0M4NjY0 NDcwMzk4OTdCMUJFODQ0OThBQzZFMjU0NzJFMDkwMjkzRTBFMDNBM0ZCQkUyMUQy MTE0MzMyMjBGNURDOUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAv4zQeNji2QJ8s4Tp9IMrdiSJkZYrNnrzvqH1Nk88OQv/q2CuIFjY +4Hg1wWX1wgHoHSL/HynWVMM7qlxa+KWfT8c70uJWH1rt7cYhssH4ZnPqIWy7mEa 5UDjVFcSiJelnKz+ncLf7pgCl139iC5gmIuxlcWq9sal3sRn20IiHceCPWHSSUgJ hksfaTg+/hQNm2cfKkv6NPN1B05G59ayFGehihGi1Rr4fCmNA+w3NbHbJRQ2eH2i jJ98mSEkIIFpzvsLL0bqzWno87Nd12NQzYzdRlS4SoiIyJt1hm27PIZkRwOYl7G+ hEmKxuJUcuCQKT4OA6P7viHSEUMyIPXcnQIDAQABo4IB7TCCAekwHQYDVR0OBBYE FJBFUQBNVeNaVtbS8ENobHMTS1T0MB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1 NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjCBgwYI KwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdyc3luYzovL3Jwa2kuYXBlcm5ldC5p by9yZXBvL0FQRVJORVQvMS8zMjM0MzAzNjNhMzQzNDM0MzAzYTY2MzAzMDMwM2Ez YTJmMzQzNDJkMzQzODIwM2QzZTIwMzczNzMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkBkRA8AAw DQYJKoZIhvcNAQELBQADggEBAJi6zWA6TJ7GjG59OmGig+OoQcT1+6/ovNpmkZzr q1tsiWfO6TNwTRZHmHRe9kOHHU9Sq/SbvX8XL2xHODLJrNcp8MFkigbf06gYqhRc 1gW5JCYg5Be37eCQkF+56pV9V6IanLZxK7a9H7jcglGr49D8ms8/oPQgjd5VWT9v 4QhiXXRqYqrEYCuPTBZeFER0Jwf0/KMZRZz7ANalXI2FxqTy03E5InI7To0cVrfF XEYcXyUuEJInlwqTwNtq6zqccW2tkckCZRu32+MzvO60RYNal7DzxhK07DS73Adf liT6t+14Ad/h06a7DsGRZhJRu1nOnPJkDH5RMum65JfZbtw= -----END CERTIFICATE-----Generated at Mon Sep 21 16:26:33 2026 by rpki-client