
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa
File: 323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa (raw, json)
Hash identifier: NaIjp/XHkN+olwkz9e6IN6r7j+Zw8mt3T4C5C87LIa4=
Subject key identifier: F2:B0:54:74:27:F3:5D:42:9D:3E:80:DF:FC:0A:18:ED:25:90:5D:E9
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 17E310AB2A1356910E9F88E38B06B02BE8A805B9
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa
Signing time: Mon 18 May 2026 09:21:38 +0000
ROA not before: Mon 18 May 2026 09:16:38 +0000
ROA not after: Mon 17 May 2027 09:21:38 +0000
asID: 142427
IP address blocks: 2602:feda:dc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e3:10:ab:2a:13:56:91:0e:9f:88:e3:8b:06:b0:2b:e8:a8:05:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:38 2026 GMT
Not After : May 17 09:21:38 2027 GMT
Subject: CN=F2B0547427F35D429D3E80DFFC0A18ED25905DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:b1:c1:88:06:d4:81:b6:16:f2:4f:ff:56:
5f:8c:b9:6a:9c:25:71:23:ad:84:46:75:35:06:c6:
3c:7a:e0:48:1e:7f:d3:94:c4:d2:7c:2a:31:e8:1d:
66:06:69:ab:cf:24:4c:0c:37:6c:5a:6a:fb:56:ba:
bc:7f:2b:53:73:9d:76:f2:05:ff:1b:fc:fc:4a:79:
9d:f6:ca:5f:17:3b:5a:d5:c1:4f:68:9f:d6:74:4b:
49:99:34:5f:fc:03:6e:c7:7f:29:9d:5c:ab:0d:e5:
c6:1f:df:05:28:42:82:b1:c1:44:ae:e2:23:e8:d6:
98:79:05:24:15:90:a6:f5:1a:12:0b:b5:fe:a6:67:
5f:2b:be:ed:64:fc:41:02:b1:65:11:1a:7a:d0:40:
e1:85:1e:41:bc:d1:69:fb:70:58:03:f3:1b:0c:78:
fc:00:71:7e:e8:20:c3:06:ba:90:98:d4:f0:f2:66:
2d:ca:45:17:5a:eb:5f:5b:7d:16:ae:ca:42:ff:82:
b9:d3:37:28:a9:29:c4:1d:58:e0:4d:c3:a3:ed:d2:
86:35:50:7f:bc:b1:18:01:f1:16:0d:9e:e5:ce:0f:
ee:c5:43:e4:88:99:b6:36:25:63:8c:97:73:79:84:
f0:ac:bf:46:81:c6:f0:8a:23:aa:36:e8:6c:fb:e8:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:54:74:27:F3:5D:42:9D:3E:80:DF:FC:0A:18:ED:25:90:5D:E9
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:dc0::/44
Signature Algorithm: sha256WithRSAEncryption
ba:40:c6:ab:a9:43:07:b0:66:f1:eb:72:be:6c:a9:4b:ff:8a:
bf:3c:f7:28:22:d0:4e:ae:81:5f:7c:2f:78:af:42:bc:ae:12:
68:0c:83:09:ba:fc:90:8e:f0:a3:5f:75:b1:44:42:46:5c:bf:
cd:8d:b9:29:9a:9d:c2:4d:1a:1c:38:2d:84:55:64:6a:b8:7f:
17:75:af:f7:94:58:7a:bd:73:42:75:74:68:bf:b3:95:e7:6c:
c6:79:79:e0:7d:a0:06:cd:e0:db:30:36:e3:9a:eb:6f:e0:e7:
3a:38:9e:cb:7c:a7:19:25:9f:55:9b:ff:c6:c9:97:8a:63:24:
2a:24:f2:90:9e:a6:c3:db:8d:ba:84:04:e3:c0:6f:d3:14:ec:
3b:d4:4d:5c:f4:5d:99:75:28:3c:2e:0c:92:f7:85:8b:04:3b:
1b:b6:e1:4c:a9:13:70:c9:77:4e:43:f3:50:48:81:3e:b6:7e:
71:b6:2f:b5:1b:87:c0:1c:2e:b8:b1:98:47:3e:eb:23:9e:fd:
fc:80:50:fe:3b:dc:7d:0a:c3:da:10:5c:5a:5e:5c:7b:d3:86:
3a:aa:ab:44:dd:fe:7f:fa:c1:f5:f5:f5:1f:90:ee:cd:1d:e8:
3c:c2:68:6f:38:43:01:61:6b:af:80:fe:34:44:99:34:54:64:
c9:ad:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:48 2026 by rpki-client