$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa File: 323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa (raw, json) Hash identifier: xHlYGx2dC5gJQQKSa7FUmmlzFKoCUsU72Kq1AobY9d0= Subject key identifier: CB:11:F7:24:66:D7:18:24:57:A7:10:AF:0A:2F:B8:C1:FF:4B:44:7E Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 3F96E527B666BBC3E9C6A0517B07A25E7F3EC595 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa Signing time: Mon 14 Aug 2023 07:53:29 +0000 ROA not before: Mon 14 Aug 2023 07:48:29 +0000 ROA not after: Mon 12 Aug 2024 07:53:29 +0000 asID: 212580 IP address blocks: 2602:feda:c40::/44 maxlen: 48 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 22:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:96:e5:27:b6:66:bb:c3:e9:c6:a0:51:7b:07:a2:5e:7f:3e:c5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Aug 14 07:48:29 2023 GMT Not After : Aug 12 07:53:29 2024 GMT Subject: CN=CB11F72466D7182457A710AF0A2FB8C1FF4B447E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8f:3e:65:9a:a2:c5:09:5a:64:29:03:a7:36: de:7a:0d:b0:76:32:dd:2b:cc:af:e9:ee:c1:7e:c6: 05:63:0c:5b:4d:f4:27:41:ed:79:f3:cd:b4:8b:16: a7:23:19:00:8c:21:85:66:d3:f0:af:09:d5:0a:df: 43:51:b7:7e:a5:9f:b1:b2:86:75:1f:34:f7:34:c7: 07:9f:36:50:b8:e3:f1:04:d3:e5:38:b6:08:cd:5a: e5:ec:da:69:97:c3:f2:51:55:75:dc:bd:f6:42:ac: 64:50:a8:67:b0:d0:31:a5:df:06:66:fd:87:b7:bb: 7d:68:27:e4:d9:1d:5f:a7:38:75:75:70:42:ed:80: 64:08:78:92:ff:28:b5:d9:5a:e6:b7:ca:4d:d2:33: 7d:0e:97:0c:1f:ed:2b:68:51:33:0c:51:ea:59:71: b3:e3:69:74:0a:50:10:40:ee:ce:e0:4c:92:8b:54: 3d:f2:79:41:b6:b4:22:b9:4f:48:24:b5:ae:6e:ab: 73:eb:04:42:b4:a0:88:13:10:a7:8e:6c:c1:d0:d7: e2:d9:55:32:ad:50:cd:3d:ac:90:5c:05:17:63:0d: 04:89:40:0f:ea:cc:59:ae:a2:2e:02:b5:5f:09:30: cb:5a:df:cc:c3:be:03:38:42:c1:97:2d:2b:fb:4f: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:11:F7:24:66:D7:18:24:57:A7:10:AF:0A:2F:B8:C1:FF:4B:44:7E X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:feda:c40::/44 Signature Algorithm: sha256WithRSAEncryption c9:3e:42:bb:be:52:4d:28:1c:2c:b0:3f:8f:f1:41:66:53:a1: 1d:43:e6:4d:19:e8:2d:fe:61:14:20:25:7a:ce:e1:e1:04:5a: 2b:dd:aa:9f:c6:82:c6:80:3c:63:8f:90:52:16:f3:cc:ae:90: 99:0b:65:23:e2:ae:86:b4:5e:09:5f:a8:f4:d2:f9:8e:f3:cc: ab:c3:c4:f3:b9:05:14:8f:89:c3:52:60:80:44:24:33:32:3f: e0:cd:09:3e:cb:39:a4:16:1c:e0:f8:54:1f:b7:2f:95:18:28: 6b:50:a1:fa:40:6a:f2:d7:ba:1b:c9:0f:cf:73:cc:b1:02:b3: b7:cd:28:4a:cf:9b:54:b0:11:be:e6:88:69:72:c4:70:f6:6f: da:f0:93:cd:da:cd:c8:2e:5d:30:4f:83:93:f2:b9:a2:c4:a0: 67:b0:b1:d2:ce:30:cf:29:5e:fc:03:18:3e:de:30:ce:a5:fc: c4:cc:af:ec:8c:f1:29:27:0d:34:51:cd:e9:c2:9b:ed:72:71: 71:00:bf:f7:e1:c7:30:b0:7d:d9:0e:04:f3:9f:85:7a:4c:a1: 95:93:e5:cc:8b:da:22:a6:f3:5c:cc:47:b3:a9:7c:4a:89:95: 10:47:8f:dc:be:d6:77:83:59:6e:7f:34:a4:64:b2:0e:cf:47: 03:d5:e3:c5 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUP5blJ7Zmu8PpxqBReweiXn8+xZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODI5WhcNMjQwODEyMDc1MzI5 WjAzMTEwLwYDVQQDEyhDQjExRjcyNDY2RDcxODI0NTdBNzEwQUYwQTJGQjhDMUZG NEI0NDdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Y8+ZZqixQla ZCkDpzbeeg2wdjLdK8yv6e7BfsYFYwxbTfQnQe158820ixanIxkAjCGFZtPwrwnV Ct9DUbd+pZ+xsoZ1HzT3NMcHnzZQuOPxBNPlOLYIzVrl7Nppl8PyUVV13L32Qqxk UKhnsNAxpd8GZv2Ht7t9aCfk2R1fpzh1dXBC7YBkCHiS/yi12Vrmt8pN0jN9DpcM H+0raFEzDFHqWXGz42l0ClAQQO7O4EySi1Q98nlBtrQiuU9IJLWubqtz6wRCtKCI ExCnjmzB0Nfi2VUyrVDNPayQXAUXYw0EiUAP6sxZrqIuArVfCTDLWt/Mw74DOELB ly0r+0/GSQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMsR9yRm1xgkV6cQrwovuMH/ S0R+MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6 Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh NjMzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzUzODMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcEJgL+2gxAMA0GCSqGSIb3DQEBCwUAA4IBAQDJPkK7vlJNKBwssD+P8UFm U6EdQ+ZNGegt/mEUICV6zuHhBFor3aqfxoLGgDxjj5BSFvPMrpCZC2Uj4q6GtF4J X6j00vmO88yrw8TzuQUUj4nDUmCARCQzMj/gzQk+yzmkFhzg+FQfty+VGChrUKH6 QGry17obyQ/Pc8yxArO3zShKz5tUsBG+5ohpcsRw9m/a8JPN2s3ILl0wT4OT8rmi xKBnsLHSzjDPKV78Axg+3jDOpfzEzK/sjPEpJw00Uc3pwpvtcnFxAL/34ccwsH3Z DgTzn4V6TKGVk+XMi9oipvNczEezqXxKiZUQR4/cvtZ3g1lufzSkZLIOz0cD1ePF -----END CERTIFICATE-----Generated at Thu Apr 25 22:30:48 2024 by rpki-client on console-fra.rpki-client.org