
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa
File: 323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa (raw, json)
Hash identifier: /jHyFNQQfvCARBhOuW3u1hvUzhxS+z61qJdqeeCmXwA=
Subject key identifier: B6:D6:F8:5A:B4:92:70:B5:DB:72:59:06:B7:77:46:68:10:92:FB:8D
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 4E5BFFFEED7EF286ED73869DCC919AFBD6DE23AD
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa
Signing time: Mon 18 May 2026 09:21:36 +0000
ROA not before: Mon 18 May 2026 09:16:36 +0000
ROA not after: Mon 17 May 2027 09:21:36 +0000
asID: 207632
IP address blocks: 2602:feda:3e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5b:ff:fe:ed:7e:f2:86:ed:73:86:9d:cc:91:9a:fb:d6:de:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:36 2026 GMT
Not After : May 17 09:21:36 2027 GMT
Subject: CN=B6D6F85AB49270B5DB725906B77746681092FB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:d9:48:3c:30:81:a1:26:0d:3b:bd:33:a4:
88:e4:e5:d3:fa:1a:f6:91:66:21:75:e0:62:5b:ca:
ae:ac:dc:5a:30:bb:f5:d2:28:e0:cd:15:c2:16:94:
ee:92:c3:e2:64:a4:8b:54:c0:58:9e:93:27:5d:6c:
50:b7:ea:92:d6:f9:4d:58:1a:2d:b8:85:be:ec:b3:
67:5b:43:01:e7:c2:75:c9:8f:ad:28:51:74:c5:eb:
46:13:4f:f8:37:24:35:64:92:51:a6:44:6f:9b:cf:
63:81:b1:f0:34:14:e0:a9:a5:9a:32:0f:25:bc:74:
bb:de:c0:79:74:9a:4a:c2:4b:7b:d8:71:5d:69:ac:
43:1c:36:34:16:fc:17:12:1b:4d:13:62:cc:0c:b2:
67:12:d9:26:4f:c1:0c:09:40:69:35:4c:6e:85:49:
53:f3:fa:97:27:0d:c9:21:15:4c:2f:d5:23:4d:32:
d0:5c:1a:39:ab:cb:52:9a:f9:b0:1a:fd:fe:bb:ce:
71:e0:7c:5e:b4:d2:6b:9d:c7:a9:53:3a:de:61:ff:
65:e8:f2:58:cd:8d:c4:78:eb:52:c8:8a:ba:e3:20:
1b:0d:bb:bf:7f:85:f5:e4:d5:a8:d7:b0:0e:ea:49:
bd:d6:d9:2f:b9:43:1f:5a:90:64:d4:89:56:4c:ea:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D6:F8:5A:B4:92:70:B5:DB:72:59:06:B7:77:46:68:10:92:FB:8D
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:3e0::/44
Signature Algorithm: sha256WithRSAEncryption
4f:76:3f:17:ec:a6:cf:c8:4f:5f:8a:ad:12:6b:c3:47:6d:f2:
b7:84:4c:a2:7b:d6:55:45:f9:0d:3b:2e:ac:45:cb:62:fb:62:
73:3d:90:98:19:7c:12:ec:fe:c3:ec:01:ae:24:74:3b:fa:79:
64:c9:76:1d:b6:06:cd:a3:19:14:81:0a:80:fb:b8:1b:14:79:
ae:72:1a:98:2b:e6:0f:6c:71:92:1c:d8:5b:43:4f:f8:5b:f2:
83:ef:cb:d2:61:5b:e8:ab:f8:be:66:7a:aa:80:7e:ba:07:6f:
ab:1d:ee:dd:12:5a:07:ae:0e:47:82:64:c3:55:e7:d2:a3:04:
c1:78:c5:9d:70:9c:7d:5a:8f:94:75:54:e6:fc:d8:eb:ac:c0:
d3:b9:f3:2b:22:97:2f:a8:ea:c6:e3:40:bf:35:e3:e6:f1:3f:
74:14:b7:cc:3f:89:66:d5:39:9f:3f:85:7a:32:d1:19:37:dd:
9d:6a:4b:61:d1:1c:8e:14:ed:bd:96:89:26:35:26:06:9e:47:
a1:6b:94:fc:34:2b:92:53:6b:1b:2b:ad:03:2f:8f:89:97:c3:
64:70:54:b4:b0:48:3f:52:7b:f8:5f:42:20:41:15:23:14:6e:
98:41:e6:16:da:db:b2:4b:13:e5:e4:49:43:8a:87:1c:1b:a4:
44:55:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:19 2026 by rpki-client