
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
File: 323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa (raw, json)
Hash identifier: WZiwOVMHSiUKlLzJbKcNnapzM8kJWaz8537cH+JWaIw=
Subject key identifier: 08:6A:8B:74:94:23:13:9B:5F:0C:78:43:07:1D:49:95:B5:AB:29:26
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 439CF16BEA3D422D7A6E2B65446417942114A255
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
Signing time: Mon 16 Jun 2025 08:52:24 +0000
ROA not before: Mon 16 Jun 2025 08:47:24 +0000
ROA not after: Mon 15 Jun 2026 08:52:24 +0000
asID: 146950
IP address blocks: 2602:feda:b60::/44 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 05:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9c:f1:6b:ea:3d:42:2d:7a:6e:2b:65:44:64:17:94:21:14:a2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: Jun 16 08:47:24 2025 GMT
Not After : Jun 15 08:52:24 2026 GMT
Subject: CN=086A8B749423139B5F0C7843071D4995B5AB2926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:27:6b:89:3c:6a:6e:57:d8:83:b6:30:f8:
ef:59:8d:ef:c2:32:36:90:b8:15:17:16:c1:1f:f2:
68:80:9a:a0:1b:90:d0:30:ed:8e:d5:f0:07:fe:f1:
c3:36:8e:bb:48:65:f4:ec:41:5c:4e:ff:a6:c2:ab:
ff:17:f0:d3:07:6b:dd:94:2a:db:d5:24:da:30:d7:
2d:30:6e:6d:f3:11:cb:b3:c0:f3:bf:92:2c:8d:b0:
f4:21:9a:c2:f6:d1:22:cb:c6:2c:05:33:47:7d:58:
3b:bd:b8:92:aa:40:9c:43:dd:bc:5a:1e:14:cd:cb:
0f:83:96:a7:0d:ca:ce:1b:37:b5:f6:a4:45:b4:b7:
4e:3c:0a:b3:52:b4:80:19:ec:6a:49:6e:96:dc:1e:
48:8d:e9:e9:32:08:4e:f7:e5:57:1b:77:d2:09:58:
3f:21:be:8d:66:7e:26:1d:c1:60:fe:01:56:d6:da:
9f:80:ee:b6:20:90:20:da:03:35:c2:a2:a3:7b:ce:
de:9b:60:ac:4c:03:54:65:3f:00:b3:53:98:fe:37:
af:40:da:70:f1:b4:3d:50:f2:64:32:86:9a:9a:38:
e0:f1:cc:d8:20:15:bc:b9:23:d5:ae:be:e1:fc:60:
7a:e6:45:f0:c0:ec:1e:a0:28:bb:f2:49:e6:aa:ff:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:8B:74:94:23:13:9B:5F:0C:78:43:07:1D:49:95:B5:AB:29:26
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b60::/44
Signature Algorithm: sha256WithRSAEncryption
3e:e1:c1:fe:f0:a3:bc:b4:0e:1c:10:91:62:bc:e7:4b:4c:66:
0b:f2:d1:9d:98:51:2d:30:58:b5:1e:83:62:97:1e:46:2d:de:
bb:5b:c9:b1:3b:c9:7c:a8:aa:9e:29:d5:d1:7f:5c:a4:0e:6b:
a9:62:e5:5a:ea:0a:d2:6a:4a:f2:03:49:ba:79:34:2a:15:5a:
83:c9:8c:96:f8:2a:a8:fd:ad:c0:8f:0a:9d:4a:89:67:c9:c8:
90:09:55:c2:5a:87:75:8a:e8:a3:b9:f5:9f:11:e8:35:8f:dd:
e2:4a:22:07:67:23:5d:3e:d4:6d:40:c7:7d:18:75:40:f5:28:
ee:8f:65:cb:9a:35:85:eb:38:0f:ef:d3:d8:a0:92:f3:0c:3c:
6d:29:f6:e5:09:ec:de:bc:4f:b3:7e:ce:c6:59:88:55:9a:84:
db:bd:b9:6d:4d:b8:73:44:87:f1:4e:8e:62:19:b0:1d:7a:56:
dd:58:a5:f5:ba:51:e5:c1:3b:8b:c1:ce:48:2e:64:a5:24:16:
ef:fc:20:85:16:51:ee:1d:6b:a5:f5:8f:b2:1f:77:05:f7:ce:
ae:e9:0b:aa:c3:34:9a:4d:81:4a:3c:73:ca:d6:66:75:b4:04:
10:7e:6f:b4:8d:b7:fa:d5:3f:60:87:8e:ba:55:48:0d:e3:a5:
74:13:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 08:11:29 2025 by rpki-client