
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
File: 323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa (raw, json)
Hash identifier: /9D0/wXJRrzRaxNyi9VelXEHRBLacat9uq9JwBenoRU=
Subject key identifier: 74:3F:9A:24:61:3F:7C:31:2E:26:89:3D:64:86:4C:E3:4D:FD:E2:BE
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 6ED85F73EA029C194031A3D0ACD0D88452909F46
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
Signing time: Mon 18 May 2026 09:21:36 +0000
ROA not before: Mon 18 May 2026 09:16:36 +0000
ROA not after: Mon 17 May 2027 09:21:36 +0000
asID: 212360
IP address blocks: 2602:feda:c90::/44 maxlen: 64
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d8:5f:73:ea:02:9c:19:40:31:a3:d0:ac:d0:d8:84:52:90:9f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:36 2026 GMT
Not After : May 17 09:21:36 2027 GMT
Subject: CN=743F9A24613F7C312E26893D64864CE34DFDE2BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:74:d3:37:57:bd:35:1a:78:bb:c4:89:38:
f3:5d:ec:a6:d7:47:13:2a:a8:e8:fa:b5:cb:86:6e:
4f:f5:9c:08:61:57:62:0b:6b:ad:24:06:76:bd:61:
c0:70:b8:05:d2:24:3b:2a:be:3d:39:b0:eb:d5:e6:
3d:c1:15:c7:c6:10:94:62:f9:64:61:d0:f6:f6:f5:
36:8d:78:21:9a:0d:91:d5:28:99:cf:8f:3a:c8:7b:
f7:9f:07:16:57:f9:68:b0:80:e4:7c:d0:ac:5b:df:
59:91:e7:76:24:71:e6:c7:73:0c:fb:a5:a3:9d:52:
e1:55:8a:3a:8b:55:ce:a2:4e:92:1e:6e:03:f2:8d:
4a:8d:cb:32:1d:80:5b:7a:81:20:4a:21:5a:5e:a1:
1b:90:7a:2e:65:f8:54:f0:c6:8d:a0:03:bd:0e:7b:
64:56:a7:cf:3d:07:52:6a:29:a1:c1:d7:75:f3:e4:
bc:1f:e2:b5:4f:e0:93:94:55:be:29:74:7b:9a:2a:
bf:0a:e8:55:d7:b7:31:1d:21:66:7b:19:72:55:22:
b8:6f:0a:4a:fe:ba:b3:51:09:88:c8:15:42:96:e8:
95:0a:00:a1:b8:7f:50:e0:35:5a:19:90:d1:5d:30:
95:b5:50:28:30:72:8c:6f:41:6d:d5:fd:95:f7:f3:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3F:9A:24:61:3F:7C:31:2E:26:89:3D:64:86:4C:E3:4D:FD:E2:BE
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:c90::/44
Signature Algorithm: sha256WithRSAEncryption
05:6a:64:8e:7e:0d:28:e1:1f:ce:92:fd:fc:d4:85:02:23:8f:
9b:40:5b:6f:e8:36:d3:cd:32:e4:a0:ce:d3:14:d5:77:52:65:
47:5b:e9:d3:43:a5:14:75:1a:d6:be:32:0b:df:a3:16:d8:84:
29:63:f7:ee:bf:55:01:0b:8c:b3:4f:6e:d9:c4:d6:cc:f9:a5:
83:fa:0b:18:9a:3c:59:59:da:06:dc:5d:24:d4:46:85:37:72:
cc:39:71:11:fc:4d:95:8e:a7:0e:75:9c:bb:de:5f:9a:e0:81:
1b:d9:c4:85:77:1f:7f:58:86:2c:46:dc:e9:5e:98:8d:71:2d:
6c:7a:c2:97:5a:73:71:d1:a2:d8:7f:97:1e:5f:38:de:a9:8d:
da:50:2e:15:af:aa:67:0c:28:7b:dd:c2:91:05:f2:35:cc:a4:
56:ba:54:fb:5a:bb:cd:88:da:88:24:d1:64:92:a9:a5:23:eb:
13:7a:84:8a:2d:4b:f0:42:43:ef:83:04:f9:1d:37:10:ef:cd:
a2:8f:19:5a:f6:92:b0:68:74:7f:77:31:1b:9a:29:a7:c3:34:
1f:ec:ac:6d:17:8a:d8:84:b2:4a:56:80:09:7d:73:fa:88:f1:
6f:11:16:c6:a0:c5:06:08:73:0e:cc:af:39:85:04:86:80:a9:
3b:40:b3:5d
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUbthfc+oCnBlAMaPQrNDYhFKQn0YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM2WhcNMjcwNTE3MDkyMTM2
WjAzMTEwLwYDVQQDEyg3NDNGOUEyNDYxM0Y3QzMxMkUyNjg5M0Q2NDg2NENFMzRE
RkRFMkJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm100zdXvTUa
eLvEiTjzXeym10cTKqjo+rXLhm5P9ZwIYVdiC2utJAZ2vWHAcLgF0iQ7Kr49ObDr
1eY9wRXHxhCUYvlkYdD29vU2jXghmg2R1SiZz486yHv3nwcWV/losIDkfNCsW99Z
ked2JHHmx3MM+6WjnVLhVYo6i1XOok6SHm4D8o1KjcsyHYBbeoEgSiFaXqEbkHou
ZfhU8MaNoAO9DntkVqfPPQdSaimhwdd18+S8H+K1T+CTlFW+KXR7miq/CuhV17cx
HSFmexlyVSK4bwpK/rqzUQmIyBVCluiVCgChuH9Q4DVaGZDRXTCVtVAoMHKMb0Ft
1f2V9/M84wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHQ/miRhP3wxLiaJPWSGTONN
/eK+MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjMzOTMwM2EzYTJmMzQzNDJkMzYzNDIwM2QzZTIwMzIzMTMyMzMzNjMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2gyQMA0GCSqGSIb3DQEBCwUAA4IBAQAFamSOfg0o4R/Okv381IUC
I4+bQFtv6DbTzTLkoM7TFNV3UmVHW+nTQ6UUdRrWvjIL36MW2IQpY/fuv1UBC4yz
T27ZxNbM+aWD+gsYmjxZWdoG3F0k1EaFN3LMOXER/E2VjqcOdZy73l+a4IEb2cSF
dx9/WIYsRtzpXpiNcS1sesKXWnNx0aLYf5ceXzjeqY3aUC4Vr6pnDCh73cKRBfI1
zKRWulT7WrvNiNqIJNFkkqmlI+sTeoSKLUvwQkPvgwT5HTcQ782ijxla9pKwaHR/
dzEbmimnwzQf7KxtF4rYhLJKVoAJfXP6iPFvERbGoMUGCHMOzK85hQSGgKk7QLNd
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:20 2026 by rpki-client