
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa
File: 323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa (raw, json)
Hash identifier: f8OLu93WTVOAz5n7hqyplRd5Q/i3wfZDsVurazJot/s=
Subject key identifier: FD:A6:7A:CF:A2:E6:54:CB:BB:88:78:56:09:9D:40:B1:CE:3A:F1:9A
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 45A33537F614E29868A0E462B84CE1F4EC7D9AE2
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa
Signing time: Mon 18 May 2026 09:21:34 +0000
ROA not before: Mon 18 May 2026 09:16:34 +0000
ROA not after: Mon 17 May 2027 09:21:34 +0000
asID: 396303
IP address blocks: 2602:feda:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a3:35:37:f6:14:e2:98:68:a0:e4:62:b8:4c:e1:f4:ec:7d:9a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:34 2026 GMT
Not After : May 17 09:21:34 2027 GMT
Subject: CN=FDA67ACFA2E654CBBB887856099D40B1CE3AF19A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:0d:48:a2:7f:a9:e8:f7:72:6d:ac:51:2f:
10:62:30:5d:93:f6:fa:ca:f2:01:66:01:59:69:12:
d6:29:46:40:25:77:c8:18:60:a9:c6:80:91:ac:f6:
d7:f5:9c:45:3e:47:64:c8:c3:9e:5d:e9:06:cd:90:
e7:8f:14:d6:d0:83:57:07:50:43:64:3c:cd:c8:f8:
b6:7c:bc:dd:99:a4:75:a0:05:c0:77:07:3f:37:43:
db:b7:94:a4:cb:48:51:c4:0e:ab:af:c8:f6:ff:47:
ec:33:03:7b:e1:d9:52:98:fe:fb:22:2a:ee:ca:33:
8c:cd:2d:74:83:3f:41:c8:c2:f6:7f:d2:4e:21:71:
ec:9d:24:08:72:83:1f:47:fa:29:3c:b5:05:11:cb:
b8:52:e3:bd:45:c5:a9:fe:8f:12:12:65:07:4d:4b:
f5:a7:73:70:c1:6c:fc:09:ad:25:5f:fc:c7:e3:d2:
a1:92:20:ac:34:1a:82:8e:b1:6c:cc:b2:da:87:f0:
43:d6:f9:c9:80:f2:24:29:e7:e2:d2:96:f6:59:c2:
bb:eb:a5:dc:35:c4:a0:38:d3:e8:5e:f7:81:5c:d1:
d3:6b:69:4b:39:35:b1:3c:c1:84:35:ae:b0:20:72:
70:bf:56:4d:26:90:32:8a:70:23:78:48:a5:a4:a2:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:7A:CF:A2:E6:54:CB:BB:88:78:56:09:9D:40:B1:CE:3A:F1:9A
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:1::/48
Signature Algorithm: sha256WithRSAEncryption
c9:ae:18:97:b9:da:a7:d6:c5:63:f0:ee:77:ad:19:f8:3b:27:
75:4d:02:88:10:8b:a2:3a:72:74:ec:58:c0:4e:4e:25:ea:e2:
2a:60:7c:84:76:57:6a:5d:18:ab:f5:0d:cd:3a:9f:1e:67:f0:
b4:2c:c0:be:c9:06:90:ab:e4:5d:ed:d3:7a:14:43:ef:fb:20:
f1:76:cf:1d:c0:5f:fa:99:39:c2:4a:1a:99:e0:16:bc:1f:fc:
ad:26:ff:ad:9e:cd:c1:80:72:a9:14:c3:71:66:03:22:aa:0f:
c1:ce:16:6a:31:65:df:75:cd:d9:b4:b0:14:24:fd:22:80:51:
8b:b2:2d:d4:16:13:62:b9:32:8e:b0:a5:93:0e:8b:c9:ed:ec:
c9:b8:be:c5:55:8a:0b:78:fc:6f:a4:eb:6f:7f:3d:3d:2e:28:
b7:2e:59:c2:7b:ab:80:20:b5:04:82:37:cb:19:07:98:09:5a:
af:0e:cf:45:24:f1:22:04:76:fa:4c:b6:b1:69:59:90:be:b8:
e9:70:9e:95:9a:47:2f:20:5e:e1:60:5c:ba:bb:25:62:2d:53:
0e:d3:c1:0c:2a:8d:d9:dd:80:bc:9b:09:15:65:02:02:05:de:
19:7b:b4:78:31:d3:9c:4f:c7:f4:62:c8:4c:f0:78:84:85:94:
86:ed:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:15:45 2026 by rpki-client