
$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
File: 323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa (raw, json)
Hash identifier: w4LjuhNUBCN0h9q/d1cinVz7dAUStVZQCWNdCi/aSzw=
Subject key identifier: 45:08:29:32:DD:B2:7D:F0:87:AE:63:9E:B9:51:19:77:D1:AF:3E:29
Certificate issuer: /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial: 0E828C2753FAAB98CE664E4670387F77B01A1586
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access: rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
Signing time: Mon 18 May 2026 09:21:30 +0000
ROA not before: Mon 18 May 2026 09:16:30 +0000
ROA not after: Mon 17 May 2027 09:21:30 +0000
asID: 147071
IP address blocks: 2602:feda:df0::/44 maxlen: 48
Validation: OK
Signature path: rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 08:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:82:8c:27:53:fa:ab:98:ce:66:4e:46:70:38:7f:77:b0:1a:15:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Validity
Not Before: May 18 09:16:30 2026 GMT
Not After : May 17 09:21:30 2027 GMT
Subject: CN=45082932DDB27DF087AE639EB9511977D1AF3E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:02:d9:04:76:92:75:bb:ce:2c:4c:78:b0:
b7:ac:0c:ac:b4:21:77:fb:ef:fa:c3:70:72:84:bf:
17:09:93:06:cb:a6:d9:fc:0f:5f:32:d1:07:dc:e4:
92:91:21:87:a0:db:4a:ed:97:e1:27:b3:fb:23:c1:
9c:2c:ac:03:e8:f2:c5:d3:5b:38:1b:e7:c7:b5:e1:
94:88:73:20:3d:aa:43:b0:0b:18:9e:48:78:21:4b:
24:d5:e4:61:23:30:6e:a9:81:f9:cf:4b:8a:4b:49:
3b:1b:ba:29:8a:76:cc:69:fd:04:a9:e3:47:0d:22:
c0:7f:e8:4f:3a:dc:76:82:c0:57:b8:1d:14:6f:b2:
22:f7:3e:c3:ef:2c:68:41:df:40:56:89:25:7b:1d:
85:aa:b5:6c:02:e9:72:ba:d6:80:b7:93:b8:52:af:
3e:0d:fe:ac:4a:d5:e8:fa:20:f6:d3:70:e4:08:96:
b6:bf:84:5e:4f:e3:78:24:32:2d:fa:3a:34:b3:21:
02:a5:2a:08:ba:e7:ad:35:ae:78:63:b1:65:60:5f:
57:67:4f:11:9f:c7:eb:ea:8a:a8:43:62:d3:cd:29:
90:bd:ea:f8:df:4c:67:6a:f2:b5:17:98:af:53:bf:
bc:51:f7:c5:5a:f2:ef:4e:a2:f7:60:23:6c:a3:3e:
c6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:29:32:DD:B2:7D:F0:87:AE:63:9E:B9:51:19:77:D1:AF:3E:29
X509v3 Authority Key Identifier:
keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject Information Access:
Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:df0::/44
Signature Algorithm: sha256WithRSAEncryption
b7:4b:ba:3a:e1:1d:b6:84:9a:5b:1e:d5:8f:f5:10:60:d8:02:
6a:ab:da:a3:4a:77:0e:e9:50:56:13:17:37:13:d7:92:66:ff:
1c:8e:33:8b:2c:90:27:b6:80:3f:5b:f4:c5:34:d9:cc:70:d1:
8b:1a:0f:20:f4:66:52:6a:7e:88:23:68:3d:59:e6:44:39:b9:
6d:b0:46:d9:3a:7c:44:e7:f2:fc:1d:6f:b8:30:36:84:e0:d2:
e1:b2:91:c1:6a:1e:8f:ed:e4:62:ad:61:4c:14:b5:bc:1a:68:
0e:18:11:f7:8b:96:1a:24:09:52:e1:c6:39:5f:c6:3e:64:b8:
68:62:fe:4c:39:08:46:7f:86:91:de:33:17:c5:f7:51:5a:4f:
cd:22:17:5e:37:93:89:d1:59:9b:a1:92:dc:0f:2f:75:35:0c:
c6:25:bf:40:3f:90:1f:99:e3:e7:9a:ae:77:9f:e9:82:8a:de:
ae:d7:4a:26:9a:47:1d:29:47:12:49:a6:1d:00:29:58:3c:1f:
d7:0a:9a:49:9f:62:35:66:19:ba:e0:57:b8:fe:a6:3b:3e:9d:
bf:63:d0:d9:f7:50:bd:67:fd:d9:4e:7c:bf:ab:ad:1c:fe:b6:
d6:f8:e3:0e:9e:79:7e:ab:22:ee:98:7d:2f:5a:89:db:f5:5d:
d1:84:6b:dc
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUDoKMJ1P6q5jOZk5GcDh/d7AaFYYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMwWhcNMjcwNTE3MDkyMTMw
WjAzMTEwLwYDVQQDEyg0NTA4MjkzMkREQjI3REYwODdBRTYzOUVCOTUxMTk3N0Qx
QUYzRTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBUC2QR2knW7
zixMeLC3rAystCF3++/6w3ByhL8XCZMGy6bZ/A9fMtEH3OSSkSGHoNtK7ZfhJ7P7
I8GcLKwD6PLF01s4G+fHteGUiHMgPapDsAsYnkh4IUsk1eRhIzBuqYH5z0uKS0k7
G7opinbMaf0EqeNHDSLAf+hPOtx2gsBXuB0Ub7Ii9z7D7yxoQd9AVoklex2FqrVs
AulyutaAt5O4Uq8+Df6sStXo+iD203DkCJa2v4ReT+N4JDIt+jo0syECpSoIuuet
Na54Y7FlYF9XZ08Rn8fr6oqoQ2LTzSmQver430xnavK1F5ivU7+8UffFWvLvTqL3
YCNsoz7GGwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEUIKTLdsn3wh65jnrlRGXfR
rz4pMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjQ2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDM3MzAzNzMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2g3wMA0GCSqGSIb3DQEBCwUAA4IBAQC3S7o64R22hJpbHtWP9RBg
2AJqq9qjSncO6VBWExc3E9eSZv8cjjOLLJAntoA/W/TFNNnMcNGLGg8g9GZSan6I
I2g9WeZEObltsEbZOnxE5/L8HW+4MDaE4NLhspHBah6P7eRirWFMFLW8GmgOGBH3
i5YaJAlS4cY5X8Y+ZLhoYv5MOQhGf4aR3jMXxfdRWk/NIhdeN5OJ0VmboZLcDy91
NQzGJb9AP5AfmePnmq53n+mCit6u10ommkcdKUcSSaYdAClYPB/XCppJn2I1Zhm6
4Fe4/qY7Pp2/Y9DZ91C9Z/3ZTny/q60c/rbW+OMOnnl+qyLumH0vWonb9V3RhGvc
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:28 2026 by rpki-client