
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa
File: 323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa (raw, json)
Hash identifier: aNrnrUu7fSc3pHcZ9FUNvIYSDwfoG8gaNO2qpZjTYT8=
Subject key identifier: A9:F5:37:7F:27:C4:01:37:72:21:88:CB:CF:21:29:51:20:FF:75:B3
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 3619CC9B00537B38DD5EFBF28BEB69765C207220
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa
Signing time: Mon 18 May 2026 09:21:33 +0000
ROA not before: Mon 18 May 2026 09:16:33 +0000
ROA not after: Mon 17 May 2027 09:21:33 +0000
asID: 141706
IP address blocks: 2602:feda:ae6::/47 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:19:cc:9b:00:53:7b:38:dd:5e:fb:f2:8b:eb:69:76:5c:20:72:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:33 2026 GMT
Not After : May 17 09:21:33 2027 GMT
Subject: CN=A9F5377F27C40137722188CBCF21295120FF75B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:f3:6d:ff:3a:8b:bd:1b:73:6b:22:f2:3d:
a7:d8:ea:62:60:73:ef:28:c1:11:25:8d:3a:16:2a:
fe:80:1f:2c:d4:c2:4c:9f:57:64:dd:48:ce:91:dd:
69:fc:12:a0:58:32:c2:e5:c7:e8:9f:a7:88:c6:db:
24:a5:6e:55:05:61:46:d3:e1:7c:51:bc:11:1f:4b:
8e:b0:93:4c:0d:6e:7c:bc:92:52:33:16:b4:b1:10:
29:98:34:31:fb:30:b6:96:57:e4:62:7a:d4:c3:e9:
21:9f:2c:a7:9e:2c:3c:d4:03:b1:7e:bb:ed:11:b6:
19:39:d9:b2:d3:2c:0c:a0:82:6e:4c:64:c6:5b:99:
9a:63:4d:c9:86:fe:1c:f4:35:95:75:5c:d2:76:b8:
e8:3f:28:f0:60:c6:68:5b:c2:35:f8:f6:15:26:64:
de:57:62:e1:8a:22:9d:7f:8f:79:50:a9:ad:db:57:
c7:3c:ce:50:42:db:5b:a9:2f:f2:f4:61:7d:01:1f:
44:f7:c8:60:74:10:51:7d:b0:fe:7b:a9:22:f9:69:
3a:77:b5:56:c6:88:81:f8:a6:32:ba:b2:1b:95:d9:
67:37:8d:3f:af:f0:7c:7a:c1:37:66:52:06:ad:91:
07:53:90:15:75:e1:62:12:aa:09:1e:60:a1:82:bb:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:37:7F:27:C4:01:37:72:21:88:CB:CF:21:29:51:20:FF:75:B3
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:ae6::/47
Signature Algorithm: sha256WithRSAEncryption
73:c5:05:03:31:54:d4:83:e3:4c:73:fd:4b:9f:0e:e1:c0:15:
43:09:d3:87:6f:c7:41:bd:aa:d3:1a:bc:94:0d:7a:3c:c0:57:
88:ae:fa:68:31:09:9c:fb:09:3d:b0:32:00:c4:19:dc:28:b1:
15:92:08:4d:0a:0c:bc:b0:76:90:a8:58:1b:5b:bd:ea:2f:aa:
37:be:85:de:a6:00:99:01:3c:04:b1:9e:2b:51:aa:fd:b7:9f:
80:17:e7:52:92:a7:53:84:76:28:dd:a6:2a:c3:e4:d8:a7:26:
69:97:56:93:08:51:74:3d:85:6f:d5:ab:a0:94:98:9e:44:d1:
23:09:01:d8:1c:fc:2b:e0:32:b7:e4:ca:39:e3:92:11:fc:9a:
3f:97:f5:f7:e1:09:ae:1e:fd:94:ec:4d:66:35:28:9b:f5:4c:
4f:77:3a:64:38:11:27:29:55:f7:eb:88:a4:f2:33:50:4a:df:
90:b3:63:cd:fa:d4:51:32:9c:93:a1:71:82:61:de:d9:10:b1:
07:b6:d4:f1:e7:63:f7:a8:12:ed:be:39:75:43:fc:89:16:1b:
4b:00:39:1e:bb:0a:fb:d3:98:a7:09:d8:ac:0a:37:40:1d:8b:
6a:02:de:a3:27:65:a2:20:35:1f:47:90:e0:e3:cf:8c:97:95:
90:85:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:10 2026 by rpki-client