
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
File: 323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa (raw, json)
Hash identifier: EqzBZA8GfrdqvVKNWiQv4SYksFYCu9Dr74yi7OjQN5I=
Subject key identifier: 4A:DF:B4:BF:11:9E:A4:6F:9D:10:08:80:42:D5:78:2E:B6:69:75:99
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 65CCBFFCFB34594668D7AE40F342A89A3EF4784B
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
Signing time: Mon 18 May 2026 09:21:38 +0000
ROA not before: Mon 18 May 2026 09:16:38 +0000
ROA not after: Mon 17 May 2027 09:21:38 +0000
asID: 205923
IP address blocks: 2602:feda:b8f::/48 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:cc:bf:fc:fb:34:59:46:68:d7:ae:40:f3:42:a8:9a:3e:f4:78:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:38 2026 GMT
Not After : May 17 09:21:38 2027 GMT
Subject: CN=4ADFB4BF119EA46F9D10088042D5782EB6697599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:62:d3:65:26:a1:41:09:a5:3b:bb:74:7f:
93:91:56:10:49:19:90:cd:80:6e:3c:ff:5a:03:e6:
28:7f:e6:8b:da:a6:45:b4:64:fc:8c:18:58:d7:98:
c9:fb:9f:a6:06:1f:77:97:c5:63:06:7f:b3:88:de:
6e:15:71:b6:9c:04:b5:7f:65:ba:3c:20:3f:9c:28:
50:ca:0a:88:30:7a:93:6e:1a:7a:50:f9:34:10:f6:
6e:9b:1e:11:a4:99:5b:cd:41:91:3b:1a:02:ef:a4:
61:11:3f:b6:45:0d:48:25:a3:43:5d:ae:0a:d6:f7:
96:ad:bc:ec:6d:ec:d9:ee:42:76:5d:f0:b3:bd:5c:
7b:f5:29:b8:8a:82:0e:69:65:82:d4:7d:90:09:e4:
4d:12:3c:cc:36:60:60:be:36:78:47:fc:f7:c0:9d:
3f:b3:bc:72:2e:3e:08:85:0c:e9:d0:7a:66:53:b6:
2d:9b:18:5f:58:bc:5e:97:45:21:d8:28:b8:d5:b2:
30:15:7e:a6:7c:87:7d:e6:bf:35:7b:23:b5:be:ab:
c8:4e:5b:04:63:ed:76:6d:99:45:c5:bf:1e:bb:74:
04:2f:10:09:29:70:f1:fd:d9:22:7e:18:ad:70:2f:
65:81:16:52:da:e6:30:f6:e7:48:20:9d:b1:52:18:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DF:B4:BF:11:9E:A4:6F:9D:10:08:80:42:D5:78:2E:B6:69:75:99
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b8f::/48
Signature Algorithm: sha256WithRSAEncryption
40:08:49:76:1c:b9:ac:5d:0c:0a:50:1f:ea:ba:62:53:f7:e0:
f4:b5:50:de:6a:a8:23:b5:c0:96:71:a2:1e:cf:30:6c:24:9f:
cc:d8:86:35:76:bf:e8:47:85:4f:e5:53:9a:1b:ed:1d:68:49:
0f:d4:68:51:c3:aa:91:13:d9:17:c7:42:d9:af:e9:13:33:ff:
b5:f1:a1:3a:07:b2:a3:ac:a1:d8:6b:93:9e:c0:eb:2a:47:4c:
38:c2:df:08:21:84:3a:8d:24:6c:19:07:88:46:a0:17:36:2e:
2b:64:2d:9d:c9:ba:ce:58:d2:67:f3:31:2e:30:f1:7a:1e:f9:
b9:c9:d8:66:6e:62:a4:dc:8c:14:8c:23:2c:09:aa:b5:65:d3:
68:98:7a:1c:3a:0a:0c:aa:bc:e1:87:b8:b3:19:28:9e:d7:80:
e5:23:39:e7:12:7e:44:5f:54:06:24:6b:7b:a5:d3:8d:6a:74:
86:1b:e6:cf:ee:f6:bc:2d:58:d5:00:5c:bc:f7:d5:35:95:06:
07:fe:8e:53:4d:f7:d5:fc:f7:ce:05:d8:dd:33:2f:e4:9b:e3:
bf:ca:ed:75:f0:60:55:59:07:c5:47:f8:14:a0:53:d1:ad:02:
3e:42:66:fd:d7:53:dd:c8:45:9a:6e:a0:1a:16:09:95:f7:fd:
bc:20:9f:e7
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUZcy//Ps0WUZo165A80Komj70eEswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM4WhcNMjcwNTE3MDkyMTM4
WjAzMTEwLwYDVQQDEyg0QURGQjRCRjExOUVBNDZGOUQxMDA4ODA0MkQ1NzgyRUI2
Njk3NTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBpi02UmoUEJ
pTu7dH+TkVYQSRmQzYBuPP9aA+Yof+aL2qZFtGT8jBhY15jJ+5+mBh93l8VjBn+z
iN5uFXG2nAS1f2W6PCA/nChQygqIMHqTbhp6UPk0EPZumx4RpJlbzUGROxoC76Rh
ET+2RQ1IJaNDXa4K1veWrbzsbezZ7kJ2XfCzvVx79Sm4ioIOaWWC1H2QCeRNEjzM
NmBgvjZ4R/z3wJ0/s7xyLj4IhQzp0HpmU7YtmxhfWLxel0Uh2Ci41bIwFX6mfId9
5r81eyO1vqvITlsEY+12bZlFxb8eu3QELxAJKXDx/dkifhitcC9lgRZS2uYw9udI
IJ2xUhgaWwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFErftL8RnqRvnRAIgELVeC62
aXWZMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjIzODY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM1MzkzMjMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAJgL+2guPMA0GCSqGSIb3DQEBCwUAA4IBAQBACEl2HLmsXQwKUB/qumJT
9+D0tVDeaqgjtcCWcaIezzBsJJ/M2IY1dr/oR4VP5VOaG+0daEkP1GhRw6qRE9kX
x0LZr+kTM/+18aE6B7KjrKHYa5OewOsqR0w4wt8IIYQ6jSRsGQeIRqAXNi4rZC2d
ybrOWNJn8zEuMPF6Hvm5ydhmbmKk3IwUjCMsCaq1ZdNomHocOgoMqrzhh7izGSie
14DlIznnEn5EX1QGJGt7pdONanSGG+bP7va8LVjVAFy899U1lQYH/o5TTffV/PfO
BdjdMy/km+O/yu118GBVWQfFR/gUoFPRrQI+Qmb911PdyEWabqAaFgmV9/28IJ/n
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:49 2026 by rpki-client