
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
File: 323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa (raw, json)
Hash identifier: pHXCq1d3bV8PAChACqD3odbkVfjv4YPNoyZbpH33OiQ=
Subject key identifier: C7:19:27:9D:B4:74:85:18:89:CB:2B:70:6E:27:53:4A:8B:D4:05:62
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 310FB6AAE5186EDA0235CF7212412B9B2A291FDB
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
Signing time: Mon 18 May 2026 09:21:39 +0000
ROA not before: Mon 18 May 2026 09:16:39 +0000
ROA not after: Mon 17 May 2027 09:21:39 +0000
asID: 133492
IP address blocks: 2602:feda:2d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0f:b6:aa:e5:18:6e:da:02:35:cf:72:12:41:2b:9b:2a:29:1f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:39 2026 GMT
Not After : May 17 09:21:39 2027 GMT
Subject: CN=C719279DB474851889CB2B706E27534A8BD40562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:93:1b:41:b4:81:ee:8e:94:74:3e:2b:f4:
cc:b7:3f:75:0d:72:da:e3:26:c4:28:38:49:e5:4e:
e3:2f:53:88:30:72:f6:6e:ed:8b:cf:2d:d7:8c:ee:
ed:cc:d1:e4:3c:5b:41:8f:f2:2e:11:6b:76:67:18:
58:1c:06:0f:96:ca:2f:14:ad:08:ec:39:fb:ce:6f:
1d:b3:f8:44:dd:22:d7:9f:f5:87:eb:6b:e2:5b:97:
2e:19:25:ab:c6:e5:75:f5:81:06:be:30:91:8f:52:
96:89:b0:79:2e:42:ad:5c:ca:6c:45:dc:ca:06:07:
75:5e:ec:6e:37:0a:d6:5a:f0:fa:93:94:af:74:d8:
aa:2e:81:42:c1:c6:c0:c6:69:86:58:f0:3a:07:32:
ea:4b:c2:51:95:42:e3:b1:ed:78:1f:ce:03:1c:dc:
5d:89:22:95:1c:5e:21:d0:60:3e:35:0f:61:ff:3e:
3f:88:5c:09:f8:d0:a1:51:8a:24:0d:d0:e3:19:f5:
58:b8:9c:cc:d0:bb:f2:c0:35:cb:a7:77:b7:fe:c7:
57:b8:d1:67:d5:db:5a:f2:88:ec:ee:62:1e:50:25:
ae:88:1f:68:d4:b3:a7:d6:7d:8b:1b:cd:ee:3d:0b:
f8:a9:2b:3b:08:9e:3e:29:4b:c5:6a:59:f9:d1:4a:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:27:9D:B4:74:85:18:89:CB:2B:70:6E:27:53:4A:8B:D4:05:62
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
91:be:36:3a:80:45:88:cd:a7:21:f8:44:cf:ba:5a:62:1e:de:
20:3c:14:ca:f9:e4:6f:8a:ad:ba:d9:c4:da:e3:79:31:23:87:
fd:b2:97:3f:03:4a:a8:af:09:95:24:2a:6c:b5:cd:ff:d6:d7:
83:49:d8:cc:ed:10:c4:ec:87:25:a4:c7:c5:33:e2:de:6d:e9:
66:57:af:61:b3:97:cf:3a:8a:a7:3f:76:4e:c0:dd:bb:69:84:
79:65:61:de:2e:47:fa:90:a1:2f:f7:c8:63:7a:d5:8e:96:62:
cd:b3:7c:76:13:ee:a0:82:11:66:0b:4c:04:f8:4c:7a:29:e7:
3f:f1:9f:5e:df:1e:3e:1a:7b:89:29:7c:27:36:82:35:71:38:
a0:ca:a8:64:8e:65:de:ed:74:02:04:4a:6d:45:c7:bb:11:8a:
7e:9e:af:30:e3:54:6a:c4:7e:b3:fb:56:e2:04:69:19:0e:7e:
98:3b:b0:1d:01:48:36:98:1d:f2:97:9b:50:ec:d7:95:fc:4e:
c8:8a:38:3d:86:b8:77:d1:7a:be:4a:75:b0:fd:c9:8c:71:59:
04:c7:6f:f6:0c:af:22:dd:de:dc:36:9f:e4:40:9c:28:1d:bb:
9f:e3:65:82:f8:79:50:a6:4d:b7:c8:76:1d:d0:2b:06:13:b4:
89:59:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:11 2026 by rpki-client