$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa File: 3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa (raw, json) Hash identifier: ryZSVIDLyrKtCRxjY40X5u4Xx9Sy1BzIdKMNpzwgfiw= Subject key identifier: 39:04:6C:19:E3:95:2A:80:13:32:CD:2B:83:F0:C3:13:1F:C8:36:F0 Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Certificate serial: 02ED600FDB600DA6E203F13754EEF9EE99901454 Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa Signing time: Mon 16 Jun 2025 08:52:22 +0000 ROA not before: Mon 16 Jun 2025 08:47:22 +0000 ROA not after: Mon 15 Jun 2026 08:52:22 +0000 asID: 46997 IP address blocks: 134.195.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ed:60:0f:db:60:0d:a6:e2:03:f1:37:54:ee:f9:ee:99:90:14:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18 Validity Not Before: Jun 16 08:47:22 2025 GMT Not After : Jun 15 08:52:22 2026 GMT Subject: CN=39046C19E3952A801332CD2B83F0C3131FC836F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:2b:f1:79:0b:e9:4e:c5:23:f6:55:f0:67: f3:d8:5d:5d:fe:7f:8e:1f:a3:e5:92:ad:11:d7:d5: b1:31:ee:e3:c1:d9:23:e1:92:3d:d8:4c:7c:24:ba: 0a:d6:b5:68:0b:05:60:15:03:66:83:25:05:79:b2: 1b:a3:cc:46:23:64:8d:7e:2d:25:ac:97:03:81:e2: a7:8c:a2:91:5b:d2:36:bd:ea:d4:ee:43:39:84:5c: dc:ce:6f:eb:a1:6a:b1:39:85:ff:e3:d1:c7:c0:75: 4d:8f:0d:4b:27:52:12:e7:70:d4:ff:ad:39:ad:44: 13:46:26:18:c0:34:01:e5:6d:ee:56:71:0f:a8:47: d7:3b:77:b7:8d:47:9f:8a:00:d2:1a:97:30:42:64: e1:84:f0:6f:b2:fd:ab:7f:f2:d1:7c:c4:ed:9a:d2: 49:b8:bd:41:89:5e:fa:7b:d9:b7:87:8b:0b:bd:b1: cd:df:8c:24:a6:6b:06:92:20:7a:b1:fb:8c:45:24: 90:2e:44:9b:a0:91:73:8e:e4:51:ef:64:d1:dc:fc: 10:21:38:b2:6c:0c:b5:f6:f3:26:2c:de:ff:38:73: 97:9c:71:e2:ea:82:f1:69:26:c5:27:69:d2:34:9e: be:07:81:71:b0:53:c3:00:10:28:8a:e0:13:54:91: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:04:6C:19:E3:95:2A:80:13:32:CD:2B:83:F0:C3:13:1F:C8:36:F0 X509v3 Authority Key Identifier: keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer Subject Information Access: Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.195.100.0/23 Signature Algorithm: sha256WithRSAEncryption 93:e8:0e:42:68:81:ba:43:ea:3a:14:dd:86:7c:42:11:0d:dd: 8e:72:e1:95:fc:24:cd:bd:8f:33:9b:9a:12:76:26:47:62:7f: 1d:30:8f:53:09:df:bd:9a:06:20:bd:f1:6a:bd:21:2a:94:80: a1:34:2a:61:c7:21:ff:6e:f3:6e:52:0b:8b:14:8b:43:d4:86: 31:68:a3:ca:25:ee:c0:e6:e2:e2:3f:ff:89:3a:1c:70:fd:d8: 9d:48:c4:ca:ad:4f:c5:57:87:a8:7b:b6:e0:d6:88:65:31:87: 9a:58:17:b3:98:3e:f4:99:e1:8e:44:a3:cd:8b:60:f0:09:9f: 40:70:84:7f:6d:20:92:df:f4:30:86:8b:0d:58:95:69:78:40: 48:6e:66:79:75:52:ab:7b:28:e3:e1:39:8a:98:02:d7:8a:5c: cf:53:a7:d0:39:fe:9c:79:8d:59:1f:6f:f6:86:19:96:b3:b2: dd:8c:55:75:d4:0f:51:af:1b:78:a4:1c:a7:39:46:f4:6d:11: be:37:6a:b9:b0:dd:a7:fa:b2:18:ad:db:de:96:0e:4f:7c:7d: fe:a8:44:31:a7:58:6b:21:64:07:c6:71:74:4f:4e:20:0d:a4: 22:c4:0e:a4:67:5e:36:ba:ad:31:e5:6a:ff:f9:79:e0:d0:70: 0c:8d:ec:6a -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIUAu1gD9tgDabiA/E3VO757pmQFFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzIyWhcNMjYwNjE1MDg1MjIy WjAzMTEwLwYDVQQDEygzOTA0NkMxOUUzOTUyQTgwMTMzMkNEMkI4M0YwQzMxMzFG QzgzNkYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv8r8XkL6U7F I/ZV8Gfz2F1d/n+OH6Plkq0R19WxMe7jwdkj4ZI92Ex8JLoK1rVoCwVgFQNmgyUF ebIbo8xGI2SNfi0lrJcDgeKnjKKRW9I2verU7kM5hFzczm/roWqxOYX/49HHwHVN jw1LJ1IS53DU/605rUQTRiYYwDQB5W3uVnEPqEfXO3e3jUefigDSGpcwQmThhPBv sv2rf/LRfMTtmtJJuL1BiV76e9m3h4sLvbHN34wkpmsGkiB6sfuMRSSQLkSboJFz juRR72TR3PwQITiybAy19vMmLN7/OHOXnHHi6oLxaSbFJ2nSNJ6+B4FxsFPDABAo iuATVJH4TwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFDkEbBnjlSqAEzLNK4PwwxMf yDbwMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2 OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5 NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzMzM0MmUzMTM5MzUyZTMxMzAz MDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzYzOTM5Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGG w2QwDQYJKoZIhvcNAQELBQADggEBAJPoDkJogbpD6joU3YZ8QhEN3Y5y4ZX8JM29 jzObmhJ2Jkdifx0wj1MJ372aBiC98Wq9ISqUgKE0KmHHIf9u825SC4sUi0PUhjFo o8ol7sDm4uI//4k6HHD92J1IxMqtT8VXh6h7tuDWiGUxh5pYF7OYPvSZ4Y5Eo82L YPAJn0BwhH9tIJLf9DCGiw1YlWl4QEhuZnl1Uqt7KOPhOYqYAteKXM9Tp9A5/px5 jVkfb/aGGZazst2MVXXUD1GvG3ikHKc5RvRtEb43armw3af6shit296WDk98ff6o RDGnWGshZAfGcXRPTiANpCLEDqRnXja6rTHlav/5eeDQcAyN7Go= -----END CERTIFICATE-----Generated at Mon Oct 27 12:32:04 2025 by rpki-client